Privacy Policy

The data controller responsible for your personal data is: Sandra Maciel — Private Real Estate Broker Email: [email protected] Website: sandramaciel.com For any questions regarding this policy or your personal data, please contact us at the email address above.

We collect the following categories of personal data: • Identification data: full name, email address, phone number • Contact preferences: nationality, country of residence • Communication data: messages and enquiries you send us • Technical data: IP address, browser type, pages visited (via cookies, with your consent) • Transaction data: information related to property search and acquisition services

We process your personal data on the following legal bases under GDPR Article 6: • Consent (Art. 6(1)(a)): When you submit a contact form or sign up for our guide, you provide explicit consent for us to process your data for the stated purpose. • Legitimate interests (Art. 6(1)(f)): To respond to your enquiries, provide our services, and maintain our business relationship. • Contractual necessity (Art. 6(1)(b)): When processing is necessary to perform a contract or pre-contractual steps at your request. You may withdraw your consent at any time by contacting us at [email protected].

We use your personal data for the following purposes: • Responding to your enquiries and providing real estate advisory services • Sending the requested guides and informational materials • Scheduling and conducting diagnostic calls • Maintaining our client relationship and follow-up communications • Improving our website and services (analytics, with consent) • Complying with legal obligations

We retain your personal data for the following periods: • Contact form submissions: 3 years from the date of last contact • Client relationship data: 7 years from the end of the business relationship (to comply with legal and tax obligations) • Marketing communications: Until you withdraw consent or unsubscribe • Website analytics data: 26 months (anonymised after 14 months) After these periods, your data will be securely deleted or anonymised.

We do not sell your personal data. We may share your data with: • HubSpot Inc. (CRM platform): Your contact information is stored in HubSpot's secure CRM system. HubSpot is certified under the EU-US Data Privacy Framework. For more information, see HubSpot's Privacy Policy at legal.hubspot.com/privacy-policy. • Professional service providers: Lawyers, notaries, and other professionals involved in your property transaction, only with your explicit consent. • Legal authorities: When required by law. All data transfers outside the EU/EEA are subject to appropriate safeguards (Standard Contractual Clauses or adequacy decisions).

Under EU Regulation 2016/679, you have the following rights: • Right of access (Art. 15): Request a copy of the personal data we hold about you. • Right to rectification (Art. 16): Request correction of inaccurate or incomplete data. • Right to erasure (Art. 17): Request deletion of your personal data ('right to be forgotten'). • Right to restriction of processing (Art. 18): Request that we limit how we use your data. • Right to data portability (Art. 20): Receive your data in a structured, machine-readable format. • Right to object (Art. 21): Object to processing based on legitimate interests. • Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of prior processing. To exercise any of these rights, contact us at: [email protected] You also have the right to lodge a complaint with your national data protection authority. In Portugal, this is the CNPD (Comissão Nacional de Proteção de Dados): www.cnpd.pt

Our website uses cookies to improve your browsing experience and analyse site traffic. We use the following categories of cookies: • Strictly necessary cookies: Required for the website to function. These cannot be disabled. • Analytics cookies: Help us understand how visitors interact with our website (e.g., Google Analytics). Only activated with your consent. • Marketing cookies: Used to track visitors across websites for advertising purposes. Only activated with your consent. You can manage your cookie preferences at any time through the cookie banner on our website or by adjusting your browser settings.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (HTTPS), access controls, and regular security reviews.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by updating the 'Last updated' date at the top of this page. We encourage you to review this policy periodically.

For any questions, requests, or complaints regarding your personal data, please contact: Sandra Maciel Email: [email protected] Website: sandramaciel.com