top of page

Privacy Policy

Business registered: Tomar, Portugal 
Last updated: 31-08-2026

At "doable", your privacy is important to us. We are committed to protecting your personal information and being transparent about how it is collected, used, and stored. This Privacy Policy explains our practices when you use our website, enrol in courses or interact with our services.​​

1. Data Controller

Natalie Menezes, registered in Tomar, Portugal, is the data controller for the purposes of the EU General Data Protection Regulation (GDPR).

"Doable" is operated by Natalie Menezes, a self-employed sole trader registered in Tomar, Portugal (NIF: 268489424).

2. Information We Collect

We collect information in two categories:

a) Personal Information you provide directly

  • Name, email address, login credentials, and account details

  • Payment information (credit card or other financial details)

  • Communications with us (emails, messages, feedback)

  • Comments, reviews, and course-related suggestions

  • Profile details and course enrolment history

b) Non-Personal / Technical Information collected automatically

  • IP address and connection details

  • Browser type, device type, and operating system

  • Session data (time spent, navigation paths, click patterns)

  • Purchase history and course access logs

  • Cookies and analytics data

3. Legal Bases for Processing

We process your personal data under the following legal grounds:

  • Contract: To provide and operate our services (lessons, courses, account management).

  • Consent: To send you promotional emails or optional communications (you may withdraw at any time).

  • Legal Obligation: To comply with tax, accounting, or regulatory requirements.

  • Legitimate Interests: To improve our services, prevent fraud, and ensure security.

4. How We Use Your Information

We use personal and non-personal data to:

  1. Deliver lessons and manage accounts.

  2. Provide customer support and technical assistance.

  3. Communicate service updates, account notifications, and promotional offers (where permitted).

  4. Analyse usage patterns and improve our website and courses.

  5. Comply with legal obligations, prevent fraud, and protect rights. We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

5. Data Hosting and International Transfers

Our services are hosted on the Wix.com platform, which may store and process data on servers outside the EU (including Israel and the United States).

  • Wix complies with GDPR requirements by relying on the European Commission’s adequacy decision for Israel and by implementing Standard Contractual Clauses (SCCs) for transfers to other countries.

  • We use technical and organisational measures appropriate to the risk, including access controls, firewalls, and encryption of data in transit and, where supported by our hosting provider, at rest.

  • Payment gateways adhere to PCI-DSS standards for secure handling of financial information.

6. Data Retention

We only keep your personal information for as long as necessary:

  • Account and course records: while your account is active, and for up to 2 years from the date of account cancellation or closure.

  • Payment and tax data: up to 10 years (to comply with Portuguese tax law).

  • Marketing communications: until you withdraw consent.

  • Technical logs and analytics: typically up to 12 months.

7. Sharing Your Information

We do not sell or rent your personal data. We may share it only:

  • With service providers who assist in delivering courses (e.g., payment processors, IT providers).

  • To comply with legal obligations or respond to lawful requests.

  • To protect the rights, property, or safety of our business, students, or the public.

8. Your Rights under GDPR

You have the right to:

  • Access the personal data we hold about you.

  • Request correction, amendment, or deletion of your data.

  • Restrict certain processing of your data in specific circumstances (e.g. while a dispute about accuracy is resolved).

  • Object to certain processing, including processing based on legitimate interests and direct marketing.

  • Withdraw consent (for example, for marketing emails).

  • Data portability: request your data in a structured, commonly used format.

  • Lodge a complaint with your local data protection authority or the Portuguese National Data Protection Commission (CNPD).

To exercise these rights, contact us at: hello@doable-online.com We will respond to your request within one month of receipt; this may be extended by a further two months for complex requests, in which case we will explain why.

9. Cookies and Tracking

Our website uses cookies and similar technologies to:

  • Enhance your browsing experience.

  • Track course engagement and preferences.

  • Collect analytics to improve performance.

Strictly necessary cookies (needed to run the website and process bookings) are used automatically. Non-essential cookies, such as analytics and course-engagement tracking, are only set with your prior consent, given via the cookie banner shown when you first visit our website. You can change or withdraw your consent at any time through that banner, or manage or disable cookies in your browser settings, though some features may not work correctly without them.

10. Children’s Privacy

We do not knowingly collect personal information from children without parental consent. In Portugal, the age at which a child may consent to their own data processing under GDPR is 13; below that age, consent must be given by a parent or guardian. Users in other EU countries may be subject to a different age threshold under their local law.

11. Updates to This Policy

We may update this Privacy Policy from time to time. Minor changes take effect immediately upon posting to our website. Where we make material changes that affect how we use your previously collected data, we will notify you by email or website notice in advance of those changes taking effect.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:

bottom of page