Privacy Policy

Privacy Policy

This policy applies to all personal data collected through the Cora website and in the course of providing services. It is written in compliance with the EU General Data Protection Regulation (GDPR).

1. Who We Are

Cora is a fractional operations and business support practice operated by Clarice Glahn, based in Lisbon, Portugal. References to “we”, “us”, or “Cora” in this policy refer to this practice.

For any questions about this policy or how your data is handled, you can contact us at clarice@corasupport.com.

2. What Data We Collect and Why

When you contact us

When you submit a contact form, send an email, or reach out through any other channel on this website, we collect the information you provide — typically your name, email address, company name, and the content of your message. We use this to respond to your enquiry and to assess whether there is a fit for working together.

The legal basis for this processing is our legitimate interest in responding to business enquiries (Article 6(1)(f) GDPR).

When you become a client

In the course of providing services, we may collect and process additional personal data as needed to fulfil the engagement. This will be set out in the service agreement between us. The legal basis for this processing is the performance of a contract (Article 6(1)(b) GDPR).

Website analytics

We may collect basic analytics data about how visitors use this website, such as pages visited and time spent. Where this data is collected using cookies or similar technologies, we will ask for your consent before doing so. The legal basis for this processing is consent (Article 6(1)(a) GDPR).

What we do not do

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling. We do not send unsolicited marketing communications.

3. How Long We Keep Your Data

Enquiry data from people who do not become clients is retained for up to 12 months, after which it is deleted unless there is an ongoing reason to keep it.

Data relating to active or former client engagements is retained for as long as required to fulfil legal and contractual obligations, typically up to 7 years in line with Portuguese tax and accounting requirements.

You may request deletion of your data at any time, subject to any legal obligations that require us to retain it.

4. Who We Share Your Data With

We do not share your personal data with third parties except in the following circumstances:

  • With contractors or collaborators who support the delivery of services to you, where they are bound by equivalent data protection obligations.
  • With service providers who help us operate the website and our business tools (such as email and project management platforms), where they process data on our behalf under a data processing agreement.
  • Where required by law or a regulatory authority.

Any third parties we work with are required to handle your data in accordance with applicable data protection law.

5. Your Rights

Under the GDPR, you have the following rights in relation to your personal data:

  • Right of access — you can request a copy of the personal data we hold about you.
  • Right to rectification — you can ask us to correct inaccurate or incomplete data.
  • Right to erasure — you can ask us to delete your data, subject to any legal obligations that require us to retain it.
  • Right to restriction — you can ask us to limit how we use your data in certain circumstances.
  • Right to data portability — where processing is based on consent or contract, you can request your data in a machine-readable format.
  • Right to object — you can object to processing based on legitimate interests.
  • Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at clarice@corasupport.com. We will respond within 30 days.

If you are not satisfied with how we handle your data or your request, you have the right to lodge a complaint with the supervisory authority in your country of residence. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD) at www.cnpd.pt.

7. Cookies

This website may use cookies to improve your experience and to collect basic analytics data. Where non-essential cookies are used, we will ask for your consent before placing them.

You can control and delete cookies through your browser settings at any time. Disabling cookies may affect some functionality of the website.

8. Changes to This Policy

We may update this policy from time to time. When we do, we will update the date at the top of the page. If there are significant changes, we will take reasonable steps to inform you where we hold your contact details.

We encourage you to review this page periodically to stay informed about how we handle your data.