At E-Expat, we take your privacy seriously. This policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and Portuguese law.

‍1. Data We Collect
‍To provide relocation services (NIF/NISS), we must collect:
‍
‍Identity Data: Full name, date of birth, and nationality.
‍Identity Documents: High-resolution scans/photos of your Passport or National ID.

‍Contact & Address Data: Email, phone number, and Proof of Address from your current country of residence.

‍Technical Data: IP address and browser type (collected via Webflow/Firebase for security and analytics).

‍2. Why We Collect This Data (Legal Basis)
‍We process your data under the following legal grounds:

‍Performance of a Contract: We need this data to fulfill the relocation service you purchased.

‍Legal Obligation: As your fiscal representative, we are required by the Portuguese Tax Authority (Autoridade Tributária) to hold accurate records of your identity.

‍3. How We Store and Protect Your Data
‍Your documents are highly sensitive. We use industry-standard security:

‍Infrastructure: Your data is stored using Firebase (Google Cloud), which provides enterprise-grade encryption both at rest and in transit.

‍Access Control: Access to your passport and address documents is strictly limited to authorized E-Expat staff and your assigned legal/fiscal representative.

‍No Paper Copies: We operate a fully digital workflow to minimize the risk of physical document loss.

‍4. Data Sharing
‍We only share your data with:

‍Portuguese Authorities: Finanças (Tax Office) and Segurança Social (Social Security) to issue your numbers.
‍Legal Partners: Licensed lawyers or solicitors who act as your fiscal representative.
‍Service Providers: Secure tools like Stripe (for payments) and Firebase (for hosting). We never sell your data to third parties.

‍5. Data RetentionService Documents: We retain your passport and address scans only for as long as necessary to complete your application.

‍Legal Requirement: As your fiscal representative, we may be legally required to keep a record of your NIF association for up to 10 years to comply with Portuguese tax and commercial bookkeeping laws.

‍6. Your Rights
‍Under the GDPR, you have the right to:

‍Access: Request a copy of the data we hold about you.
‍Rectification: Correct any inaccurate information.
‍Erasure ("Right to be Forgotten"): Request the deletion of your data once our legal obligation to hold it has expired.
‍Withdraw Consent: You can withdraw your consent for marketing at any time.

‍7. Contact Us
‍For any data-related requests or to exercise your rights, please contact our Data Protection lead at: E-Expat, Email: hello@e-expat.com