Privacy policy

Who is responsible for your data

The controller of the personal data described here is Access Portugal, the immigration, legal, insurance and accounting services office that publishes this site, reachable at office@accessportugal.net and +351 913 998 640. Any question or request about your data goes to that address; we answer within one month, as the GDPR requires.

• Consent choices — optional analytics storage and personalised advertising are denied until you choose otherwise in the consent message
• Service enquiries — we use the contact details and situation you send to answer and, if requested, arrange immigration or relocation services
• Separate retention periods — an enquiry without a mandate has a twelve-month limit after the last exchange; client files may be subject to longer legal periods
• Your rights under articles 15 to 21 of the GDPR, and a complaint to the CNPD

What we collect, and why

Service enquiries. The current website offers e-mail and WhatsApp links; it does not submit a working web form or load a HubSpot tracking script. When you contact us through either channel, we receive what you provide: for example, your name, e-mail address, telephone number, nationality, where you live, the visa, citizenship, relocation or other service you seek, and your description of the situation. We use that information to respond, offer a route or quote, and take steps you request before a possible contract (GDPR Article 6(1)(b)). If you become a client, we process the information needed to deliver the agreed service under the contract. Please do not send passports, identity documents or sensitive case records through the website; if needed, we arrange a suitable channel during the mandate.

Lead management. If we use HubSpot to manage your enquiry, we may enter the contact details, requested service, correspondence, follow-up status and dates you gave us into that CRM. HubSpot then processes those records for us. This does not mean that a HubSpot form or tracking cookie is installed on the current website. We do not add you to a marketing list merely because you asked for service information. Any future newsletter or unrelated marketing would require a separate, clear choice and an unsubscribe option.

The website itself. Pages are served as static files from a server that keeps no access log. The network provider in front of the site (Cloudflare) processes connection data — your IP address and the page requested — to deliver the pages and block attacks, under its own privacy policy. Fonts, styles and images come from the site’s own domain.

Measurement (Google Analytics 4). The site loads Google Tag Manager and a Google Analytics tag. Its default consent mode denies analytics storage; before a choice, Google can still receive cookieless measurement pings, including technical request information. If you consent, Google Analytics may use first-party identifiers such as _ga and _ga_<id> to measure pages viewed, referrals and interactions. We use reports to improve guides and understand interest in our services. The analytics-cookie lifetime is separate from the retention period of an enquiry. You can change your choice in Google’s consent message or clear the site’s cookies.

Google Search Console. We use Google’s Search Console reports about the site’s appearances and clicks in Google Search, search queries and pages. These reports are aggregated and subject to Google’s privacy filtering. Search Console does not add a separate tracking script to this website and does not give us your name or the contents of an enquiry.

Advertising (Google AdSense). Guide and article pages can load Google AdSense. Ad requests and measurement may involve your IP address, browser or device information, pages viewed, ad impressions and, when permitted, cookies or other identifiers. In the EEA, the United Kingdom and Switzerland, personalised ads require an affirmative choice in the consent message; otherwise ads may be non-personalised or absent. Google explains its processing at How Google uses information from sites or apps that use our services, and you can manage ad personalisation at Google’s ad settings.

Videos. Some pages include YouTube videos. Nothing is loaded from YouTube until you click the poster; when you do, the video plays through YouTube’s privacy-enhanced player, and Google processes your data under its own privacy policy from that moment.

Messaging, e-mail and other providers. WhatsApp (Meta) and our e-mail provider (Google) process the messages you send us. Cloudflare delivers and protects the website. HubSpot may process a managed lead as described above. These providers may process information outside the European Economic Area, using the transfer arrangements described in their own notices and agreements. You can use e-mail instead of WhatsApp or ask us about another way to communicate.

Mobile app. The Access Portugal app displays this website and also offers a personal relocation checklist. The checklist and pages you save are stored on your device; those choices, saved URLs and titles are not sent to our server by those features. Sharing a page uses your device’s share sheet. On iPhone, the app does not load the website’s Google advertising or measurement tags unless you allow tracking through Apple’s App Tracking Transparency setting. If you allow it, the website still presents its own consent choices where required; Apple’s permission alone does not grant website-cookie consent. You can change Apple’s permission in iPhone Settings and the website’s consent choice in its message. The app does not need an account, precise location, camera or microphone for its current functions.

How long we keep it

An enquiry that does not become a client mandate is kept only while needed to respond and follow up, with a limit of twelve months after our last exchange. If there is a specific reason to continue beyond that point, we explain the purpose and legal basis before keeping it longer; an unanswered request for consent is not consent. We review enquiry records in our communication channels and any CRM used for the same enquiry. If you become a client, the case file is kept while the service is active and then for applicable legal periods, including ten years for accounting and tax records under Portuguese law (Decreto-Lei n.º 28/2019, Article 19). A deletion request may be subject to a documented legal obligation or a necessary legal claim. Analytics, advertising and search-report retention is governed separately by the relevant service settings and policies; a two-year analytics-cookie lifetime is not a blanket permission to retain your enquiry for two years.

Who sees it

Our staff and, when needed for the service you request, the professionals involved — such as lawyers, solicitors, accountants and insurers — and the relevant public bodies, including AIMA, Finanças, Social Security or civil registries. Google, Cloudflare, Meta and, where used for an enquiry, HubSpot process information in the roles explained above. We do not sell enquiry records or automatically subscribe you to a newsletter.

Your rights

You may ask us at any time for access to the data we hold about you, its rectification or erasure, the restriction of its processing, its portability in a common format, and you may object to processing based on our legitimate interests (GDPR, articles 15 to 21). Write to the address above; we may ask you to confirm your identity. You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD, www.cnpd.pt), which handles complaints online.

Changes

We update this notice when the app, website, contact channels or providers change. The current contact page offers e-mail and WhatsApp; any future working web form or CRM tracking script must be reflected here and in the app-store declarations before launch.

Policy updated 2 October 2026. Applicable law: Regulation (EU) 2016/679 (GDPR) and Lei n.º 58/2019, which implements it in Portugal.