Privacy Policy

2. What personal data we process

• Information you type into our tools: listing links, listing text, notes about a property, vehicle or your situation, and the answers you give in questionnaires.
• Messages you send us: your name, email address and the content of your message.
• Health-related information only if you choose to enter it in the health comparison tool. You are never required to do so, and we ask you not to include more than is necessary.
• Technical data generated automatically when you visit: IP address, device and browser information, pages viewed, referring page, approximate location derived from IP, and language preference.
• Preferences stored in your browser, such as your chosen site language.

3. Why we process it, and the lawful basis

• To provide the features you request — generating an automated report, answering an AI question, producing comparison questions. Lawful basis: performance of a contract or the steps you ask us to take before one (Article 6(1)(b)), or our legitimate interest in operating the service you requested (Article 6(1)(f)).
• To reply to your enquiries. Lawful basis: performance of a contract or legitimate interest (Article 6(1)(b) or (f)).
• To keep the website secure, prevent abuse and diagnose faults. Lawful basis: legitimate interest (Article 6(1)(f)).
• To measure and improve the website using analytics. Lawful basis: your consent, where required by the cookie rules (Article 6(1)(a)).
• To comply with legal obligations, including accounting and tax record-keeping where a payment is made. Lawful basis: legal obligation (Article 6(1)(c)).
• Where you voluntarily provide health-related information to obtain a comparison, we rely on your explicit consent under Article 9(2)(a). You may withdraw it at any time; we will then stop using that information and delete it, save where retention is legally required.

4. Artificial intelligence processing

Our AI features work by sending the text you submit — for example a listing link, listing text, your notes or questionnaire answers — to third-party AI model providers acting as our processors or sub-processors, so that a response can be generated and streamed back to you.

We instruct these providers not to retain your inputs for training where that option is available to us. We do not use your inputs to build profiles about you and we do not make automated decisions that produce legal effects concerning you: our outputs are informational and you decide what to do.

Some AI providers operate outside the European Economic Area. Where that is the case, transfers are made under the safeguards described in section 7.

Please do not submit information you would not want processed this way, and in particular avoid sending identification numbers, financial account details or detailed medical history through the AI features.

5. Who receives your data

These recipients act as processors on our instructions, or as independent controllers where the law makes them so. We do not sell your personal data and we do not share it with sellers, agents, dealers, insurers or lenders.

• Hosting and infrastructure providers that run this website and its backend database.
• AI model providers that generate the responses in our AI features.
• Analytics providers, where you have consented to analytics cookies.
• Email and communication providers used to reply to you.
• Professional advisers, and public authorities where we are legally required to disclose.

6. When we automatically read a third-party listing

When you submit a listing link, our server requests that public page in order to read its content. This causes your submitted link, and our server's request, to reach the third-party website operator. We do not send them your identity, and their own privacy practices apply to their site.

7. International transfers

Where personal data is transferred outside the European Economic Area, we rely on an adequacy decision of the European Commission, or on the European Commission's Standard Contractual Clauses together with an assessment of the safeguards in place, as required by Chapter V of the GDPR. You can ask us which mechanism applies to a specific recipient.

8. How long we keep it

• Content you submit to an AI feature: processed to generate your response. The report you see is produced live in your browser and is not published; where a copy is stored in our backend for service and abuse-prevention purposes, it is kept no longer than necessary and then deleted.
• Messages you send us: for as long as needed to handle your enquiry and for a reasonable period afterwards to deal with follow-up questions.
• Records relating to payments: for the periods required by Portuguese tax and accounting law.
• Technical and security logs: a short period appropriate to their purpose.

9. Your rights

To exercise any right, email info@decideportugal.com or contact us through the Contact page. We respond within one month, extendable by two further months for complex requests, and we may need to verify your identity.

If you believe your data protection rights have been infringed, you may lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), or with the authority in your country of residence.

• Access: obtain confirmation of whether we process your data and a copy of it.
• Rectification: have inaccurate or incomplete data corrected.
• Erasure: have your data deleted where the conditions in Article 17 apply.
• Restriction: have processing limited in the circumstances set out in Article 18.
• Objection: object to processing based on our legitimate interests.
• Portability: receive data you provided in a structured, commonly used, machine-readable format.
• Withdraw consent: at any time, where processing is based on consent, without affecting processing already carried out.

10. Cookies and similar technologies

We use strictly necessary storage to make the website work, including remembering your language choice. Analytics or other non-essential technologies are used only with your consent. Our Cookie Policy explains this in detail and how to change your choice.

11. Security

We apply technical and organisational measures appropriate to the risk, including encrypted transport, access controls on our backend, and database rules that prevent submissions from being read publicly. No online service can be guaranteed absolutely secure.

12. Children

This website is intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

13. Changes to this policy

We may update this policy to reflect changes in our service or in the law. The date at the top shows when it was last revised. Material changes will be made clear on the website.