Back to home

Privacy Policy

Last updated: 10 June 2026

1. Who we are

ADHD with Sofia (“we”, “us”) is operated by Sofia de Mello-Barreto, registered as an independent worker (trabalhador independente) in Portugal. Tax identification number available on request for invoicing purposes.

Contact: ADHDwithSofia@gmail.com

We are the data controller for personal data collected through adhdwithsofia.com.

2. What data we collect

Email address and name (optional) — when you sign up for the free guide or newsletter.

Purchase information — when you buy a digital product, the purchase is processed by Gumroad, Inc., who acts as the merchant of record. Gumroad collects your payment details directly; we never see your card information. We receive your email address and order details to provide support.

Usage data — basic technical data (browser type, pages visited, approximate location at country level) via cookies and analytics, described in Section 8.

Correspondence — if you email us, we keep the exchange to respond to you.

We do not knowingly collect data from anyone under 16, and we do not collect special-category data (including health data). Reading our content about ADHD does not tell us anything about your health, and we ask you not to share medical details with us by email.

3. Why we process your data (legal bases)

  • Newsletter & free guide: your consent (Art. 6(1)(a) GDPR) — withdraw any time via the unsubscribe link.
  • Delivering purchased products and support: performance of a contract (Art. 6(1)(b)).
  • Basic analytics and site improvement: your consent via the cookie banner (Art. 6(1)(a)).
  • Responding to your messages: legitimate interest (Art. 6(1)(f)).
  • Tax and accounting records: legal obligation (Art. 6(1)(c)).

4. Who we share data with

We share data only with service providers needed to run this site:

  • Kit (ConvertKit LLC, USA) — email list and newsletter delivery.
  • Gumroad, Inc. (USA) — payment processing and product delivery, as merchant of record.
  • Lovable / hosting providers — website hosting.

We never sell your data, and we don’t share it with advertisers.

5. International transfers

Some providers are based in the United States. Transfers are protected by the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

6. How long we keep data

  • Newsletter data: until you unsubscribe, plus a short suppression record so we don’t email you again.
  • Purchase records: as required by Portuguese tax law (up to 10 years).
  • Email correspondence: up to 2 years after our last exchange.

7. Your rights

Under the GDPR you can: access your data, correct it, delete it, restrict or object to processing, receive a copy (portability), and withdraw consent at any time. Email ADHDwithSofia@gmail.com and we’ll respond within one month.

You can also complain to the Portuguese supervisory authority, CNPD (Comissão Nacional de Proteção de Dados) — www.cnpd.pt — or your local EU authority.

8. Cookies

Cookies are small files stored on your device.

Essential cookies — required for the site to function (e.g. remembering your cookie choice). Always on; no consent needed.

Analytics cookies — help us understand which pages are useful. Set only if you click “Accept” on the cookie banner.

Third-party content — links to Instagram, TikTok and Gumroad take you to those platforms, which apply their own cookie policies once you’re there.

You can change your choice anytime via the “Cookie settings” link in the footer, or clear cookies in your browser.

9. Changes

We may update this policy and will change the date above when we do.