Privacy Policy

Last updated: April 2026

LusoGateway ("we," "us," or "our") is committed to protecting the privacy of every individual who visits our website at lusogateway.pt (the "Website") or submits personal data through our consultation form. This Privacy Policy explains what data we collect, why we collect it, how we process and store it, and your rights under the EU General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for your personal data is LusoGateway, based in Lisbon, Portugal. For any privacy-related enquiries or requests, please contact us by email at privacy@lusogateway.pt.

2. What Data We Collect

When you submit our consultation form, we collect the following personal data:

• Full name
• Email address
• Phone number (with country code)
• Nationality
• Investment budget (optional)
• Preferred time to call (optional)

We do not collect sensitive personal data (such as health data, biometric data, or political opinions) through this Website.

3. How We Use Your Data

We process your personal data for the following purposes:

• Responding to your enquiry — to contact you by email regarding your consultation request and assess your eligibility for the Golden Visa program.
• Connecting you with qualified professionals — with your consent, to introduce you to regulated investment funds and licensed legal professionals in Portugal.
• Improving our service — in aggregated, anonymised form only, to understand enquiry patterns and improve our website.

We will never use your personal data for unsolicited marketing, nor will we sell, rent, or share your personal data with third parties for their own marketing purposes.

4. Legal Basis for Processing

Under the GDPR, we process your data on the following legal bases:

• Consent (Article 6(1)(a)) — when you voluntarily submit the consultation form, you consent to our processing of your data for the purposes described above.
• Legitimate interest (Article 6(1)(f)) — to respond to your enquiry and facilitate introductions to regulated professionals, which is reasonably expected when submitting a consultation request.

5. Data Sharing

We may share your personal data with the following categories of recipients, solely for the purpose of responding to your enquiry:

• Regulated investment fund managers — CMVM-regulated fund managers in Portugal, to assess and discuss investment options with you.
• Licensed legal professionals — qualified Portuguese attorneys and immigration professionals, to provide legal guidance on your application.
• Technology service providers — our website hosting provider (Netlify, Inc.) processes form submissions on our behalf. Netlify's privacy policy is available at netlify.com/privacy.

We will always inform you before sharing your data with any specific professional or fund manager, and you may object at any time.

6. International Transfers

Your form data is submitted to and processed by Netlify, Inc., which may store data on servers located outside the European Economic Area (EEA). Netlify complies with applicable data transfer mechanisms, including Standard Contractual Clauses (SCCs), to ensure adequate protection. All other data processing takes place within the EEA.

7. Data Retention

We retain your personal data for as long as necessary to respond to your enquiry and facilitate introductions — typically no longer than 24 months from the date of your submission. After this period, your data is securely deleted unless you have entered into an ongoing relationship with us or a professional we introduced, in which case retention will be governed by the relevant engagement agreement.

8. Cookies

This Website uses only essential cookies necessary for the website to function correctly (such as storing your cookie consent preference). We do not use any tracking cookies, analytics cookies, advertising cookies, or third-party cookies for marketing purposes.

The sole cookie we set is:

• lg_cookie_consent — records whether you have accepted or declined our cookie notice. Stored in your browser's local storage. No personal data is contained in this cookie.

Google reCAPTCHA, used on our contact form, may set its own cookies to distinguish human visitors from automated bots. These cookies are managed by Google and are governed by Google's Privacy Policy.

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — request deletion of your personal data.
• Right to restrict processing — request that we limit how we use your data.
• Right to data portability — request your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interest.
• Right to withdraw consent — withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, contact us at privacy@lusogateway.pt. We will respond within 30 days.

10. Complaints

If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Portuguese data protection authority:

CNPD — Comissão Nacional de Proteção de Dados
Website: www.cnpd.pt

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

← Back to LusoGateway