Privacy Policy
Last updated: September 2026
HLV, Legal & Advisory, SP, RL ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.
1. Data Controller
Data Controller: HLV, Legal & Advisory, SP, RL, PT Tax No. 518 975 576, Avenida Mouzinho de Albuquerque, 7, 1 D, 1170-257 Lisboa, Portugal
2. Information We Collect
- Consultation bookings: When you book a scoping call or an advisory session, you provide your name, email, phone number, the information you choose to share about your matter and your meeting preferences. Bookings are handled through Calendly, embedded on our website.
- Payments: Advisory sessions and online setup orders are paid through Stripe. Stripe processes your payment details; we receive confirmation of payment, your name, email and billing details, but never your full card number.
- Forms: When you request our guide or send a proposal request, we collect the details you enter (name or company name, email, your plans for Portugal, message). Form submissions are stored by Netlify, our hosting provider, and guide emails are sent through Resend.
- Contact by email or WhatsApp: If you contact us at hello@portugal-and-co.com or through WhatsApp, we collect your contact details and the content of your messages.
- Website analytics and advertising measurement: We use Google Analytics, Google Ads conversion tracking and the LinkedIn Insight Tag to understand how visitors use the site and to measure the effectiveness of our advertising. These tools use cookies and similar technologies and collect information such as pages visited, time spent, device and approximate location.
3. Legal Basis for Processing
We process booking, payment, form and contact data to take the steps you request before entering into an engagement and to perform that engagement (Article 6(1)(b) GDPR), to comply with legal obligations such as invoicing and professional rules (Article 6(1)(c)), and for our legitimate interest in running and improving our website (Article 6(1)(f)). Where analytics and advertising cookies require consent, we rely on that consent, which you may withdraw at any time.
4. Data Retention
- Enquiries and consultation records that do not lead to an engagement are kept for up to 3 years, and then deleted.
- Records relating to an engagement, including invoices, are kept for the periods required by Portuguese tax, accounting and professional rules.
- Analytics data is retained by Google for up to 26 months.
5. Third-Party Services
- Calendly: scheduling and booking information.
- Stripe: payment processing.
- Netlify: website hosting and form submissions.
- Resend: delivery of transactional emails, such as the guide you request.
- Google (Analytics and Ads) and LinkedIn (Insight Tag): website analytics and advertising measurement.
- Google Workspace and WhatsApp: email and messaging.
Some of these providers process data outside the European Economic Area. Where they do, transfers rely on an adequacy decision, including the EU-US Data Privacy Framework, or on the European Commission's standard contractual clauses. Each provider's privacy policy explains its own processing.
6. Your Rights
Under GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure ("right to be forgotten")
- Restrict processing
- Object to processing
- Data portability
To exercise these rights, contact us at hello@portugal-and-co.com.
Essential storage keeps the site working and remembers your cookie choice. Analytics and advertising cookies (Google Analytics, Google Ads and the LinkedIn Insight Tag) are only set if you accept them in the cookie banner; until then Google receives no cookies from this site, and the LinkedIn tag is not loaded. Calendly and Stripe may set their own strictly necessary cookies when you book or pay. Your choice is kept for six months, and you can change it at any time through Cookie settings, also available in the footer of every page.
8. Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, or destruction.
9. Changes to This Policy
We may update this Privacy Policy periodically. Changes are effective when posted to the website.
10. Contact Us
For privacy questions or to exercise your rights, contact: hello@portugal-and-co.com