Updated May 2026
Privacy Policy
Coastal Vineyard Hideaway ("we", "us") is a privately listed estate in Torres Vedras, Portugal. This page explains what personal data we collect when you submit an inquiry, why we collect it, and the rights you have under the EU General Data Protection Regulation (GDPR) and Portuguese Law 58/2019.
1. Who is the controller
The owners of the estate act as the data controllers. You can reach us through the inquiry form on the home page, which is the primary contact channel for this listing.
2. What we collect
- Identity and contact details you submit: full name, email, phone (with country code), country of residence.
- Buyer context you submit: intent (lifestyle, investment, or both) and any free‑text message.
- Optional NDA details when you proceed past the price reveal: legal name, company (if any), e‑signature, and timestamp.
- Technical metadata: IP address, browser user‑agent, language, and submission timestamp — used only for spam prevention and rate‑limiting.
3. Why we use it (legal basis)
- To respond to your inquiry and share the information pack — pre‑contractual measures at your request (Art. 6(1)(b) GDPR).
- To verify identity before disclosing the asking price and confidential documents — our legitimate interest in protecting a private sale (Art. 6(1)(f) GDPR).
- To prevent abuse of the form (rate‑limiting, basic email validation) — legitimate interest (Art. 6(1)(f) GDPR).
- To comply with Portuguese tax and anti‑money‑laundering rules if a transaction proceeds — legal obligation (Art. 6(1)(c) GDPR).
4. Who sees it
Inquiries are read by the owners and, where relevant, the lawyer and notary handling the sale in Portugal. We do not sell, rent, or share your data with marketing third parties. Service providers used to operate this site (hosting, email delivery) only process data on our instructions under written agreements.
5. How long we keep it
- Inquiries that do not progress: up to 12 months, then deleted.
- NDA records and signed documents: 7 years, in line with Portuguese commercial record‑keeping rules.
- Spam‑prevention logs (IP, timestamp): 30 days.
6. International transfers
Data is stored within the EU/EEA. If a service provider transfers data outside the EEA, it is done under European Commission Standard Contractual Clauses or an adequacy decision.
7. Your rights
You can ask us to access, correct, delete, restrict, or port your data, and you can object to processing based on legitimate interest. You can also lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD). To exercise any right, send a request via the inquiry form and mention "data request" in the message.
8. Changes
We may update this policy as the listing evolves. The "Updated" date at the top reflects the current version. Material changes will be flagged on the home page.