Privacy Policy
How Momelab Unipessoal Lda handles the personal data of the businesses that use Adalie. Version 1.0, effective Sept. 6, 2026.
Two different sets of data
This policy covers your data: the account you hold with us, the business it belongs to, and how you use Adalie. For that data we are the controller.
It does not cover the personal data of the people who book appointments with you. There, you are the controller and we only act on your instructions; that is set out in the Data Processing Agreement.
Who to contact
Momelab Unipessoal Lda, Av. 24 1019 3I, 4500-201 Espinho, Portugal, NIF 518890554. Email [email protected].
What we collect, and why
| What | Why | Lawful basis |
|---|---|---|
| Your name, email address and password (stored only as a hash), and your language preference. | To give you an account and let you sign in. | Performance of our contract with you. |
| Your business’s name, address, country, and the legal name and NIF you give for invoices. | To run your booking page and to issue valid invoices. | Contract, and legal obligation for the invoicing details. |
Where you came from when you signed up: utm_* tags, an advertising click identifier (gclid, fbclid, msclkid), the referring site, and the page you landed on. |
To know which of our own campaigns bring businesses to Adalie. | Our legitimate interest in knowing whether our advertising works. |
| How many messages your account has sent this month. | To apply your plan’s allowance. | Contract. |
| A record of significant actions taken in your account, and who took them. | So you can see what changed, and so we can investigate if something goes wrong. | Legitimate interest in the security and integrity of the service. |
| Your network address, used to count requests to sensitive endpoints such as sign-in and password reset. | To rate-limit abuse. | Legitimate interest in keeping accounts secure. |
| Payment details, if and when you buy a term. | To take the payment. | Contract. Card numbers never reach us — see below. |
Who else sees it
We do not sell your data and we do not share it for anyone else’s marketing. We use these providers:
- Cloudflare, Inc. — Sending confirmation, reminder and account emails; DNS and protection for the booking pages. (EU data centres; US company under SCCs)
- Stripe Payments Europe, Ltd. — Taking subscription payments from the business. Receives the business's own billing details, never its customers' data. (Ireland (EEA))
Where a provider is outside the EEA, the transfer is covered by the European Commission’s standard contractual clauses.
If you buy a term, the payment is taken by Stripe on their own pages. Your card number never reaches our servers. We keep a customer reference, the amount, the period bought and your invoicing details.
Cookies, and what runs on which page
On the dashboard and on our own marketing pages we set a session cookie so you stay signed in, and a cookie remembering the language you chose. Your light or dark theme preference and your answer to the cookie banner are kept in your browser’s local storage and never sent to us.
Our marketing pages may use Google Analytics and Google Ads. Both start denied: before you answer the banner, Google receives no identifying cookies. If you accept, analytics and advertising storage are switched on; if you decline, that is remembered and you are not asked again.
None of that runs on a booking page. The pages where your customers make appointments carry no analytics and no advertising tag of ours. Their data is yours, and measuring our business with it would contradict the agreement we have with you.
How long we keep it
Account and business data: for as long as you have an account, and then deleted when you close it, except where we must keep it.
Invoices and the records behind them: for the period Portuguese tax law requires, currently ten years, regardless of whether the account is still open.
Audit records: kept while the account exists, as the history of what happened in it.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. Write to [email protected] and we will answer within one month.
Where we rely on legitimate interests, you can object and we will stop unless we have a compelling reason not to. You can withdraw consent to analytics cookies at any time by clearing your browser’s storage for this site.
If you think we have handled your data badly, you can complain to the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese supervisory authority, at cnpd.pt.
Changes
If we change this policy in a way that matters, we will tell you by email before it takes effect. The version and date are at the top of this page.