Privacy Policy · Viv Europe

1.Who We Are

This Privacy Policy explains how Viver Europa, Lda., trading as Viv Europe ("Viv Europe," "we," "us"), collects and uses your personal data when you use our website (viveurope.com) and Client Portal (portal.viveurope.com) — together, the "Platform." We are the controller of your personal data.

Controller: Viver Europa, Lda. — NIPC 515916145, AMI Licence 21426.
Registered office: Praça da Justiça, n.º 168, São Victor, 4715-125 Braga, Portugal.
Privacy contact: contact@viveurope.com.

This Policy complements our Terms of Service and is provided in line with the EU General Data Protection Regulation (GDPR) and Portuguese data-protection law. Where translated versions are offered, the English version is the operative reference.

2.Personal Data We Collect

Depending on how you use the Platform, we may collect the following categories of personal data:

Identity & contact data — name, email, phone, country of residence and nationality.
Relocation & eligibility data — your answers to our eligibility quiz and intake forms (destination country, visa of interest, family composition, employment and financial situation).
Account & Portal data — login credentials and your case roadmap, milestones, tasks and progress.
Documents you upload — passports, identity, civil-status, financial and other supporting documents required for your application.
Payment data — handled by our payment processor (Stripe). We receive confirmation and transaction metadata, but never your full card number.
Communications — messages via in-Portal and live chat (Intercom), emails, and scheduled-call details.
Technical & usage data — IP address, device and browser information, cookies and analytics events, and a checkout audit-trail (IP, timestamp and the Terms version you accepted).

Sensitive documentsSome documents you upload may contain special categories of personal data under Article 9 GDPR (for example, health, religious or biometric information). We process this data only to deliver the relocation service you have requested — on the basis of your explicit consent and/or to establish or defend legal claims.

3.How We Collect Your Data

We collect personal data directly from you (through our forms, eligibility quiz, checkout, Portal uploads, chat and calls); automatically (through cookies and analytics, subject to your consent); and occasionally from third parties acting on your behalf — for example, a family member who purchases services for you and confirms they are authorised to provide your data.

4.Why We Use Your Data & Legal Bases

We process your personal data for the following purposes and on the following legal bases under Article 6 GDPR:

Providing our services — managing your account, delivering relocation support and the Portal, and processing payments. Basis: performance of a contract.
Eligibility assessments you request. Basis: contract / pre-contractual steps.
Newsletters and marketing emails. Basis: your consent, which you can withdraw at any time.
Analytics and non-essential cookies. Basis: your consent.
Fraud prevention, anti-money-laundering checks, accounting and the e-commerce audit-trail. Basis: compliance with legal obligations.
Security, service improvement and defending legal claims. Basis: our legitimate interests.

Where the documents you provide contain special-category data, we rely on your explicit consent (Article 9(2)(a)) and/or the establishment or defence of legal claims (Article 9(2)(f)).

5.Cookies & Analytics

Essential and functional cookies — including those that power our live chat — are always active because they make the site work. Analytics cookies (via PostHog) and any tag-management/analytics tools (via Google) are set only if you choose “Accept” in our cookie banner. We never use cookies for advertising profiling and we do not sell your data. Session recordings mask form inputs, so we do not capture what you type. You can change your choice at any time using “Cookie settings” in the website footer.

6.Who We Share Your Data With

We never sell your personal data. We share it only as necessary with vetted service providers (processors) who act on our instructions under data-processing agreements:

HubSpot — customer-relationship management (leads and contacts).
Mailchimp — newsletter email delivery.
Stripe — payment processing.
Resend — transactional and confirmation emails.
Intercom — live chat and messaging.
Supabase — Portal authentication and secure document storage.
Neon — application database.
PostHog — product analytics (consent-based).
Google — tag management and analytics (consent-based).
Vercel — website and application hosting.
Sanity and Mux — content management and video hosting (no client personal data).

We may also share data with competent public authorities (such as AIMA and the Portuguese Tax Authority) where this is necessary to deliver the service you purchased, and with advisers, auditors or authorities where required by law or to prevent fraud.

7.International Transfers

Some of our providers are located outside the European Economic Area (for example, in the United States). Where personal data is transferred outside the EEA, we rely on appropriate safeguards — principally the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework — so your data continues to receive an equivalent level of protection.

8.How Long We Keep Your Data

We keep personal data only for as long as necessary for the purposes described above:

Marketing data — until you withdraw your consent or unsubscribe.
Client case files and documents — for the duration of your engagement and for as long as required afterwards to meet our legal obligations.
Accounting and tax records — for the period required under Portuguese law (generally 10 years).
Anti-money-laundering records — for the legally required retention period (generally 7 years).
Analytics data — for a limited period, after which it is deleted or aggregated.

When personal data is no longer needed, we securely delete or anonymise it.

9.Your Rights

Under the GDPR, you have the right to:

Access the personal data we hold about you;
Rectify inaccurate or incomplete data;
Erase your data (the "right to be forgotten"), where applicable;
Restrict or object to certain processing;
Receive and port your data to another provider;
Withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise any of these rights, contact us at contact@viveurope.com. You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt.

10.How We Protect Your Data

We treat your data and documents with a high degree of security. Documents are stored on enterprise-grade infrastructure with private storage policies, authentication layers and encryption, and access is limited to you and the Viv Europe personnel assigned to your case. Secrets are stored server-side only, and the Platform uses HTTPS, HSTS and other security headers. No method of transmission or storage is completely secure, but we work continually to protect your information.

11.Children’s Data

Our services are intended for adults. However, relocation applications often involve minor family members. We process minors’ personal data only when it is provided by a parent or guardian who confirms they have the authority to do so, and solely to deliver the relocation service requested.

12.Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on this page, together with the "Last updated" date. Where changes are material, we will take reasonable steps to notify you — for example by email or through the Portal.

13.Contact Us

For any question about this Policy or about how we handle your personal data, contact us at contact@viveurope.com, or write to Viver Europa, Lda., Praça da Justiça, n.º 168, São Victor, 4715-125 Braga, Portugal.

Privacy Policy.