Version: 1.0
Date: February, 2026
Who we are
LiLo Institute is a non-profit association registered in Portugal, with headquarters at Travessa do Cadaval 4, Salreu, 3865-220 Salreu, Portugal.
For data protection matters, contact us at: lilo.institute.web@gmail.com
What data we collect and why
We collect personal data only with your explicit consent and only for purposes necessary to our relationship with you as part of the LiLo community.
For all Associates
| Data | Purpose |
|---|---|
| Name | To identify you as an Associate |
| Email address | To communicate with you about membership, activities, and events |
| Country of residence | To understand our community and consider country-of-residence specific conditions (e.g. fee reductions/waivers) where applicable |
| Tax country | To comply with Portuguese fiscal requirements |
| Tax identification number (optional) | So your receipt can be used for your own tax purposes |
| Phone number (optional) | To include you in community channels (e.g. WhatsApp) |
Optional personal information
You may choose to provide additional information to help us understand and serve our community:
| Data (optional) | Purpose |
|---|---|
| Professional domain | To understand the composition of our community |
| Age range or year of birth | To understand the composition of our community |
| Day and month of birth | To celebrate birthdays within the community (only shared with other Associates if you consent) |
| (Preferred) Gender | To understand the composition of our community |
This personal data may be used in anonymised, aggregated form to generate demographic insights about our community. In such cases, no individual can be identified from the resulting analysis.
Legal basis for processing
We process your personal data based on your explicit consent, given when you complete our registration form. You may withdraw this consent at any time (see “Your rights” below).
Who we share data with
We do not sell or share your personal data with third parties for marketing purposes.
We may share data only in the following circumstances:
- Portuguese Tax Services — LiLo’s financial records, as required for any association, and details of Associates in governance roles as legally required
- Payment processors — if you pay fees electronically, your payment data is handled by the payment provider under their own privacy policy
Where data is stored
Your data is stored in secure systems administered by LiLo and in third-party platforms we use to manage the association. These currently include:
- Cloud storage and communication (e.g. Google Workspace) — for forms, records, and email
- Association management (e.g. QuotaGest) — for membership records and fee administration
We use established providers with appropriate data protection safeguards. Where platforms operate servers outside the European Economic Area, we rely on their compliance frameworks (such as Standard Contractual Clauses) to protect your data.
How we protect your data
We use established platforms with industry-standard security measures. Access to your data is limited to those who need it to manage the Association. We do not store passwords or payment card details ourselves.
Community platforms
If you become an Associate, you may be invited to join community communication channels (such as a WhatsApp group). Joining is voluntary. If you join:
- Your phone number will be visible to other group members
- The platform’s own privacy policy governs how your data is handled
- You can leave at any time
We will not add you to any group without your consent.
LiLore subscribers
If you subscribe to LiLore, our Substack publication, your email address is collected and managed by Substack, not directly by LiLo. Substack’s own privacy policy governs how your data is stored and processed.
As the publisher, LiLo can access subscriber email addresses for the purpose of communicating with you through the publication. We will not export or use this data for purposes beyond LiLore without your explicit consent.
You can unsubscribe at any time via the link in any LiLore email.
For Substack’s privacy policy, see: substack.com/privacy
Event-specific consent
Some LiLo activities may involve the collection of additional data—such as audio, image, or video recordings—for purposes beyond general membership administration (for example, research, documentation, or publication).
Where this applies, we will seek your specific informed consent at the time, with clear information about:
- What data will be collected
- How it will be used
- Who will have access to it
- How long it will be retained
- Any anonymisation or other safeguards that will apply
Your participation in LiLo activities is never conditional on consenting to such additional uses. You may decline without affecting your membership, however lack of consent may – pragmatically – lead to restricted participation in the activity itself. Any such restrictions will be detailed for each specific activity.
How long we keep data
- Visitor Associates: Data are deleted within 3 months of the event ending, unless you choose to become a Friend or other Associate
- Other Associates: Data are retained for the duration of your association with LiLo, plus one year after you leave or withdraw consent
- Financial records: Retained for ten years as required by Portuguese law
- Anonymised demographic data: May be retained indefinitely for historical records of our community
Your rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your data (subject to legal retention requirements)
- Withdraw consent at any time
- Object to certain types of processing
- Data portability — receive your data in a structured format
To exercise any of these rights, email us at lilo.institute.web@gmail.com with the subject line “Data Protection Request.”
We will respond within 30 days.
Changes to this policy
We may update this policy from time to time. Significant changes will be communicated to Associates directly. The current version is always available at lilo.institute/privacy-policy
Questions or concerns
If you have questions about how we handle your data, or wish to raise a concern, please contact us at lilo.institute.web@gmail.com.
You also have the right to lodge a complaint with the Portuguese data protection authority:
Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134 – 1.º
1200-651 Lisboa
www.cnpd.pt
LiLo Institute 