Who we are
This website, ohxalarecords.com, is operated by OHXALA RECORDS ACADEMY. The data controller is Luís Marques, self-employed professional (organised accounting), Tax ID (NIF) PT176647473, address Rua do Gerós, 241, 1º Frente, 3660-688 São Pedro do Sul, Portugal. Contact: ohxalarecords@gmail.com.
What personal data we collect
When you purchase a course, we collect: your name, email address, billing address, and Tax ID (NIF) if you provide one for invoicing purposes. We do not collect or store your card details directly; payments are processed by our payment provider (WooPayments/Stripe), which handles card data under its own security and privacy standards.
When you contact us, we collect the information you choose to share (name, email, message content).
If you leave a comment on the site, we collect the data shown in the comment form, plus your IP address and browser user agent string, to help spam detection.
Why we collect and use this data
We use your data to: process and deliver your order, enrol you in our learning platform (Moodle), issue invoices as required by Portuguese tax law, respond to your enquiries, and comply with our legal obligations. The legal basis is performance of a contract (your purchase) and compliance with legal obligations (accounting and tax records).
Who we share your data with
We share order and billing data with: our payment provider (WooPayments/Stripe) to process payment; our invoicing software (KeyInvoice) to issue invoices as legally required; our learning platform (Moodle) to create your student account and enrol you in the course you purchased; and our hosting provider, which stores the website’s data. We do not sell your personal data to third parties.
How long we keep your data
Invoicing and accounting records are kept for the period required by Portuguese tax law (currently 10 years). Your Moodle account and course access data are kept for as long as your account remains active, reflecting the lifetime access included with your course. Contact form messages are kept only as long as needed to resolve your enquiry.
Cookies
This site uses cookies to keep the website working correctly and, where applicable, to remember your language preference and cache pages for faster loading. We do not use cookies for third-party advertising.
Your rights
Under the GDPR, you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at ohxalarecords@gmail.com. You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD).
International data transfers
Some of the services we use (such as our payment provider) may process data outside the European Union. Where this happens, the provider is required to apply appropriate safeguards, such as Standard Contractual Clauses, to protect your data.
Changes to this policy
We may update this Privacy Policy from time to time. The version published on this page is the one currently in force.
Last updated: 2026. This draft has not been reviewed by a lawyer — please have it checked before relying on it.