Privacy Policy

This policy explains how Startup Visa Portugal (“we”, “us”) collects and uses personal data when you use this website, in line with the EU General Data Protection Regulation (GDPR) and Portuguese data protection law (Law 58/2019).

1. Who is responsible for your data

Startup Visa Portugal
Rua Bouça Cavadinha 70, 4465-005 São Mamede de Infesta, Porto, Portugal
Registration / tax number: 330905171
Email: hello@codefriday.co

2. What we collect and why

Eligibility check and contact form

When you use the eligibility quiz or the contact form we collect the details you enter: your name, email address, WhatsApp number, nationality, current location, information about your startup idea, whether you have the required savings (proof of funds), whether you are willing to relocate, family plans and your message, together with the page you came from and campaign information in the link you followed (UTM parameters). We also calculate an indicative eligibility score from your answers.

The quiz also asks whether you have a clean criminal record. That answer is only used inside your browser to show you guidance; it is never sent to us or stored.

Purpose: to assess your situation, reply to you and, if you wish, prepare a consultation. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and your consent to be contacted (Art. 6(1)(a)), which you can withdraw at any time.

Automated eligibility score

The score shown at the end of the quiz is calculated automatically from your answers. It is indicative only, has no legal or similarly significant effect on you, and every case is reviewed by a person before any advice is given.

Cookies and consent records

We only use non-essential cookies with your consent. See our Cookie Policy. When you make a cookie choice we store an anonymous record (a random ID, your choices and the date, without your IP address) so we can demonstrate consent, as required by Art. 7(1) GDPR (legal obligation, Art. 6(1)(c)).

Technical data

Our hosting provider processes technical data such as IP address, browser type and the pages requested, for a short period, to deliver the website and protect it against abuse. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f)).

If you become a client

Data needed to deliver our services is governed by your engagement agreement and processed to perform that contract and to meet our legal obligations, for example accounting and tax rules.

3. Who we share data with

We do not sell your personal data. We use these service providers (processors) under data processing agreements:

• Vercel Inc. (website hosting), USA: transfers covered by the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses.
• Neon Inc. (database), with data stored in the European Union.
• Cloudflare, Inc. (file storage for images), with Standard Contractual Clauses where data leaves the EU.
• Calendly LLC, if you choose to book a call; Calendly’s own privacy policy applies to the booking.
• WhatsApp (Meta Platforms Ireland Ltd.), if you choose to message us on WhatsApp.
• Google Ireland Ltd. (Google Analytics and Google Tag Manager), only if you accept statistics cookies.
• YouTube (Google Ireland Ltd.), only if you choose to play an embedded video.

As part of a visa application and on your instruction, we submit information to the relevant authorities and bodies, such as IAPMEI, AIMA, Portuguese consulates and certified incubators.

4. How long we keep your data

• Enquiries from the quiz, contact form: deleted automatically 24 months after you submit them, unless you become a client.
• Client records: for as long as the law requires (for example, accounting records).
• Cookie consent records: 13 months.

5. Your rights

You have the right to access your data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time without affecting earlier processing. To exercise any right, email hello@codefriday.co. We reply within one month.

You can also complain to the data protection authority: Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt, or the authority in your EU country of residence.

6. Security

The website is served over encrypted connections (HTTPS). Access to enquiries is limited to authorised staff with individual accounts, and data is stored with reputable providers.

7. Children

This website is not intended for anyone under 16, and we do not knowingly collect their data.

8. Changes to this policy

We may update this policy. The date at the top shows when it last changed.