A clear account of what Algarve Insider collects, why it is used, and the choices you have.
Last updated: 15 July 2026
For buyer enquiries submitted through Algarve Insider and handled within Goldcrest, the data controller is Golden Solstice, Lda., trading as Goldcrest, a Portuguese limited company. Algarve Insider is Enrique Arcay Hardtmann's buyer-advisory website, developed within Goldcrest.
Golden Solstice, Lda. can be contacted at Avenida 24 de Julho, n.º 4, 3.º esquerdo, 1200-480 Lisboa, Portugal, or at info@portugalbuyersagent.com. You may also contact Enrique directly at enrique@portugalbuyersagent.com.
This notice should be read alongside Goldcrest's company privacy policy, which applies when an enquiry progresses into Goldcrest's client systems or services.
The fields depend on the service you choose. For the Algarve Lifestyle Matcher, the information submitted or created is limited to:
The complete answer set is processed to generate the result. If you request only automated delivery, it is not kept in the stored server-side report: that record contains an answer digest, the preference summary, flagged constraints and the generated result. If you make the separate optional request for Enrique's review, an adviser brief containing the human-readable answers, contact details, summary, constraints and shortlist is stored for that review. The complete answers also remain temporarily in your browser's session storage as described below.
A separate buyer-enquiry or booking form may ask for a name, email address, phone number, country, budget, timing, preferred areas and a message, together with source-page or UTM fields shown or attached to that form. Please do not include sensitive personal information unless it is genuinely necessary.
To process the answers, create the private exploratory shortlist, store it for the stated access period and send the requested access email.
Legal basis: Article 6(1)(b) GDPR — providing a service you expressly request and taking requested steps before any possible advisory engagement. The required checkbox records that request; it is not consent to marketing or personal sales follow-up.
If you select the separate optional box, Enrique may review the result and contact you about the property search described by your answers.
Legal basis: Article 6(1)(a) GDPR — your specific consent to personal review and contact. You can withdraw it at any time without affecting the automated shortlist already requested.
To answer a booking request, buyer enquiry or message that you submit outside the matcher and take the steps you ask for.
Legal basis: Article 6(1)(b) GDPR for requested pre-contract steps; where the message does not concern a possible service, Article 6(1)(f) legitimate interests in answering a genuine communication may apply.
To understand which page or campaign led to a submitted enquiry, using source-page and UTM values attached to the form.
Legal basis: Article 6(1)(f) GDPR — the limited legitimate interest in understanding submitted enquiry sources without launch-stage analytics cookies.
To prevent abuse, maintain website security, establish or defend legal claims, and meet applicable legal obligations.
Legal basis: Article 6(1)(f) GDPR for security and legal claims, and Article 6(1)(c) where processing is required by law.
The matcher uses deterministic rules to compare your selected priorities, constraints and trade-offs with versioned location profiles. It keeps lifestyle affinity, goal fit and an indicative budget signal separate. That budget signal compares the selected budget ceiling with a prototype editorial starting floor for an area; it is not based on live listings. Every result is marked exploratory. The score is a rounded comparison index, not a probability, valuation or investment forecast.
The result is advisory and does not approve, reject or price a purchase. It is not a psychological or medical test, and it is not used to make a solely automated decision with legal or similarly significant effects. You can correct your answers and rerun the matcher, or ask Enrique to review the result separately.
A matcher submission is not automatically sent to Enrique for sales follow-up. If you select the optional personal-review box, Enrique may access your email, optional first name, result summary, flagged constraints and shortlist to review the result and contact you. Relevant Goldcrest team members may then receive the information only where needed to respond to or progress that requested enquiry. If you request only the automated shortlist, the information is not used for personal property-search follow-up, although authorised support personnel may access it where necessary for security, fault investigation or legal compliance.
The website is hosted by Netlify. Netlify Functions processes matcher requests, and Netlify Blobs temporarily stores the email address, optional first name, generated report, preference summary, flagged constraints, consent record, delivery state, answer digest and hashed private-link token. When personal review is requested, the temporary record also contains the adviser brief described above and its separate delivery status. The raw bearer token is returned to your browser and may be placed in the requested email; only its hash is stored server-side.
When transactional delivery is configured, Resend receives the email address, optional first name, private link and starting area names to send the exploratory shortlist you requested. Only if you make the separate optional review request, Resend may also transmit the adviser brief — including your contact details, human-readable answers, summary, constraints and shortlist — to Enrique for that purpose. Resend is not used by this matcher for newsletters or promotional campaigns. Other email, IT or security providers receive information only if their relevant service is actually used and subject to appropriate contractual and transfer safeguards.
Personal data is not sold. It may be disclosed where required by law or where necessary to protect legal rights.
Some technology providers may process information outside Portugal or the European Economic Area. Where this occurs, an applicable adequacy decision, standard contractual clauses, or another lawful transfer safeguard will be relied on as required. You may contact Enrique for information about safeguards relevant to your submission.
Enquiry data is generally kept for up to 24 months after the last meaningful contact. It may be kept longer where a client relationship continues or where legal, accounting, contractual or claims-related requirements apply.
A matcher report is available for 30 days by default. The configured report period may be from 1 to 90 days. The stored email address, optional first name, generated report, summary, flagged constraints, consent record, answer digest, delivery state, any optional adviser brief and idempotency record are scheduled for deletion when that period ends. The token index may remain for a further 7 days as a minimal expired marker so that an expired link can be rejected consistently; it contains a token hash, expiry state and no questionnaire answers. A daily cleanup function removes records when their scheduled deletion time is reached.
Your browser's session storage holds the complete matcher answers, current step, screen stage and an idempotency key so that refresh and back navigation work. It does not store the email address or first name. This browser copy lasts for the browser-tab session unless you choose “Start again” or clear site data sooner.
If you separately ask Enrique to review and contact you, and that request becomes an active buyer enquiry, the resulting correspondence or enquiry record is generally kept for up to 24 months after the last meaningful contact. If it progresses into a Goldcrest engagement, the company retention periods needed for legal, accounting, contractual, anti-money-laundering or claims obligations apply. The optional-review consent record may be retained as long as reasonably needed to demonstrate the choice and handle any withdrawal.
Subject to the conditions in applicable data-protection law, you may:
To exercise a right, email Enrique using the address above. Reasonable identity verification may be requested before responding. You may also lodge a complaint with Portugal's supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD).
At launch, Algarve Insider does not use analytics or advertising cookies. The hosting service may process essential technical request and security data needed to deliver and protect the website. This notice will be updated before any non-essential analytics or marketing technology is introduced.
The matcher uses session storage so that refreshing or going back does not erase the complete answers, current step and screen stage in the active browser-tab session. It also stores an idempotency key used to prevent duplicate shortlist creation. It does not store the name or email address. This functional storage is not used for advertising, and “Start again” removes it. Optional analytics and marketing technologies remain disabled.
Reasonable technical and organisational measures are used to protect personal data. No online service can, however, guarantee absolute security.
Algarve Insider is intended for adults considering property-related services and is not directed to children. If information from a child has been submitted, please request its deletion.
This notice may be updated when the website, its forms or applicable requirements change. The latest version and update date will always appear on this page. For any privacy question, email info@portugalbuyersagent.com.
Return to the buyer brief