Privacy Policy

Last updated: Tuesday 31 March 2026

PRIVACY POLICY

This Privacy Policy explains how personal data is collected, used, and protected when you use this website.

By using our website or contacting us, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controllers

   Stones & Bota – Sociedade de Mediação Imobiliária, Lda, AMI licence 25373, is the Data Controller in respect of all client and transaction-related personal data. It collects, uses, stores, and protects personal data in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and applicable Portuguese law.

   For general website operation, analytics, and marketing infrastructure:
   Full Time Group Limited, may act as an independent Data Controller or Joint Controller, depending on the processing activity.

   When required, the parties have entered into a data processing and / or joint controller arrangement in accordance with the GDPR.

2. Personal data collected

   We may collect the following categories of data:
   • Identification and contact information: name, email, phone number, address.
   • Property-related information: property preferences, financial capacity (when voluntarily provided), details relevant to real estate transactions.
   • Transaction information: data required for property purchases, sales, rentals, or mediation.
   • Technical data: IP address, browser type, device information, usage data collected through cookies.
   • Communication data: messages or enquiries submitted through forms, email, or phone.

3. How we collect personal data

   We collect personal data through:
   • Contact forms on our website
   • Email or phone enquiries
   • Property viewings and meetings
   • Contracts or documentation provided during a real estate transaction
   • Public sources or databases (when legally permitted)
   • Cookies and similar technologies

4. Purposes and legal basis for processing

   We process personal data for the following purposes:

   a) Real estate mediation services
   • To respond to enquiries
   • To provide property listings, organise viewings, and match clients with suitable properties
   • To prepare, negotiate, or execute real estate contracts. Legal basis: Performance of a contract or pre-contractual steps (Article 6(1)(b) GDPR).

   b) Legal and regulatory compliance
   • Compliance with Portuguese real estate regulations
   • Accounting, invoicing, and anti-money laundering (AML) obligations. Legal basis: Compliance with a legal obligation (Article 6(1)(c) GDPR).

   c) Marketing and communications
   • Sending newsletters, property alerts, or promotional materials
   • Managing marketing preferences. Legal basis: Consent (Article 6(1)(a) GDPR) – you may withdraw your consent at any time.

   d) Website improvement and security
   • Monitoring website performance
   • Ensuring network and information security. Legal basis: Legitimate interests (Article 6(1)(f) GDPR).

5. Sharing of personal data

   We may share your personal data between Full Time Group Limited and Stones & Bota – Sociedade de Mediação Imobiliária, Lda as well as:

   • Professional service providers (IT services, marketing tools, email providers)
   • Real estate portals or listing platforms (when you ask us to list your property)
   • Financial institutions, notaries, lawyers, or other entities involved in real estate transactions
   • Public authorities when legally required (e.g. tax authorities, AML compliance)

   Personal data is not sold or transferred to third parties for their own marketing purposes.

6. International transfers

   If data is transferred outside the European Economic Area (EEA), such transfers will be carried out under approved safeguards, such as:

   • Standard Contractual Clauses (SCCs)
   • Adequacy decisions by the European Commission

7. Data retention

   We retain personal data only for as long as necessary:

   • For client records: up to 10 years for legal and accounting purposes
   • For marketing: until you withdraw your consent
   • For general enquiries: up to 2 years

8. Your rights

   Under GDPR, you have the right to:

   • access your data
   • rectify inaccurate data
   • request erasure (“right to be forgotten”)
   • restrict processing
   • data portability
   • object to processing
   • withdraw consent at any time
   • lodge a complaint with the Portuguese Data Protection Authority (CNPD)

9. Cookie Policy

   As is common practice with almost all professional websites, our website uses cookies which are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.

   We may use cookies in order to improve the user experience of this website, tell us which parts of the website the users have visited, provide enhanced services and remember the location and language settings for individual users. Most web browsers allow some control of most cookies through the browser settings. You may refuse to accept cookies by activating the settings on your browser. However, if you select this setting you may be unable to access certain parts of our site.​

   Third party cookies

   This site uses Google Analytics which is one of the most widespread and trusted analytics solution on the web for helping us to understand how you use the site and ways that we can improve your experience. These cookies may track things such as how long you spend on the site and the pages that you visit so we can continue to produce engaging content. For more information on Google Analytics cookies, see the official Google Analytics page here.

   Links to other websites

   Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over other websites. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy policy. You should exercise caution and look at the privacy policy applicable to the website in question.

10. Security measures

    We implement appropriate technical and organisational measures to protect personal data from loss, misuse, or unauthorised access.

11. Changes to this Privacy Policy

    We may update this Privacy Policy from time to time. Changes will be published on our website with the updated date.

12. Contact

    For data protection queries:
    Stones & Bota – Sociedade de Mediação Imobiliária, Lda
    email: [email protected]