Privacy Policy
This Privacy Policy explains how personal data is handled when you visit this website, use the Strategic Tension Index, or contact Sandra Marques through the contact details provided here.
1. Data Controller
The data controller is Sandra Marques, based in Lisbon, Portugal.
Email: smarques@sandra-marques.com
2. Personal data collected
The Strategic Tension Index result can be viewed without providing personal data. When you choose to download, print or send the result, you enter your name and email address and give your consent. These details, your seven answers, the score, the band and any message you write are sent by email to Sandra Marques; when you choose “Send to Sandra”, you also receive a copy by email, with the PDF of the result attached.
Personal data may be processed when you contact Sandra Marques directly by email, phone, LinkedIn, or another channel. Depending on the contact, this may include your name, email address, phone number, organisation, role, message content, and any information you choose to share.
Basic technical data may also be processed by the hosting provider for security and operational purposes, such as IP address, date and time of access, browser information, and pages requested.
If you accept analytics in the cookie banner, Matomo, an analytics tool installed on the website's own server, records website usage data, such as the pages visited, browser, device, country, and clicks on buttons and on the steps of the Strategic Tension Index. Your IP address is anonymised and no cookies are used.
3. Purposes of processing
Personal data is processed only where relevant for the following purposes:
- Responding to enquiries and professional requests.
- Providing the download, printing or sending of your completed Strategic Tension Index.
- Replying to your Strategic Tension Index result, when you have consented to it.
- Preparing, managing, or following up on a possible professional collaboration.
- Maintaining basic business communication records.
- Complying with legal, tax, accounting, or administrative obligations where applicable.
- Understanding how the website is used, through visit statistics, when you have given your consent.
- Maintaining website security and preventing misuse.
4. Legal basis
The legal basis for processing may include:
- Your consent, when you download, print or send the Strategic Tension Index result, voluntarily contact Sandra Marques, or send information.
- Your consent, for visit analytics with Matomo, given in the cookie banner.
- Pre-contractual steps, when communication relates to a possible project, proposal, or collaboration.
- Legitimate interest, for ordinary professional communication, relationship management, and website security.
- Legal obligations, where retention or processing is required for accounting, tax, legal, or administrative reasons.
5. Data sharing
Personal data is not sold. Strategic Tension Index data is not stored on the website or on the hosting server: it is sent only by email to Sandra Marques's mailbox. Data may be shared only when necessary with trusted service providers, such as hosting, email, IT, accounting, or legal support providers, and only to the extent required for the relevant service or obligation.
This website includes links to external websites, including LinkedIn and partner websites. Those websites are independent and have their own privacy and cookie practices.
6. International transfers
If any service provider processes data outside the European Economic Area, appropriate safeguards should apply under the GDPR, where required. This may include standard contractual clauses or equivalent lawful mechanisms.
7. Retention
Emails with Strategic Tension Index results, enquiries, and professional communication data are kept only for as long as necessary for the purpose for which they were collected. As a working reference, emails with Index results and non-contractual enquiries may be kept for up to 24 months after registration or the last meaningful interaction, unless consent is withdrawn, earlier deletion is requested, or longer retention is justified.
If a professional relationship becomes contractual, some data may need to be retained for longer to comply with legal, tax, accounting, or contractual obligations.
Visit analytics data collected by Matomo stays on the website's server, is not shared with third parties and is deleted after 13 months.
Hosting logs, if collected by the provider, are normally kept for limited security and operational periods according to the provider's own policies.
8. Your rights
Under the GDPR, you may have the right to request access to your personal data, rectification, erasure, restriction of processing, objection to processing, data portability, and withdrawal of consent where processing is based on consent.
To exercise your rights, contact: smarques@sandra-marques.com.
You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD).
9. Security
Reasonable technical and organisational measures are used to protect personal data against unauthorised access, disclosure, alteration, or loss. No website or email communication can be guaranteed to be completely secure.
10. Updates
This policy may be updated to reflect changes to the website, services, or legal requirements.
Last updated: 1 October 2026.