Privacy Policy — Arboratoreum

Arboratoreum is committed to protecting the privacy, security, and proper handling of personal data collected through its website and related communications. This Privacy Policy explains how Arboratoreum collects, uses, stores, and protects personal data when you use this website, submit an enquiry, subscribe to communications, or book an introductory call. By using our site, you agree to the terms of this policy and our commitment to safeguarding your data.

1. Data controller

The controller responsible for the processing of personal data collected through this website is the founder architect João Tiago Blasques de Oliveira Barroso, under the trademark Arboratoreum^®, as a sole trader with the following address: Rua Ernesto Veiga de Oliveira, N6, 2780-052, Oeiras, Portugal.

If Arboratoreum^® is required to appoint a Data Protection Officer under applicable law, the relevant contact details and routes are provided here.

2. How We Use Your Information

Arboratoreum^® may collect the following categories of personal data:

Identification and contact data, such as name, email address, telephone number, and company name, where provided;
Information contained in contact forms, project enquiries, booking forms, or direct correspondence;
Booking and meeting information submitted through scheduling tools used by Arboratoreum^®, including Cal.com;
Newsletter subscription data, where applicable;
Technical and usage data, such as IP address, browser type, device information, referral source, pages visited, and similar website usage data, where such collection is active and lawful.

Arboratoreum^® seeks to collect only the data reasonably necessary for the relevant purpose.

3. How personal data is collected

Personal data may be collected when you:

Fill in a contact or enquiry form on the website;
Subscribe to a newsletter or other updates;
Book an introductory call or meeting;
Contact Arboratoreum^® by email or other direct means;
Use the website, where cookies or similar technologies are active and lawfully deployed.

4. Purposes of processing

Arboratoreum^® may process personal data for the following purposes:

To respond to contact requests and project enquiries;
To assess potential fit for architectural, ecological design, advisory, retreat, or related services;
To schedule, manage, and follow up on calls or meetings;
To send requested information about services, projects, or future formats;
To manage newsletter subscriptions and communications, where applicable;
To operate, maintain, improve, and secure the website;
To comply with legal and administrative obligations;
To establish, exercise, or defend legal claims where necessary.

5. Legal bases for processing

Depending on the context, personal data may be processed on one or more of the following legal bases:

Consent, where required and lawfully obtained;
Steps taken at the request of the data subject prior to entering into a contract, including responding to project enquiries or booking requests;
Performance of a contract, where Arboratoreum^® is engaged to provide services;
Compliance with legal obligations;
Legitimate interests, where Arboratoreum^® has a legitimate interest in operating, securing, and improving its website and professional activity, provided those interests do not override the rights and freedoms of the data subject.

6. Recipients and service providers

Arboratoreum^® does not sell personal data.

Personal data may be accessed by trusted service providers where reasonably necessary to operate the website or business, including providers related to:

Website hosting and maintenance;
Form handling;
Email services;
Scheduling and videoconferencing;
Newsletter distribution;
Analytics or security tools, where active and lawfully deployed;
Professional accounting, legal, or administrative support, where required.

These providers may act as processors or independent controllers depending on their role.

7. International transfers

Some service providers used by Arboratoreum^® may process personal data outside Portugal or outside the European Economic Area.

Where such transfers take place, Arboratoreum^® will seek to ensure that appropriate safeguards are in place in accordance with applicable data protection law.

8. Data retention

Arboratoreum^® retains personal data only for the period reasonably necessary for the purpose for which it was collected, including:

Responding to and managing enquiries;
Assessing and developing professional relationships;
Complying with legal, tax, or administrative obligations;
Keeping appropriate business records;
Protecting legal interests where necessary.

As a general rule:

Contact and enquiry data may be retained for up to 12 months after the last relevant interaction, unless there is an ongoing project, legal basis for longer retention, or a justified professional reason to retain it;
Newsletter subscription data may be retained until the subscriber withdraws consent or unsubscribes;
Contractual and accounting records may be retained for the period required by law.

Where a precise retention period cannot be stated in advance, the data will be kept only for as long as necessary to fulfil the relevant purpose and any associated legal obligations.

9. Data subject rights

Under applicable law, you may have the right to:

Access your personal data;
Request rectification of inaccurate or incomplete data;
Request erasure of your data;
Request restriction of processing;
Object to certain types of processing;
Request data portability, where applicable;
Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, please follow the right contact routes here.

Requests will be handled in accordance with applicable law.

10. Cookies and similar technologies

This website may use cookies or similar technologies.

Strictly necessary cookies may be used where required for the proper functioning and security of the website. Non-essential cookies, including analytics or similar tools, should only be used where lawful and, where required, after valid user consent has been obtained.

If Arboratoreum^® uses non-essential cookies, a separate Cookie Policy or cookie management tool should provide more detailed information.

11. Security

Arboratoreum takes reasonable technical and organisational measures to protect personal data against unauthorised access, misuse, loss, alteration, or disclosure.

However, no transmission or storage method over the internet can be guaranteed as completely secure.

12. Third-party platforms and links

This website may contain links to third-party platforms or websites, including scheduling tools and social networks.

Arboratoreum^® is not responsible for the privacy practices or content of third-party platforms. Users should review the relevant privacy policies of those services directly.

13. Changes to this Privacy Policy

Arboratoreum^® may update this Privacy Policy from time to time.

The latest version will always be published on this page, together with the date of last update.

14. Contact

For any questions regarding this Privacy Policy or the processing of personal data, please contact us through the designated direct contact routes here.

Protecting Your Information

Arboratoreum^® employs industry-standard security measures to protect your data from unauthorized access, disclosure, or alteration. From encryption to regular system updates, we take every precaution to ensure your information remains safe. However, no online platform is completely immune to breaches, and we encourage you to contact us immediately if you suspect any issues.

Last updated: April 10th, 2026.