A clear account of what Algarve Insider collects, why it is used, and the choices you have.
Last updated: 7 August 2026 · Notice version 2026-08-07.1
For buyer enquiries submitted through Algarve Insider and handled within Goldcrest, the data controller is Golden Solstice, Lda., trading as Goldcrest — Portugal Buyer's Agent, a Portuguese limited company. Algarve Insider is Enrique Arcay Hardtmann's buyer-advisory website, operated within that company. Unless a separate written arrangement says otherwise, the brand and Enrique are not separate data controllers merely because they appear in the site branding.
Golden Solstice, Lda. can be contacted at Avenida 24 de Julho, n.º 4, 3.º esquerdo, 1200-480 Lisboa, Portugal. Its NIPC/NIF is 516359991 and its real-estate licence is AMI 23310. Contact the company at info@portugalbuyersagent.com. You may also contact Enrique directly at enrique@portugalbuyersagent.com.
The site's legal pages are available as the Terms of use, Disclaimer, Cookie policy and Accessibility statement.
This notice should be read alongside Goldcrest's company privacy policy, which applies when an enquiry progresses into Goldcrest's client systems or services.
The fields depend on the service you choose. For the Algarve Lifestyle Matcher, the information submitted or created is limited to:
The complete answer set is processed to generate the result. If you request only automated delivery, it is not kept in the stored server-side report: that record contains an answer digest, the preference summary, flagged constraints and the generated result. The optional marketing choice is stored with the consent record only when you actively select it. The complete answers also remain temporarily in a session-limited draft on your device as described below.
A separate buyer-enquiry or booking form may ask for a name, email address, phone number, country, budget, timing, preferred areas and a message, together with source-page or UTM fields shown or attached to that form. Please do not include sensitive personal information unless it is genuinely necessary.
To process the answers, create the private exploratory shortlist, store it for the stated access period and send the requested access email.
Legal basis: Article 6(1)(b) GDPR — providing a service you expressly request and taking requested steps before any possible advisory engagement. The required checkbox records that request; it is not consent to marketing or personal sales follow-up.
If you select the separate unchecked marketing box, Goldcrest may send occasional Algarve property guides, selected opportunities and relevant updates.
Legal basis: Article 6(1)(a) GDPR — your explicit consent. You can withdraw it at any time using the unsubscribe route or by contacting the controller. Leaving it unchecked does not affect the requested shortlist.
To answer a booking request, buyer enquiry or message that you submit outside the matcher and take the steps you ask for.
Legal basis: Article 6(1)(b) GDPR for requested pre-contract steps; where the message does not concern a possible service, Article 6(1)(f) legitimate interests in answering a genuine communication may apply.
To understand which page or campaign led to a submitted enquiry, using source-page and UTM values attached to the form.
Legal basis: Article 6(1)(f) GDPR — the limited legitimate interest in understanding submitted enquiry sources attached to the form itself. Optional website analytics uses consent as described below.
If you choose to answer the optional result question, to measure whether the shortlist felt plausible and identify broad causes of a poor result. The feedback record contains the report identifier and versions, not your email or raw answers.
Legal basis: Article 6(1)(f) GDPR — the limited legitimate interest in evaluating and improving this requested service. Providing feedback is optional.
To prevent abuse, maintain website security, establish or defend legal claims, and meet applicable legal obligations.
Legal basis: Article 6(1)(f) GDPR for security and legal claims, and Article 6(1)(c) where processing is required by law.
The matcher uses deterministic rules to compare your selected priorities, constraints and trade-offs with versioned location profiles. It keeps lifestyle affinity, goal fit and an indicative budget signal separate. That budget signal compares the selected budget ceiling with a prototype editorial starting floor for an area; it is not based on live listings. Every result is marked exploratory. The score is a rounded comparison index, not a probability, valuation or investment forecast.
The result is advisory and does not approve, reject or price a purchase. It is not a psychological or medical test, and it is not used to make a solely automated decision with legal or similarly significant effects. You can correct your answers and rerun the matcher; a separate buyer enquiry is available if you want to discuss a possible service.
The Matcher is a form of limited preference profiling: the answers are compared with editorial area signals to produce exploratory directions and a private report. The meaningful logic is the selected goal, the answers' weighted lifestyle and practical signals, and area-level constraints. The outcome is a shortlist to read and question, not a decision about your legal rights, credit, eligibility, housing access or whether we will speak with you. You can change answers or rerun the result.
The report request and an enquiry reply are not marketing consent. The current Matcher offers a separate, optional, unchecked choice for occasional Algarve property guides, selected opportunities and relevant updates. The consent record identifies the choice, notice version and time; marketing messages include an easy unsubscribe route.
