Last updated: 12 October 2026
This policy explains what personal data Reverie collects through this website and in the course of our services, why we collect it, how we use and protect it, and the rights you have over it. We comply with the EU General Data Protection Regulation (GDPR) and, where it applies to you, the UK GDPR.
Reverie is operated by Leila Simpson, based in Madeira, Portugal (“Reverie”, “we”, “us”). We are the data controller for the personal data described in this policy.
Contact: leila@reverie.care
| Situation | Data | Why we use it | Lawful basis | How long we keep it |
|---|---|---|---|---|
| You send an enquiry (website form, email, phone or messaging) | Name, email address, your message, and anything else you choose to tell us | To reply to you and discuss whether we can help | Steps at your request before a contract (Art. 6(1)(b)); our legitimate interests in responding (Art. 6(1)(f)) | Up to 12 months after our last contact, unless you become a client |
| You book a free exploratory call | Name, email address, the time you choose (through Google Calendar appointment scheduling) | To arrange and hold the call | Steps at your request before a contract (Art. 6(1)(b)) | Up to 12 months after the call, unless you become a client |
| You become a client | Contact details, notes from our sessions, plans and wishes you share with us, legacy materials you create with us, documents you share for planning and after-death paperwork (such as certificates and account details), invoicing details, and recordings of sessions where we have agreed to record | To provide the services you have asked for and to keep proper records | Contract (Art. 6(1)(b)); legal obligations such as tax and accounting (Art. 6(1)(c)); explicit consent for sensitive information (Art. 9(2)(a), see section 3) and for recordings (Art. 6(1)(a)); our legitimate interests in keeping records, and the establishment, exercise or defence of legal claims (Art. 6(1)(f) and Art. 9(2)(f)) | Notes and client records: 7 years after our work together ends, in case we need them to resolve a complaint or a legal matter. Invoices and accounts: 10 years, as Portuguese law requires. Recordings, where agreed: deleted within 60 days. |
| You visit this website | Technical data such as IP address, browser type and pages requested, in standard server logs, plus anonymous visit and performance statistics (such as pages viewed, referring site, country and device type) | To deliver the website, keep it secure, fix faults and understand how it is used and how fast it loads | Our legitimate interests (Art. 6(1)(f)) | Kept by our hosting provider in line with its own retention periods |
| You join the Madeira Death Café WhatsApp group | Your name and phone number, as shown in WhatsApp | To run the group, which we facilitate | Your consent, given by choosing to join (Art. 6(1)(a)) | Until you leave the group |
We do not sell your personal data, and we do not use it for automated decision-making or profiling.
Our work is about death, dying and loss, so you may choose to tell us about your health, medical care, family circumstances, or your religious or philosophical beliefs. Under data protection law this is “special category data” and receives extra protection.
Reverie is a death doula service. We do not provide therapy, medical advice, or legal or financial advice, although we can help you find the right professionals.
We only use this kind of information with your explicit consent, which we ask for before we begin working together. You can withdraw that consent at any time, although this does not affect anything we did before you withdrew. Please avoid putting detailed health information in the website contact form. You can share it with us in a call or session once you are comfortable doing so.
What you tell us is treated as confidential. We only share it with other people, such as your clinicians, carers or emergency contacts, if you ask us to or agree to it (for example in your Client Consent Form), or where the law requires it or someone is at serious risk of harm. We share only what is necessary.
Recordings: we record a session only if you and we have agreed to this beforehand. Recordings are stored in our Google Workspace account and are deleted within 60 days.
We do not use cookies for advertising or tracking, and we do not set any cookies ourselves. We use Vercel Web Analytics and Speed Insights to understand how the website is used and how well it performs. These work without cookies and do not follow you across other websites. The booking calendar on our Services page is provided by Google and is only loaded when that page is opened. Google may set its own cookies or collect technical data when it loads, under its own privacy policy.
We use a small number of trusted service providers (“processors”) who handle personal data on our behalf and only on our instructions:
We may also share information where we are legally required to, for example with tax authorities, or with professional advisers such as an accountant who is bound by confidentiality.
Some of the providers above are based in, or process data in, countries outside the EEA, such as the United States. Where this happens we rely on appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
We take appropriate technical and organisational steps to protect personal data, for example by restricting access, using password-protected accounts, and using an encrypted (HTTPS) connection to this website. More detail is in our Data Protection Policy. If a data breach puts your rights at risk, we will tell you and the relevant authority where the law requires.
Under data protection law you have the right to:
To use any of these rights, email leila@reverie.care. We will reply within one month. We may ask you to confirm your identity first, and we do not charge a fee unless a request is clearly unfounded or excessive.
If you are unhappy with how we have handled your data, please contact us first so we can put it right. You also have the right to complain to a data protection authority. In Portugal this is the Comissão Nacional de Proteção de Dados (CNPD), cnpd.pt. If you live elsewhere in the EU or EEA you can contact your local authority, and if you live in the UK you can contact the Information Commissioner’s Office, ico.org.uk.
Our services are intended for adults. We do not knowingly collect personal data from anyone under 16 without the consent of a parent or guardian.
This website may link to other websites. We are not responsible for their content or privacy practices, so please read their policies.
We may update this policy from time to time. The date at the top shows when it was last changed.
Questions about this policy or your personal data: leila@reverie.care
