Privacy policy

This policy explains what personal data we collect, why, how long we keep it and what rights you have over it.

1. Who processes your data

The controller is [LEGAL ENTITY], registered at [ADDRESS], company number [NUMBER].

For anything concerning personal data, write to [PRIVACY EMAIL].

2. What we collect

At registration: name, email, phone, company, role, website, LinkedIn, city, and what you write about where you can help, where you seek counsel and why you want to join.

In your account: hashed password, preferred language, member profile and visibility preferences.

For payments: amount, date, reference and status. We do not store full card details — where card payment exists, those details are handled directly by the provider.

From use: IP address and browser identification at the time of registration, and a record of administrative actions on your file.

3. Why we process it

To perform the membership contract: registration, verification, billing, member area access, event registration and introduction requests.

To meet legal obligations, in particular tax and accounting.

On the legitimate interest of keeping a verified and safe community: identity and professional verification, and an audit trail of decisions.

With your consent, where applicable, for communications not required to perform the contract.

4. Who has access

The City Chair of the hub you chose, the CEO House Global team and, where one exists, your country lead.

Providers necessary to operate: hosting, email service and payment provider.

Accountants and authorities, where the law requires it.

Other members see only what your profile allows. Your email and phone are never shown to other members: contact is made through a mediated introduction request.

We do not sell, rent or transfer your data to third parties for commercial purposes, and we give no partner or sponsor access to the member base.

5. How long we keep it

Active members: for the duration of the membership.

After membership ends: [PERIOD TO CONFIRM, suggested 24 months].

Records with tax relevance: 10 years, under Portuguese law.

Registrations that did not become memberships: [PERIOD TO CONFIRM, suggested 12 months].

6. Your rights

You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest.

Write to [PRIVACY EMAIL]. We reply within the legal period of one month.

You may also complain to the Portuguese data protection authority, CNPD.

7. Cookies

This site uses only a session cookie, needed to keep you signed in and to protect forms. It uses no advertising or third-party analytics cookies.

If that changes, this policy will be updated and consent will be requested before any non-essential cookie is set.

8. Security

Passwords are stored hashed and are never recoverable. Confirmation and invitation links are stored hashed and expire.

Access to member data is limited by role and by city, and every administrative action is logged.

9. Changes

If this policy changes materially, members are notified by email before it takes effect.

Questions about this policy: [PRIVACY EMAIL].