Privacy Policy
Last updated: 17 March 2026 · Effective date: 17 March 2026
Summary: We collect only what we need to provide our service. We never sell your data. You have the right to access, correct, or delete your information at any time. This policy is compliant with the EU General Data Protection Regulation (GDPR) and Portuguese Lei n.º 58/2019.
1. Who we are
VerifyLisbon is a property scouting service based in Lisbon, Portugal. We provide on-the-ground property verification and relocation support for international clients. For data protection purposes, VerifyLisbon is the Data Controller.
Contact: [email protected] · WhatsApp: +351 960 188 355
2. What data we collect
We collect the following categories of personal data:
- Identity data: name
- Contact data: email address, phone number, WhatsApp number
- Service data: property links, preferences, budget, move-in requirements you share with us
- Technical data: IP address, browser type, device type, pages visited (collected via cookies if you consent)
- Payment data: payment confirmation references only — we do not store card numbers or bank details
- Communications data: content of emails, WhatsApp messages, and form submissions you send to us
3. How we collect your data
- Contact forms on this website
- WhatsApp and email communications you initiate
- Instagram direct messages
- Payment confirmation receipts from Revolut, PayPal, or bank transfer
- Cookies and analytics (only with your consent)
4. Why we use your data (legal basis)
- Contract performance (Art. 6(1)(b) GDPR): to deliver the scouting service, schedule visits, and send reports
- Legitimate interests (Art. 6(1)(f) GDPR): to respond to enquiries and improve our service
- Legal obligation (Art. 6(1)(c) GDPR): to comply with Portuguese tax and financial reporting requirements
- Consent (Art. 6(1)(a) GDPR): for marketing emails and non-essential cookies — only when you have given explicit consent
5. How we use your data
- To schedule and conduct property visits on your behalf
- To deliver Truth Reports, videos, and written assessments
- To communicate about your booking or enquiry
- To process and record payments
- To comply with Portuguese legal and tax obligations
- To send service-related updates (not marketing, unless consented)
6. Who we share your data with
We never sell your data. We may share data with:
- Formspree — contact form processing (data processed in the EU)
- Revolut / PayPal — payment processing (subject to their own privacy policies)
- WhatsApp (Meta) — if you contact us via WhatsApp
- Trusted referral professionals (lawyers, NIF agents) — only with your explicit consent and only the minimum data needed
- Portuguese tax authorities (AT/Finanças) — as legally required
All third-party processors are bound by data processing agreements compliant with GDPR.
7. How long we keep your data
- Client records: 7 years (Portuguese tax law requirement)
- Enquiries that did not convert: deleted after 12 months
- Scout Pack purchasers: retained for 5 years (the validity period of the pack)
- Cookie/analytics data: 13 months maximum
8. Cookies
We use the following types of cookies:
- Essential cookies: required for the website to function (no consent needed)
- Analytics cookies: used to understand how visitors use the site — only with your consent
You can manage or withdraw cookie consent at any time by clearing your browser cookies or contacting us. Our cookie banner appears on first visit for new users.
9. Your rights under GDPR
You have the following rights regarding your personal data:
- Right of access: request a copy of the data we hold about you
- Right to rectification: ask us to correct inaccurate data
- Right to erasure ("right to be forgotten"): request deletion of your data (subject to legal retention obligations)
- Right to restrict processing: ask us to limit how we use your data
- Right to data portability: receive your data in a structured, machine-readable format
- Right to object: object to processing based on legitimate interests
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time
To exercise any right, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Portuguese data protection authority: CNPD — Comissão Nacional de Proteção de Dados (cnpd.pt).
10. Data security
We implement appropriate technical and organisational measures to protect your data including encrypted email, secure payment processors, and restricted access to client files. In the event of a data breach that poses a risk to your rights, we will notify you and the CNPD within 72 hours as required by GDPR.
11. International transfers
Some third-party services (e.g. Formspree, PayPal) may process data outside the EU. Where this occurs, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions) in accordance with GDPR Chapter V.
12. Changes to this policy
We may update this privacy policy from time to time. The current version will always be available at this URL. Significant changes will be communicated by email to active clients.
13. Contact
For any data protection queries: