PRIVACY POLICY
Last updated: 2 July 2025
This Privacy Policy applies between you, the User of this Website, and Sarah Diedro Jordão, the owner and provider of this Website. Sarah Diedro Jordão (But What If You Thrive) takes the privacy of your information very seriously.
This Privacy Policy applies to our use of any and all Data collected by us or provided by you in relation to your use of the Website.
Please read this Privacy Policy carefully.
Definitions and Interpretation
In this Privacy Policy, the following definitions are used: Data Collectively all information that you submit to us via the Website. This definition incorporates, where applicable, the definitions provided in the Data Protection Laws.
Cookies
A small text file placed on your computer by this Website when you visit certain parts of the Website and/or when you use certain features. Details of the cookies used are set out below.
Data Protection Laws
All applicable data protection and privacy legislation, including Regulation (EU) 2016/679 (General Data Protection Regulation), Law no. 58/2019 of Portugal, and any other applicable European or national laws.
GDPR
The General Data Protection Regulation (EU) 2016/679.
We, Us, or Our
Sarah Diedro Jordão, trading as But What If You Thrive, based in Lisbon, Portugal.
User or You
Any third party that accesses the Website and is not either:
employed by Sarah Diedro Jordão and acting in the course of their employment, or
engaged as a consultant or providing services to Sarah Diedro Jordão and accessing the Website in connection with such services.
Website www.butwhatifyouthrive.com and any sub-domains unless expressly excluded.
Scope of This Privacy Policy
This Privacy Policy applies only to the actions of Sarah Diedro Jordão and Users with respect to this Website.
It does not extend to any websites accessible from this Website, including links to social media.
For purposes of the applicable Data Protection Laws, Sarah Diedro Jordão is the Data Controller. This means she determines the purposes for which and the way your Data is processed.
Data Collected
We may collect the following Data, including Personal Data:
Name
Email address
Phone number
Gender (if voluntarily provided)
Payment details (processed securely via third-party providers)
Technical information such as IP address, browser type, and operating system
How We Collect Data
Data is collected in the following ways:
Data given to us by you (e.g., forms, emails, subscriptions)
Data received from third parties (e.g., payment processors)
Data collected automatically (e.g., via Cookies)
Data Provided by You
You provide Data when you:
Contact us via the Website, email, or phone
Register or subscribe for services
Participate in surveys or feedback
Make payments
Opt in to marketing communications
Data from Third Parties
We may receive Data from:
Payment processors (Stripe)
Booking or scheduling platforms (Calendly, Acuity)
Analytics providers (Google Analytics)
Email platforms (Mailchimp, Substack)
Data Collected Automatically
When you visit the Website, we automatically collect:
IP address
Date, times, and frequency of visits
Usage and interaction data
Cookies (see below)
Use of Data
We may use your Data to:
Provide our services
Process payments and bookings
Send marketing and updates (with consent)
Improve the Website and services
Keep internal records
Comply with legal obligations
Legal Bases for Processing:
Your consent
Contractual necessity
Legitimate interests
Compliance with legal obligations
Marketing Communications
We may send you marketing emails if:
You have opted in, or
You have previously purchased services and have not opted out ("soft opt-in")
You can withdraw consent or unsubscribe at any time via the link in our emails or by contacting us.
Who We Share Data With
We may share your Data with:
Payment processors (Stripe)
Email and CRM platforms (Mailchimp)
Analytics services (Google Analytics)
Professional advisors and subcontractors
All third parties are required to process Data in accordance with this Privacy Policy and GDPR.
Keeping Data Secure
We use technical and organisational measures to protect your Data, including:
Secure servers
Encryption where appropriate
Access controls
If you suspect any misuse of your Data, please contact us immediately at hello@butwhatifyouthrive.com.
Data Retention
We retain Data:
As long as necessary to provide the services
As required by law (e.g., tax and accounting)
Until you request deletion, unless we must keep it for legal reasons
Your Rights
Under GDPR, you have the right to:
Access your Data
Rectify inaccurate Data
Request erasure ("right to be forgotten")
Restrict processing
Object to processing
Data portability
To exercise any of these rights, email hello@butwhatifyouthrive.com.
You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).
International Transfers
Data may be processed outside the EEA (e.g., by Mailchimp or Stripe). We ensure appropriate safeguards such as:
EU Standard Contractual Clauses
Compliance with the GDPR
Cookies
We use Cookies to:
Understand usage patterns
Improve functionality
Personalise your experience
Types of Cookies:
Necessary: essential for Website operation
Analytical: measure site usage
Functionality: remember your preferences
Targeting: deliver relevant content and ads
Before placing non-essential Cookies, we ask for your consent. You can manage Cookies via your browser settings.
For more, see our Cookies Policy (or include below).
Links to Other Websites
This Privacy Policy does not apply to any third-party websites we link to. You should review their privacy policies before using them.
Changes of Business Ownership and Control
If ownership changes, your Data may be transferred to the new owner, subject to the same protections.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on the Website. Continued use of the Website means you accept the updated policy.
Contact
For any questions about this Privacy Policy or your Data, please email:
hello@butwhatifyouthrive.com