Effective Date: February 24, 2026
1. Who We Are
Boots on the Ground Portugal
Website: https://bootsonthegroundpt.com
Email: info@bootsonthegroundpt.com
Boots on the Ground Portugal LLC provides visa facilitation, relocation support, administrative coordination, and banking introduction services in Portugal.
For purposes of the General Data Protection Regulation (EU) 2016/679 (“GDPR”), we act as a data controller in relation to personal data collected from clients and website users.
2. Personal Data We Collect
We collect personal data necessary to provide our services, including:
• Full name
• Date of birth
• Passport and identification documents
• Contact information (email, phone, address)
• Financial documentation (bank statements, proof of funds, tax documents)
• Immigration-related documentation
• Lease or housing documentation
• Correspondence and communications
• Website usage data (IP address, browser data, cookies)
Because visa services require identity verification and financial review, we may process sensitive personal data where necessary for contractual performance and legal compliance.
We collect only data relevant to the services requested.
3. How We Use Your Data
We process personal data for the following purposes:
• Providing visa and residency facilitation services
• Coordinating banking introductions when requested
• Preparing documentation for submission to third parties
• Communicating regarding services
• Complying with legal and regulatory obligations
• Maintaining required business and financial records
• Improving website functionality and security
We do not sell personal data.
4. Legal Basis for Processing (GDPR)
We process personal data under the following legal bases:
• Performance of a contract
• Compliance with legal obligations
• Legitimate business interests
• Consent (where required)
Where sensitive data is processed, it is done strictly for the purpose of fulfilling contractual or legal requirements related to immigration and financial procedures.
5. Data Sharing
We may share personal data with:
• Portuguese financial institutions (when banking coordination is requested)
• Immigration authorities
• Licensed Portuguese attorneys providing legal oversight
• Secure cloud storage and IT providers
• Professional advisors where legally required
All third parties are expected to maintain appropriate data protection safeguards.
6. International Transfers
If personal data is processed or stored outside the European Economic Area, we ensure appropriate safeguards consistent with GDPR requirements.
7. Data Retention
We retain personal data only for as long as necessary to:
• Complete contracted services
• Comply with legal and tax obligations
• Defend against legal claims
• Maintain regulatory records
Retention periods may vary depending on the nature of the service provided.
When no longer required, data is securely deleted or anonymized.
8. Data Security
We implement reasonable technical and organizational security measures including:
• Encrypted cloud-based storage (including secure Dropbox services)
• Access controls and password protection
• Restricted access to authorized personnel
• Secure communication practices
While we take reasonable steps to protect personal data, no system can guarantee absolute security.
9. Data Breach Notification
In the event of a personal data breach affecting client information, we will notify affected individuals without undue delay and, where required by law, within seventy-two (72) hours of becoming aware of the breach.
10. Your Rights Under GDPR
Under GDPR, you have the right to:
• Access your personal data
• Request correction of inaccurate data
• Request deletion (subject to legal obligations)
• Restrict processing
• Object to processing
• Request data portability
• Lodge a complaint with the Portuguese supervisory authority:
Comissão Nacional de Proteção de Dados (CNPD)
www.cnpd.pt
To exercise your rights, email: info@bootsonthegroundpt.com
We will respond within applicable legal timeframes.
11. Children
Our services are not directed to individuals under 18 years of age. We do not knowingly collect data directly from minors.
12. Updates to This Policy
We may update this Privacy Policy periodically to reflect legal or operational changes. The updated version will be posted on this page with a revised effective date.