Privacy Policy
Last updated: 28 August 2026
1. Data Controller
Eli Pereira, real estate consultant, operating at Rua da Prata, 80, 1100-420 Lisbon, Portugal, is the controller of the personal data collected through this website.
Eli Pereira practises real estate brokerage as part of the eXp Portugal network, acting as an independent controller for the data collected here.
Contact: eli.pereira@expportugal.com | +351 963 380 076
Real estate brokerage activity is carried out under AMI licence no. 18470, held by eXp Portugal. Eli Pereira acts as an independent real estate consultant within that network.
2. Data We Collect
Client identification data
When you enter into a brokerage relationship with us: name, email, phone, address, tax number (NIF) and identification documents, to the extent required by Portuguese real estate brokerage and anti-money-laundering legislation.
Contact form data
Name, email, phone, subject, message, page language and source page, date and time, a record of your acceptance of this policy, IP address and browser identification (user-agent). If you arrive through a campaign, also the corresponding source parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content, gclid, fbclid, msclkid), the landing page and the referring site.
This data is sent to us by email and stored in a file on this website's server, accessible only to the data controller.
Technical data
The server logs the IP address and browser identification of incoming requests, for security and to prevent abuse of the form.
3. Purpose of Processing
- Provision of real estate brokerage services
- Response to information requests and contacts
- Scheduling and management of property visits
- Compliance with legal and contractual obligations
- Direct marketing (with prior consent)
- Website improvement and user experience
4. Legal Basis
Data submitted through the contact form is processed on the basis of your consent (Article 6(1)(a) GDPR), given through the acceptance checkbox and recorded together with the data. You may withdraw consent at any time using the contact details in section 1.
The IP address and browser identification are processed on the basis of legitimate interest (Article 6(1)(f)) in preventing automated submissions and abuse of the form.
For clients, processing is based on performance of a contract (Article 6(1)(b)) and compliance with legal obligations (Article 6(1)(c)), including tax and anti-money-laundering obligations.
5. Data Sharing
Data may be shared with: partner entities involved in the transaction (banks, notaries, lawyers), where necessary to complete it; tax and judicial authorities, where legally required; and Hostinger International Ltd., which hosts this website and its email server, acting as a processor under a data processing agreement.
With your consent for the advertising purpose, and only in that case, we share with Google Ireland Limited a hashed version (SHA-256 digest) of your email address and phone number at the moment you submit the form. This allows Google to match your enquiry to an ad you may have seen, so that we can measure our campaigns. The digest is generated in your own browser and is the only value transmitted — your email and phone in plain text never leave your device. If you decline this purpose, nothing is sent.
We do not sell your data, and we do not pass it to third parties so that they can market to you on their own behalf.
6. Data Retention
Contacts received through the form that do not lead to a contractual relationship: 24 months from the last contact, after which they are deleted.
Client contractual and tax data: 10 years, as required by tax and anti-money-laundering legislation.
Technical records used to prevent form abuse: 1 hour.
7. Your Rights
Under GDPR, you have the right to: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. To exercise these rights, contact: eli.pereira@expportugal.com.
8. Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or alteration.
9. Cookies and Measurement Tools
Strictly necessary, always active: a session cookie set by the server when you submit the contact form, temporary storage in your browser of campaign parameters so that we can associate them with the enquiry you send us, and a record of your own consent choice.
Subject to your prior consent, under two purposes you may accept or decline separately:
- Audience measurement — Google Analytics 4, to understand which pages are useful.
- Advertising — Meta Pixel, LinkedIn Insight Tag and Google Ads, to measure campaigns and show relevant ads. This includes the hashed sharing described in section 5.
Until you give consent, none of these tools is loaded: their scripts are not even downloaded by your browser. You can change or withdraw your choices at any time via “Cookie settings” in the footer of any page.
10. International Transfers
The data you send us through the contact form is processed on servers located in the European Union.
The tools listed in section 9, where you have authorised them, involve transfers of data to the United States of America. Those transfers rely on the European Commission adequacy decision for the EU-U.S. Data Privacy Framework of 10 July 2023, to which Google, Meta and LinkedIn have self-certified, supplemented by standard contractual clauses. If you decline both purposes, no transfer takes place.
11. Complaints
You may lodge a complaint with the CNPD — Portuguese Data Protection Authority (www.cnpd.pt).
12. Changes
This policy may be updated. The latest version will always be available on this page with the update date.