Privacy Policy
Last updated: August 20, 2026
1. Data Controller Identification
This Privacy Policy applies to the website querciainvestlive.com, operated by:
- Entity: [TO BE COMPLETED — legal company name, e.g. “Quercia Invest & Live, Lda.”]
- Company Registration / Tax Number (NIPC): [TO BE COMPLETED]
- Registered address: [TO BE COMPLETED — full address]
- IMPIC licence: 23963
- General contact: [TO BE COMPLETED — email]
- Data Protection Officer (DPO): [TO BE COMPLETED — name and contact, if applicable; if no DPO has been appointed, indicate the person responsible for data protection matters]
For any questions relating to this Privacy Policy or the processing of your personal data, you may contact us at [TO BE COMPLETED — dedicated email, e.g. privacy@querciainvestlive.com].
2. Scope of this Policy
This policy explains how Quercia Invest & Live (“we”, “us”, “Quercia”) collects, uses, shares and protects the personal data of visitors and clients of this website, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR) and applicable Portuguese national law (Law No. 58/2019).
3. Personal Data We Collect
3.1. Data you provide directly
Through the contact form (“Private Briefing Request”) and private call scheduling, we may collect:
- Name
- Email address
- Phone number / WhatsApp
- Type of interest (buying, selling, investment opportunities, property management/lifestyle services)
- Preferred investment value range
- Preferred location (Porto, Lisbon, Cascais, Algarve, Douro Valley, other)
- Any other information you choose to share with us in correspondence (by email, phone or meeting)
3.2. Data collected automatically
While browsing the website, we may automatically collect:
- IP address
- Browser type and version
- Operating system
- Pages visited, time spent and referral source (analytics data, via Google Site Kit / Google Analytics)
- Cookie data (see section 8)
3.3. Data from third parties
If information about you is provided to us by partners (e.g. lawyers, tax advisors, partner agencies) in the context of a property acquisition or sale process, that information will be processed in accordance with this policy.
4. Purposes and Legal Basis for Processing
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to contact requests / private consultations | Steps taken prior to entering into a contract, at your request (Art. 6(1)(b)) |
| Providing real estate advisory services | Performance of a contract (Art. 6(1)(b)) |
| Marketing communications (newsletters, portfolio updates) | Consent (Art. 6(1)(a)) |
| Statistical analysis and website improvement (Google Analytics) | Consent, via cookie banner (Art. 6(1)(a)) |
| Compliance with legal obligations (e.g. anti-money laundering, tax obligations) | Legal obligation (Art. 6(1)(c)) |
| Fraud detection and prevention, website security | Legitimate interest (Art. 6(1)(f)) |
5. Sharing Data with Third Parties
Your personal data may be shared with:
- Lawyers, tax advisors and accountants working with us, solely in the context of the legal and tax advisory services requested;
- Maintenance, insurance and property management service providers, where relevant to the service contracted;
- Technology providers supporting the operation of the website (e.g. WordPress hosting, Google — Analytics/Site Kit);
- Public authorities, where required by law.
We do not sell your personal data to third parties for marketing purposes.
5.1. International Transfers
Some of our service providers (e.g. Google) may process data outside the European Economic Area. In such cases, we ensure the transfer is accompanied by appropriate safeguards, namely Standard Contractual Clauses approved by the European Commission.
6. Data Retention Period
- Commercial contact/lead data: retained for the duration of the business relationship and up to 3 years after the last contact, unless you request earlier deletion;
- Data of clients with an ongoing or completed purchase/sale process: retained for the legal period applicable to tax and anti-money laundering obligations (generally 7 to 10 years, as set out in applicable legislation);
- Website analytics data: according to the retention periods configured in Google Analytics (typically up to 14 months), or until cookie consent is withdrawn.
7. Your Rights
Under the GDPR, you have the right to:
- Access your personal data;
- Rectify inaccurate or incomplete data;
- Erasure (“right to be forgotten”), where applicable;
- Restrict processing;
- Data portability;
- Object to processing, including direct marketing;
- Withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand;
- Lodge a complaint with the Portuguese Data Protection Authority (CNPD) — www.cnpd.pt.
To exercise these rights, please contact us at [TO BE COMPLETED — contact email]. We will respond within one month, as required by law.
8. Cookies
This website uses cookies to:
- Ensure the technical functioning of the site (essential cookies);
- Analyze traffic and browsing behaviour (Google Analytics / Site Kit by Google);
- [TO BE COMPLETED — if applicable: marketing/remarketing cookies, e.g. Meta Pixel, Google Ads]
When you visit the website, a cookie consent banner is displayed, allowing you to accept or reject non-essential cookies. You may change your preferences at any time through your browser settings or the site’s cookie management panel.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction or improper disclosure, including secure HTTPS connections, access controls and regular system updates.
10. Minors
This website and Quercia Invest & Live’s services are intended exclusively for individuals over 18 years of age. We do not knowingly collect data from minors.
11. Changes to this Policy
This Privacy Policy may be updated periodically to reflect legal or operational changes. The version in force will always be the one published on this page, with an indication of the last update date.
12. Contact
For any questions related to this Privacy Policy or the processing of your personal data:
- Email: [TO BE COMPLETED]
- Postal address: [TO BE COMPLETED]
Internal note (remove before publishing): this policy was drafted based on the public content of the website as of 20/08/2026. Before publishing, confirm: (1) full legal identification of the entity and tax number; (2) whether a DPO has been appointed; (3) any additional marketing tools/pixels beyond Google Site Kit (e.g. Meta/Facebook Pixel, LinkedIn Insight); (4) whether there’s a newsletter/CRM (e.g. Mailchimp, HubSpot) implying additional processing; (5) confirm whether hosting (PTServidor) or any other provider processes data outside the EU.