Privacy Policy.

1.Who We Are

This Privacy Policy explains how Viver Europa, Lda., trading as Viv Europe ("Viv Europe," "we," "us"), collects and uses your personal data when you use our website (viveurope.com) and Client Portal (portal.viveurope.com) - together, the "Platform." We are the controller of your personal data.

• Controller: Viver Europa, Lda. - NIPC 515916145, AMI Licence 21426.
• Registered office: Praça da Justiça, n.º 168, São Victor, 4715-125 Braga, Portugal.
• Office: R. de Augusto Rosa 79, 4000-098 Porto, Portugal.
• Privacy contact: contact@viveurope.com.

This Policy complements our Terms of Service and is provided in line with the EU General Data Protection Regulation (GDPR) and Portuguese data-protection law. Where translated versions are offered, they are non-certified convenience translations and the English version is the operative reference.

2.Personal Data We Collect

Depending on how you use the Platform, we may collect the following categories of personal data:

• Identity & contact data - name, email, phone, country of residence and nationality.
• Relocation & eligibility data - your answers to our eligibility test and intake forms: destination country, whether you hold EU/EEA citizenship, your work situation, approximate monthly income and savings range, family composition, and your timeline. If you request a proposal or hand-off to WhatsApp, these answers are stored with your contact record.
• Tax intake data - if you use our tax-situation form: your income types, the countries they come from, annual income bands (never exact figures), tax-residency plans and interest in Portuguese tax regimes.
• Company-formation data - if you request a company-formation quote: details of the company and of each shareholder, which can include name, date of birth, nationality, home address, tax identification number, marital status and capital share.
• Property data - if you list a property or share housing preferences: your contact details, the property's address and photos, or your search criteria, budget and household details.
• Account & Portal data - login credentials and your case roadmap, milestones, tasks and progress.
• Documents you upload - passports, identity, civil-status, financial and other supporting documents required for your application.
• Payment data - handled by our payment processor (Stripe). We receive confirmation and transaction metadata, but never your full card number.
• Communications - messages via live chat (Intercom), emails, WhatsApp if you choose to contact us there, and scheduled-call details.
• Technical & usage data - IP address, device and browser information, cookies and analytics events (subject to your consent), first-visit campaign parameters, and a checkout audit-trail (IP, timestamp and the Terms version you accepted).

3.How We Collect Your Data

We collect personal data directly from you (through our forms, eligibility test, checkout, Portal uploads, chat and calls); automatically (through cookies and analytics, subject to your consent); and occasionally from third parties acting on your behalf - for example, a family member who purchases services for you and confirms they are authorised to provide your data.

4.Why We Use Your Data & Legal Bases

We process your personal data for the following purposes and on the following legal bases under Article 6 GDPR:

• Providing our services - managing your account, delivering relocation support and the Portal, preparing and e-signing proposals, and processing payments. Basis: performance of a contract.
• Eligibility assessments and quotes you request, including a one-time reminder if a proposal you generated yourself remains unsigned. Basis: contract / pre-contractual steps.
• Responding to your enquiries and routing them to the right specialist - which can include an independent professional, such as the certified accountant who prepares tax quotes. Basis: pre-contractual steps at your request.
• Meeting reminders by email and - only if you expressly opted in when booking - by SMS. Basis: contract / your consent for SMS.
• Newsletters and marketing emails. Basis: your consent, which you can withdraw at any time.
• Analytics, advertising measurement and non-essential cookies. Basis: your consent.
• Fraud prevention, anti-money-laundering checks, accounting and the e-commerce audit-trail. Basis: compliance with legal obligations.
• Security, service improvement and defending legal claims. Basis: our legitimate interests.

Where the documents you provide contain special-category data, we rely on your explicit consent (Article 9(2)(a)) and/or the establishment or defence of legal claims (Article 9(2)(f)).

5.Cookies & Analytics

Essential and functional cookies - including those that power our live chat - are always active because they make the site work. If you choose “Accept” in our cookie banner, we also load our analytics and advertising tools: Google Tag Manager, Google Analytics, Google Ads, the Meta (Facebook) Pixel and PostHog. These let us measure our campaigns and understand how visitors use the site, including recording browsing sessions. Session recordings mask form inputs, so we do not capture what you type. We do not sell your personal data. Accepting and declining are equally easy, your choice is stored together with its date and the version of this notice, and you can change it at any time using “Cookie settings” in the website footer.

Some pages embed third-party content - for example YouTube videos (in privacy-enhanced mode), Instagram posts, our video player (Mux) and the HubSpot meeting scheduler. When such content loads, the provider may process technical data such as your IP address under its own privacy policy.

To protect our contact and newsletter forms from spam and automated abuse, we use Cloudflare Turnstile. It runs invisibly as an essential security measure on the basis of our legitimate interest, and may process device and browsing information to tell human visitors apart from bots. It is not used for advertising or profiling. This processing is governed by Cloudflare’s Turnstile Privacy Addendum.

