Privacy Policy
In force from 10 September 2026.
This page tells you which of your data reaches us through allportugalbusinessclub.com, why we hold it, how long we keep it, and what you can ask of us at any point. The site is small and so is the list. That is the honest version, and it is worth two minutes of your time.
1. Who is responsible for your data
allportugalbusinessclub.com (All Portugal Business Club) is owned and run by:
DESCOBRILANÇA UNIPESSOAL LDA
Legal form: sociedade por quotas, unipessoal (a Portuguese private limited company with a single shareholder)
Registered office: Rua 2 da Matinha, Urbanização da Matinha, Lote A, 5D, Armazém J, 1950-073 Lisboa, Portugal
Company number (NIPC): 516940503
Email: team@allcountries.online
Phone: +351 910 252 165
That company is the data controller (responsável pelo tratamento) within the meaning of the General Data Protection Regulation (GDPR).
Synthesis Open Gate Portugal Association is a separate non-profit legal entity with its own privacy policy. It is part of the wider All Portugal ecosystem, and it is not a controller of anything you leave on this site. For everything you enter on allportugalbusinessclub.com, DESCOBRILANÇA UNIPESSOAL LDA answers.
Questions about your data, withdrawal of consent, and any of the requests in section 11: team@allcountries.online. We read every message and we reply to every message.
2. What this site does, and what that means for your data
All Portugal Business Club is an information site. It lists investment projects in Portugal, describes what the club does, and gives you a way to reach us. It sells nothing, takes no payments, and is not a party to any transaction. Nothing here asks you for a tax number, a bank account or a card.
That shapes this whole policy. There are exactly three places on this site where your data reaches us, and they are set out one by one below.
3. What data reaches us, and how
We do not buy contact lists and we do not gather information about you from anywhere else. Everything we hold, you gave us yourself.
3.1. The contact form. Your name, your email address, your phone number, and whatever you wrote in the message field. Nothing on the form is hidden and nothing is inferred: what you type is what we get.
3.2. The newsletter sign-up. Your email address, the fact that you ticked the consent box, and the date you ticked it. The box is separate and it is never pre-ticked.
3.3. Your account. If you create an account on this site, we hold the email address you registered with and your password in encrypted form. We never see the password itself.
3.4. Technical data. Your IP address, your browser type and the pages you opened reach the platform that hosts the site. Section 8 covers this separately, and it is a short section.
4. Why we hold your data, and on what legal basis
Every purpose has its own basis. We set them out one at a time, because the basis is what decides what you can demand of us.
To answer you. If you wrote to us through the contact form, we read the message, work out what you need and reply, which may take more than one exchange. Basis: article 6(1)(b) GDPR, steps taken at your request before any contract. Where your message is a general enquiry rather than a step towards anything, the basis is article 6(1)(f) GDPR, our legitimate interest in responding to people who write to us.
To run your account. Sign-in, keeping you signed in, letting you back in when you forget your password. Basis: article 6(1)(b) GDPR, the terms you accepted when you registered.
To send you our newsletter. Only if you asked for it, and only until you tell us to stop. Basis: article 6(1)(a) GDPR, your consent.
To keep the site and the people on it safe. Filtering spam, blocking intrusion attempts, dealing with abuse of the contact form. Basis: article 6(1)(f) GDPR, our legitimate interest in a service that works.
To meet an obligation the law puts on us. If a message we hold becomes part of a contract, or if we are required to keep or produce a record, we do. Basis: article 6(1)(c) GDPR.
We ask for consent exactly where consent is genuinely the basis. Answering your own enquiry does not need it, and we do not dress it up as though it did.
5. How long we keep things
Contact form messages: three years from your last contact with us. That window exists so that a conversation picked up a year later still makes sense to both of us. After it, the message and your details go.
Your newsletter address: until you unsubscribe. Nothing about it is permanent.
Your account: for as long as you keep it. If nobody signs in for 36 months in a row, we write to the registered address and delete the account 30 days later.
Records of a suppressed address: if you unsubscribe, we keep your email address on a suppression list so that we do not write to you again by mistake. That is a shorter record than the alternative of forgetting you and mailing you twice.
Anything that becomes an accounting or tax document. This site issues none. If a conversation that started here later turns into a contract, the invoices and payment records that follow are kept for the period Portuguese tax law sets, under article 123(4) of the Código do IRC (corporate income tax code) and article 52 of the Código do IVA (VAT code). Once that period ends, the data is deleted or anonymised. That retention belongs to the contract, not to this website.
6. Who your data goes to
We do not sell your data and we do not rent it out. The list of people who can see it is short and each one is here for a reason.
Wix.com Ltd., the platform this site is built and hosted on, including its forms and members area tools. It processes data on our instructions, under a data processing agreement.
Usercentrics GmbH (Germany), the processor that runs the consent tool on this site and stores the record of what you agreed to. It receives that record and nothing else about you.
Our certified accountant (contabilista certificado), and only where a document with your details became an accounting record. Ordinary correspondence with us never reaches them.
Autoridade Tributária e Aduaneira, the Portuguese tax and customs authority, in the same narrow case and only to the extent the law requires.
Beyond that, data may be disclosed on a binding demand from a court or another competent authority. We check such a demand rather than complying automatically.
