This policy explains what personal data Get Casa Unipessoal Lda ("GetCasa", "we") collects when you use getcasa.net, book a call or become a client, why we collect it, who we share it with, how long we keep it and what your rights are.
1. Who we are
Get Casa Unipessoal Lda, a licensed real-estate mediator (AMI Licence No. 24277), is the controller of your personal data.
- Registered office: Edifício Uptown, Estrada de São João, 13, Bloco A 4R, 9000-123 Funchal, Portugal
- Company number (NIPC): 517962756
- Privacy contact: info@getcasa.net
2. What we collect
When you book a discovery call
Your name, email address, phone number and country, plus the answers you choose about what you are looking for (goal, region, property type, bedrooms, budget range, how you would fund it, timeline) and, optionally, how you heard about us. We also record which link or QR code brought you to us (for example a partner's referral link or a campaign tag) and your Google Ads click identifier if you came from an advert, so we know which sources work.
If someone introduced you
A referral partner (for example a travel agent or hotel) may give us your name, email, phone and country after confirming that you agreed to be contacted. Our first message to you says who introduced you.
If you become a client
- Identity and anti-money-laundering checks: date of birth, nationality, home address, occupation, tax number (NIF) if you have one, a copy of your passport or ID and proof of address, whether you hold a prominent public position, who the property is bought for, and the source of the funds. We do not ask how much money you have.
- Documents for your purchase: for example payslips, bank statements and proof of funds when a mortgage adviser or lawyer needs them, and property papers.
- Case information: your search brief, the properties you view, your offers, notes of our calls and your progress through the process.
- Contract and payment records: your signed agreement and the fact and date of each payment. Card and bank details are entered with Stripe and are not stored by us.
When you use our website
Technical data such as your IP address, browser and the pages you view, collected by our hosting provider and, if used, by Google's advertising and measurement tag. See "Cookies" below.
3. Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Answering your enquiry, booking and holding the discovery call | Steps at your request before a contract; our legitimate interest in running the service |
| Providing the service you sign up for (search, offers, coordination with your lawyer, financial adviser and surveyor, payments) | Performance of our contract with you |
| Identity checks, source of funds, record keeping and reporting to the authorities (for example IMPIC) | Legal obligation (Portuguese anti-money-laundering law, Lei 83/2017, and mediation law) |
| Following up on your enquiry, keeping the service secure, understanding which sources bring clients | Our legitimate interests |
| Telling the business that introduced you how far you have got (first name, initial and stage only) | Our legitimate interest in running the referral programme; we tell you at booking |
| Marketing emails such as guides and videos | Your consent. Each email has an unsubscribe link |
| Non-essential cookies and advertising measurement | Your consent |
4. Who we share it with
We never sell your data. We share it only as needed:
- Service providers assigned to your case, such as a lawyer, financial adviser or surveyor. We choose what each one sees. Lawyers and financial advisers see your contact details and the purchase price; other providers see your name, the stage and the property address.
- The business that introduced you sees your first name and initial and the stage you are at. It never sees your contact details, documents, property or price.
- Our technology providers (processors): providers of database and file storage (hosted in the EU), website hosting, email, payments, electronic signatures, call booking, and advertising and measurement tags.
- Our accountant, for accounting and for the quarterly report to IMPIC, and our professional advisers.
- Public authorities where the law requires it, such as IMPIC, the Portuguese tax authority or law-enforcement bodies.
5. Transfers outside the EU
Our main database and files stay in the EU. Some of our technology providers may process data in the United States or elsewhere. Where they do, we rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework or on standard contractual clauses, and on the provider's own safeguards. You can ask us for details.
6. How long we keep it
- Enquiries that never become a contract: contact details and answers are deleted after 12 to 24 months without contact. We hold no identity documents for these people, because identity checks start only after a contract is signed and paid.
- Identity-check records (ID and proof-of-address copies, source of funds, public-position answer, verification record): 7 years after the relationship ends, as the anti-money-laundering law requires, then reviewed for deletion.
- Other client documents (such as payslips, bank statements, proof of funds and property papers): reviewed for deletion 12 months after your case closes.
- Contracts and invoices: for the period set by accounting and tax law.
7. Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to its use, or send it to you in a portable format. Where we use your consent (for example for marketing emails) you can withdraw it at any time. If you ask us to delete your data we will do so, except for records the law requires us to keep (such as identity-check records), which we keep locked and use only for that purpose.
To use any of these rights write to info@getcasa.net. We reply within one month. You also have the right to complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt, or to the authority in your own country.
8. Cookies
This website uses only what it needs to work, plus Google's advertising tag, which is loaded only if you press Accept on the cookie banner (you can change your choice at any time with "Cookie settings" in the footer). A campaign tag in the address (such as utm_source) may be kept for the duration of your visit, in your browser's session storage, so the booking page can tell us where you came from. Our booking and referral pages ask for your consent before they remember a referral for longer than the visit. You can clear cookies and site data in your browser settings at any time.
9. Security
Documents are kept in private storage and opened only through short-lived secure links. Access is limited by role, staff and providers who see client data sign in with a second step, and every view of a document is logged. No system is perfectly secure, and we will tell you and the authorities if a breach affects you, as the law requires.
10. Children
Our service is for adults. We do not knowingly collect data from anyone under 18.
11. Changes to this policy
We will post any change on this page and update the date at the top. If a change matters to you, for example a new purpose, we will tell you directly.