Privacy Policy

This Privacy Policy explains how Portugal Visa Lawyer (operated by Fractio AB, Sweden) collects, uses and protects your personal data when you use this website at portugalvisalawyer.com. We process personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and applicable national law.

1. Data controller

The data controller for personal data collected through this website is:

• Fractio AB, registered in Sweden, operating Portugal Visa Lawyer as a lead-generation and intake platform.
• Contact: privacy@portugalvisalawyer.com

When your request is forwarded to a Portuguese-licensed immigration lawyer for case review, that lawyer becomes an independent controller of the data they process for the purpose of providing legal services.

2. What data we collect

We collect only the data you choose to provide and a limited amount of technical data needed to operate the site:

2.1 Information you provide

• Identity and contact details (name, email, phone/WhatsApp).
• Nationality and current country of residence.
• Service requested (visa type) and urgency.
• Any free-text message you submit.
• Marketing or campaign source (UTM parameters), where applicable.

2.2 Information collected automatically

• Standard server log data (IP address, user agent, timestamp).
• Aggregated analytics (pages visited, referrer, device type) via privacy-aware analytics tools — see our Cookie Policy.

3. Purposes and legal bases

• To respond to your request and forward it to a Portuguese-licensed immigration lawyer for review — legal basis: performance of a request you initiated and our legitimate interest in operating a lead-intake service (Art. 6(1)(b) and (f) GDPR).
• To send follow-up communications about your enquiry — legal basis: your consent given via the form checkbox (Art. 6(1)(a) GDPR).
• To comply with legal obligations, including record-keeping — legal basis: legal obligation (Art. 6(1)(c) GDPR).
• To protect against fraud and abuse of the form — legal basis: our legitimate interest in site security (Art. 6(1)(f) GDPR).
• To measure and improve the website via aggregated analytics — legal basis: our legitimate interest, subject to your cookie preferences.

4. Who we share data with

We share data only with parties strictly necessary to operate the service:

• The Portuguese-licensed immigration lawyer who reviews your case.
• Service providers acting as processors on our behalf, including hosting (Netlify), email delivery and analytics, all bound by appropriate data-protection agreements.
• Public authorities, where required by law.

We do not sell your personal data and we do not share it with third parties for their own marketing purposes.

5. International transfers

Some of our service providers may be located outside the European Economic Area. Where this is the case, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, or equivalent mechanisms, to protect your data.

6. Retention

We retain enquiry data for as long as needed to respond to your request and, where applicable, for the duration of any subsequent client relationship with the lawyer. Inactive enquiries are deleted or anonymised within 24 months of last contact, unless a longer period is required by law.

7. Your rights under the GDPR

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw your consent at any time, without affecting prior processing.
• Lodge a complaint with a supervisory authority — in Sweden, the Integritetsskyddsmyndigheten (IMY); in Portugal, the Comissão Nacional de Proteção de Dados (CNPD).

To exercise any of these rights, contact us at privacy@portugalvisalawyer.com.

8. Security

The site is served exclusively over HTTPS. Form submissions are transmitted using TLS encryption. We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss or alteration.

9. Children

The website is not directed at children under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has submitted data through the site, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

For privacy-related questions or to exercise your rights, contact: privacy@portugalvisalawyer.com.