Nobody else. No advertising network, no data broker, no partner receiving your details as a lead.
7. Transfers outside the European Economic Area
Some of the companies above may process data outside the European Economic Area. Those transfers rely on European Commission adequacy decisions and on standard contractual clauses approved by the Commission, under chapter V GDPR. Where you want to know which safeguard applies to a particular transfer, write to us and we will tell you.
8. Cookies and the consent tool
Some files are written to your device the moment the page opens, and the rest wait for you.
What loads straight away. The technical files the Wix platform needs so that the page assembles, so that a form you submit cannot be forged by another site, and so that your sign-in survives from one page to the next. These are strictly necessary for a service you asked for yourself, which is the narrow exception in article 5 of Lei n.º 41/2004 (the Portuguese law on privacy in electronic communications), as amended by Lei n.º 46/2012. Consent is not required for them, and turning them off would stop the site working.
The record of your answer. The consent tool on this site is provided by Usercentrics GmbH, based in Germany, which acts as our processor. When you answer the consent window, it stores what you chose, so that we stop asking you and so that we can demonstrate your choice if we are ever asked to, as article 7(1) GDPR requires of us. We keep that record for three years. If you change your mind before then, the new record replaces the old one.
Everything else waits. Anything that is not strictly necessary loads only after you have said yes to the category it belongs to.
Changing your mind. Use the consent settings button at the bottom left of the screen. It reopens the same window you saw the first time, and you can switch any category off as easily as you switched it on. That is article 7(3) GDPR, which requires withdrawal to be as easy as consent, and we would rather it were genuinely easy than merely possible. Withdrawal works going forward: it does not undo what happened while the consent stood. You can also delete stored files and block new ones in your browser, usually under "Privacy" or "Site settings".
What we are not going to claim. A full technical scan of this site, naming every file, its purpose and its lifetime, has not been carried out yet. Until it has, we are not going to publish a list of what we assume is here. What we can tell you today is what is written above and what the consent window itself shows you when you expand a category. When the scan is done, this section gains the full list, and the date at the top of the page will tell you when that happened.
Our Cookie Policy sets all of this out in full.
9. The newsletter
We write occasionally about the club, its projects and what is happening around them. You receive it only because you asked: consent is given separately from everything else, the box is not pre-ticked, and it is not buried inside the contact form. That is what article 22 of Decreto-Lei n.º 7/2004 (the Portuguese e-commerce decree-law) requires, which sets the rule of prior consent for commercial communications.
Every message carries an unsubscribe link at the bottom. It works on one click and asks for no explanation. You can also simply write to team@allcountries.online and we will take you off the list.
A reply to a message you sent us is not marketing, and it reaches you whether or not you subscribed.
10. Your account
An account on this site holds your email address, your encrypted password and the date you registered. Look after your password: anything done from your account counts as done by you.
To close the account, write to team@allcountries.online from the address it is registered to, and say you want it deleted. We delete the account and the data attached to it, and we do not ask you to explain. This is your right of erasure under article 17 GDPR, and using it costs you nothing. Where a record has to stay with us for a reason in section 5, we say which record and why, rather than quietly keeping it.
11. Your rights
You have the right to:
know what data about you we hold, and receive a copy of it (article 15 GDPR);
have anything inaccurate corrected (article 16);
ask for erasure (article 17);
ask us to restrict processing while something is being sorted out (article 18);
receive the data you gave us in a portable, machine-readable format (article 20);
object to processing that rests on our legitimate interest, including at any time to direct marketing (article 21);
withdraw consent where the processing rests on it (article 7(3)). Withdrawal works forwards, and does not undo what was lawfully done while the consent stood.
Write to team@allcountries.online. We answer within one month, which is the period set by article 12(3) GDPR. Where a request is unusually complex we may need longer, and in that case we will tell you inside the first month, say why, and give you a date.
Exercising any of these rights is free. We will not ask you for a reason, and we will not treat you differently afterwards.
12. Complaining about how we handled your data
Write to us first at team@allcountries.online. Most things settle in one exchange.
If that does not satisfy you, you can complain to the Portuguese supervisory authority:
Comissão Nacional de Proteção de Dados (CNPD), the Portuguese National Data Protection Commission
Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa
www.cnpd.pt
You may also complain to the supervisory authority of the EU country where you live or work, if that is a different one.
13. Children
This site is written for adults: investors, business owners and people considering a project in Portugal. We do not aim any part of it at children and we do not knowingly collect their data.
Under article 16 of Lei n.º 58/2019 (the Portuguese law implementing the GDPR), a child in Portugal can give their own consent to an online service from the age of 13; below that, consent comes from a parent or legal guardian. We do not rely on a child’s consent for anything here. If you believe a child has left us their details through this site, write to team@allcountries.online and we will delete them.
14. Changes to this page
We update this page when what it describes changes: a new form, a new tool, a new purpose. The date at the top shows when that last happened. If a change is significant, we will say so directly rather than hope you come back to reread.
15. Contact
DESCOBRILANÇA UNIPESSOAL LDA
Rua 2 da Matinha, Urbanização da Matinha, Lote A, 5D, Armazém J, 1950-073 Lisboa, Portugal
team@allcountries.online
+351 910 252 165
allportugalbusinessclub.com