6.Who We Share Your Data With

We never sell your personal data. We share it only as necessary with vetted service providers (processors) who act on our instructions, and with the independent professionals involved in delivering what you asked for:

• Infrastructure & storage - Vercel (website and application hosting, and storage of property photos you upload), Supabase (Portal authentication and secure document storage), Neon (application database), Browserless (secure rendering of your proposals and documents into PDF).
• CRM & communications - HubSpot (customer-relationship management and meeting scheduling), Mailchimp (newsletter delivery), Resend (transactional and confirmation emails), Intercom (live chat), Twilio (SMS meeting reminders, only if you expressly opted in), Pingram (Portal notification emails), and our internal alerting and automation tools (Slack and n8n), which carry the details you submit so our team can respond quickly.
• Payments & signature - Stripe (payment processing) and SignWell (electronic signature of proposals and agreements).
• Analytics & advertising (consent-based) - PostHog (product analytics and masked session replay), Google (tag management, analytics and ads measurement), Meta Platforms (advertising measurement via the Meta Pixel); see Meta’s Privacy Policy.
• Security & monitoring - Cloudflare (Turnstile bot protection; governed by its Turnstile Privacy Addendum) and Sentry (error monitoring in the Portal).
• Independent professionals - where the service you request requires it: the independent certified accountant who prepares your tax quote (they receive your tax-intake answers), and the external lawyers, accountants or other specialists working on your case.
• WhatsApp (Meta Platforms) - messaging, if you choose to contact us there. Anything you send in that chat is processed by WhatsApp under its own privacy policy.
• Sanity and Mux - content management and video hosting (no client personal data).

We may also share data with competent public authorities (such as AIMA and the Portuguese Tax Authority) where this is necessary to deliver the service you purchased, and with advisers, auditors or authorities where required by law or to prevent fraud.

7.International Transfers

Some of our providers are located outside the European Economic Area - primarily in the United States, including our hosting, analytics, CRM, email, SMS, signature and monitoring providers listed above. Where personal data is transferred outside the EEA, we rely on appropriate safeguards - principally the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework - so your data continues to receive an equivalent level of protection.

8.How Long We Keep Your Data

We keep personal data only for as long as necessary for the purposes described above:

• Enquiry and eligibility data - kept while our relationship with you is active; you can ask us to delete it at any time.
• Marketing data - until you withdraw your consent or unsubscribe.
• Client case files and documents - for the duration of your engagement and for as long as required afterwards to meet our legal obligations.
• Accounting and tax records - for the period required under Portuguese law (generally 10 years).
• Anti-money-laundering records - for the legally required retention period (generally 7 years from the end of the business relationship or the transaction).
• Analytics data and session recordings - for the retention period configured in our analytics tools, after which they are deleted or aggregated.

When personal data is no longer needed, we securely delete or anonymise it.

9.Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data (the "right to be forgotten"), where applicable;
• Restrict or object to certain processing;
• Receive and port your data to another provider;
• Withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise any of these rights, contact us at contact@viveurope.com. We respond within one month, as the GDPR requires. You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD) - www.cnpd.pt.

10.How We Protect Your Data

We treat your data and documents with a high degree of security. Documents are stored on enterprise-grade infrastructure with private storage policies, authentication layers and encryption, and access is limited to you and the Viv Europe personnel assigned to your case. Secrets are stored server-side only, and the Platform uses HTTPS, HSTS and other security headers. No method of transmission or storage is completely secure, but we work continually to protect your information.

11.The Client Portal

When you become a client and use the Portal, some additional processing applies:

• Product analytics and error monitoring run for logged-in users on the basis of our legitimate interest in keeping the Portal working: analytics are tied to an internal account identifier (not your name or email), on-screen text and everything you type are masked in session replays, and error reports do not include your personal details.
• Case documents are shared within your case - the family members on one relocation process, your assigned case managers, and where needed the external professionals working on it.
• Some deliveries happen by email - for example messages from your case manager and secure, time-limited links to documents, sent to the addresses on your case.
• Login security - we process your IP address for rate-limiting and abuse prevention, and use verification codes and optional device-trust cookies to protect your account.

12.Children’s Data

Our services are intended for adults. However, relocation applications often involve minor family members. We process minors’ personal data only when it is provided by a parent or guardian who confirms they have the authority to do so, and solely to deliver the relocation service requested.

13.Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on this page, together with the "Last updated" date. Where changes are material, we will take reasonable steps to notify you - for example by email or through the Portal.

14.Contact Us

For any question about this Policy or about how we handle your personal data, contact us at contact@viveurope.com, or write to Viver Europa, Lda., Praça da Justiça, n.º 168, São Victor, 4715-125 Braga, Portugal.