Privacy Policy

The data controller is H Consulting EURL, SIREN 888 372 646, 12 Rue du Montoir, 77670 Vernou-la-Celle-sur-Seine, France. Contact: hello@algarve-property-score.com.

We may collect the following categories of personal data:

• Identification data: name, email address, phone number.
• Order data: selected service, property details you submit, documents you upload (e.g. Caderneta Predial, Certidão Permanente do Registo Predial, Licença de Utilização and any additional documents).
• Payment data: processed by our payment provider Stripe. We do not store card details.
• Communication data: content of your messages and email exchanges.
• Technical data: log data, IP address, cookies (see Cookie Policy).

• Providing the requested services (performance of a contract).
• Processing payments (performance of a contract; legal obligation).
• Responding to enquiries (legitimate interest / pre-contractual steps).
• Accounting and legal record-keeping (legal obligation).
• Analytics and site improvement (consent, where required — see Cookie Policy).

Documents you upload through the order form (e.g. Caderneta Predial, Certidão Permanente do Registo Predial, Licença de Utilização and any additional documents you choose to share) are used exclusively to prepare the analysis you requested. They are stored in a private, access-controlled storage bucket and are accessible only to our internal team and to the technical processes that generate and deliver your report.

Uploaded property documents are retained for a maximum of 12 months after completion of the requested service, unless a longer retention period is required by law (for example, accounting or tax obligations under French law). After that period they are securely deleted. You may request earlier deletion at any time by contacting us at hello@algarve-property-score.com. These documents are never sold, shared for marketing purposes or reused for other projects without your explicit consent.

Personal data may be shared with vetted service providers acting as processors on our behalf, under written data processing agreements and appropriate safeguards:

• Stripe Payments Europe, Ltd. (Ireland) — payment processing. Card details are collected and processed directly by Stripe; we do not store them.
• Supabase (via the Lovable Cloud platform) — database and secure storage of order records and uploaded documents in the European Union.
• FormSubmit — transactional delivery of order notifications and confirmation emails, including uploaded documents as attachments to our internal mailbox.
• Google Ireland Limited — Google Analytics 4 (audience measurement, only after your consent).
• Microsoft Ireland Operations Limited — Microsoft Clarity (usage analytics and session insights, only after your consent).
• Where strictly necessary to carry out the requested analysis, local professionals (e.g. legal or technical partners) bound by confidentiality.

Where personal data is transferred outside the European Economic Area (for example, to Google or Microsoft group entities), we rely on appropriate safeguards recognised by the GDPR, in particular the European Commission's Standard Contractual Clauses and the providers' additional technical measures (encryption in transit, IP anonymisation).

Personal data is retained only for as long as necessary:

• Uploaded property documents: up to 12 months after completion of the requested service, unless a longer period is required by law.
• Order and contact data: for the duration of the commercial relationship.
• Invoicing and accounting records: 10 years, as required by French accounting law.
• Analytics data: as long as configured with the analytics provider (typically up to 14 months for Google Analytics), or until you withdraw consent.

Under the GDPR, you have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability and the right to withdraw consent at any time without affecting the lawfulness of prior processing.

You may exercise these rights, or ask any question about how your data is handled, by writing to hello@algarve-property-score.com. We will respond within one month of receipt of your request. You also have the right to lodge a complaint with the French data protection authority (CNIL, www.cnil.fr) or with the supervisory authority of your EU country of residence.

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction: TLS encryption in transit, private access-controlled storage for uploaded documents, restricted server-side access, and secret management for all API keys and payment credentials.

This Privacy Policy may be updated to reflect changes in our services or applicable law. The current version is always available on the Site.