A matcher submission is processed to generate and deliver the requested private shortlist. If you select the optional marketing box, the contact and consent record may be synchronised to the configured Goldcrest/HubSpot marketing workflow. A separate buyer enquiry or booking request may be accessed by Enrique and relevant Goldcrest team members only where needed to respond to that request. The report request alone is not permission for personal sales follow-up.
The website is hosted by Netlify. Netlify Functions processes matcher requests, and Netlify Blobs temporarily stores the email address, optional first name, generated report, preference summary, flagged constraints, consent record, delivery state, answer digest and hashed private-link token. Optional plausibility feedback is stored separately with the report identifier and matcher versions, without copying the email or raw answers into that feedback record. The raw bearer token is returned to your browser and may be placed in the requested email; only its hash is stored server-side.
When transactional delivery is configured, Resend receives the email address, optional first name, private link and starting area names to send the exploratory shortlist you requested. Resend is used for this transactional delivery, not for newsletters or promotional campaigns. If you select marketing, HubSpot may receive the contact and consent metadata through the configured Goldcrest workflow, subject to its access controls and processing terms. Google Analytics receives only the limited technical and event data described below, after consent. Netlify, Netlify Blobs, Resend, HubSpot and Google are processors or independent providers only for the services actually enabled; the controller must keep current data-processing agreements, locations and transfer safeguards under review rather than relying on this notice as a substitute for those contracts.
Personal data is not sold. It may be disclosed where required by law or where necessary to protect legal rights.
Some technology providers may process information outside Portugal or the European Economic Area. Where this occurs, an applicable adequacy decision, standard contractual clauses, or another lawful transfer safeguard will be relied on as required. You may contact the controller for information about safeguards relevant to your submission.
Enquiry data is generally kept for up to 24 months after the last meaningful contact. It may be kept longer where a client relationship continues or where legal, accounting, contractual or claims-related requirements apply.
A matcher report is available for 30 days by default. The configured report period may be from 1 to 90 days. The stored email address, optional first name, generated report, summary, flagged constraints, consent record, answer digest, delivery state, any optional shortlist feedback and idempotency record are scheduled for deletion when that period ends. The token index may remain for a further 7 days as a minimal expired marker so that an expired link can be rejected consistently; it contains a token hash, expiry state and no questionnaire answers. A daily cleanup function removes records when their scheduled deletion time is reached.
Your browser's session storage holds the complete matcher answers, current step, screen stage and an idempotency key while you complete the questionnaire you started. It does not store the email address or first name. The session draft is removed when the browser session ends, when you choose “Start again” or “Clear my answers”, or when you clear site data. Private or restricted browsing modes may remove it earlier. This short-lived functional storage is not used for advertising or analytics.
If you submit a separate buyer enquiry and it becomes an active conversation, the resulting correspondence or enquiry record is generally kept for up to 24 months after the last meaningful contact. If it progresses into a Goldcrest engagement, the company retention periods needed for legal, accounting, contractual, anti-money-laundering or claims obligations apply. Marketing consent records may be retained as long as reasonably needed to demonstrate the choice and handle any withdrawal.
Subject to the conditions in applicable data-protection law, you may:
To exercise a right, email the controller using the company address above. Reasonable identity verification may be requested before responding. You may also lodge a complaint with Portugal's supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD).
Algarve Insider uses Google Analytics 4 only after you choose “Accept analytics” in the privacy banner. It helps us understand aggregated use of the site, such as pages viewed, traffic source and UTM campaign values, device category, approximate geographic location, and anonymised interaction events such as contact-link and form actions. We do not send your name, email address, phone number, message, budget, or any other form content to Google Analytics.
The legal basis for optional analytics is your consent under Article 6(1)(a) GDPR. Refusing analytics does not affect your ability to use the website. You can reopen Cookie preferences from the footer and change your choice at any time. Google may process technical analytics data outside the European Economic Area subject to its applicable transfer safeguards. The matcher uses a session-storage draft while you complete the questionnaire so that refreshing or navigating within the active browser session does not erase the complete answers, current step and screen stage. It also stores an idempotency key used to prevent duplicate shortlist creation. It does not store the name or email address. This functional storage is not used for advertising; “Start again” and “Clear my answers” remove it. Advertising, ad-user-data and ad-personalisation storage remain disabled.
Reasonable technical and organisational measures are used to protect personal data. No online service can, however, guarantee absolute security.
Algarve Insider is intended for adults considering property-related services and is not directed to children. If information from a child has been submitted, please request its deletion.
This notice may be updated when the website, its forms or applicable requirements change. The latest version and update date will always appear on this page. For any privacy question, email info@portugalbuyersagent.com.
Return to the buyer brief