Privacy Policy - Morpho Real Estate

Last Updated: 29 July 2026

This Privacy Policy explains how Morpho Real Estate Lda (“Company”, “we”, “us”, or “our”) collects, uses, stores, and protects your personal data when you interact with our website, request information, or engage our real estate services – including buyer’s representation, property acquisition advisory, property sales, property management, tenant vetting, and real estate market analysis – in accordance with the General Data Protection Regulation (EU Regulation 2016/679 – “GDPR”) and Portuguese Law no. 58/2019.

1. Data Controller

The legal entity responsible for processing your personal data is:

Legal Entity: Morpho Real Estate Lda
AMI License: 20963 | NIPC: 517010534
Registered Address: Rua dos Amores 90 A, Casas de Azeitão, Núcleo Poente I, 2925-010 Azeitão, Portugal
Contact Email: info@morpho.pt

2. What Data We Collect

Depending on the specific real estate services you request, we collect and process the following categories of data:

Identity & Contact Information: Full legal name, email address, telephone number, residential address, nationality, official identification documents (Passport, Cartão de Cidadão, or Residence Permit), and Portuguese tax number (NIF).
Comprehensive Financial Vetting & Income Documents:
Annual Income Tax Returns (Declaração de Rendimentos / IRS) and Official Tax Settlement Notices (Nota de Liquidação).
Recent payslips (Recibos de Vencimento) or official income statements.
Employment contracts, employer confirmation letters, or business registration certificates.
Bank statements (Extratos Bancários), proof of account ownership (IBAN certificates), and proof of funds.
Central Bank Credit Liabilities Reports (Mapa de Responsabilidades de Crédito do Banco de Portugal) or international credit reports.
Guarantor (Fiador) identification and financial vetting records.
Buyer & Client Search Criteria: Property search preferences, target purchase budgets, mortgage pre-approval letters, and general real estate acquisition criteria. (Note: Morpho Real Estate Lda provides real estate mediation and property sourcing advisory; we do not provide regulated financial or investment advice).
Seller & Property Legal Documentation: Land registry certificates (Certidão do Registo Predial), tax documents (Caderneta Predial), energy performance certificates, architectural plans, ownership deeds, powers of attorney, and property media assets.
Property Management Data: Utility account details, active lease agreements, contractor work orders, owner bank account details (IBAN) for rent payouts, and tenant payment tracking records.
Technical & Website Usage Data: IP addresses, browser types, device information, and navigation data collected via essential website cookies.

3. Purpose and Legal Basis for Processing

We process personal data strictly under the following legal grounds:

Purpose of Processing	Scope of Services	Legal Basis (GDPR)
Tenant & Client Financial Vetting: Assessing candidate financial suitability, verifying income authenticity (tax returns/payslips), mitigating rental default risk, and presenting summary profiles to property owners.	Lettings & Property Management	Pre-contractual measures taken at applicant’s request (Art. 6(1)(b)) and Legitimate Interest of property managers/owners (Art. 6(1)(f)).
Buyer’s Agent & Sourcing Services: Property search, portfolio curation, due diligence, viewing coordination, and purchase negotiation assistance.	Buyer Representation & Advisory	Performance of a contract or pre-contractual steps (Art. 6(1)(b)).
Property Sales & Agency Services: Marketing listings, managing property documentation, facilitating purchase offers, and coordinating closings.	Real Estate Mediation / Agency	Performance of a contract (Art. 6(1)(b)) and Legitimate Interest (Art. 6(1)(f)).
Property Management: Rent collection, maintenance coordination, utility management, owner reporting, and financial disbursements.	Property Management	Performance of a contract (Art. 6(1)(b)).
Real Estate Advisory & Market Analysis: Property location evaluation, property market reporting, and real estate search strategy.	Real Estate Advisory	Performance of a contract (Art. 6(1)(b)).
Anti-Money Laundering (AML) & KYC: Know Your Customer (KYC) identity verifications, source of funds validation, and transaction reporting under Portuguese Law no. 83/2017 and IMPIC supervision.	All Transactional Services	Compliance with a legal obligation (Art. 6(1)(c)).
Direct Marketing & Updates: Property alerts, market reports, and portfolio newsletters (only if opted in).	Marketing & Communication	Consent (Art. 6(1)(a)).

4. Data Sharing and Safeguards

We do not sell or trade your personal data. To deliver real estate services and comply with statutory obligations, we share data under strict confidentiality with:

Property Owners / Landlords: Summarized financial pre-qualification profiles (e.g., employment status, income verification confirmation, household size) during rental evaluations. Full tax returns and bank statements are reviewed internally by Morpho Real Estate Lda and are not distributed to third parties unless required by legal contract or explicit written consent.
Legal & Transactional Representatives: Lawyers, solicitors, official cartórios (notaries), real estate brokers (in co-brokering arrangements), and technical surveyors involved in property transactions.
Public, Tax, & Regulatory Authorities: The Portuguese Tax and Customs Authority (Autoridade Tributária e Aduaneira – Finanças), Conservatória do Registo Predial, IMPIC, and financial intelligence agencies under mandatory AML laws.
Property Management Vendors: Maintenance contractors, repair technicians, and utility companies strictly for property upkeep requests.

All personal data is stored securely within the European Economic Area (EEA) or in jurisdictions providing GDPR-equivalent protection.

5. Data Retention Schedule

We retain personal data only for as long as necessary to fulfill contractual obligations, maintain service relations, or comply with statutory retention laws:

Vetting Documents for Unsuccessful Applicants: Sensitive vetting documents (tax returns, payslips, bank statements, credit reports) submitted by non-selected applicants are deleted or destroyed within 90 days after a property is successfully leased.
Completed Real Estate Transactions (Sales, Purchases, Management): Client files, identification records, and transaction documentation are retained for 10 years following contract completion to satisfy Portuguese tax, accounting, and Anti-Money Laundering (AML) legal requirements.
Active Property Management Accounts: Retained for the full duration of the management agreement plus 10 years.
General Inquiries & Prospective Client Leads: Retained for 24 months from last communication unless a contract is executed or consent is withdrawn.
Marketing Subscribers: Retained until you opt out or click “unsubscribe.”

6. Security Measures for Sensitive Financial Data

Given the sensitive nature of the financial documents we handle (tax returns, bank statements, identity papers), we enforce strict data security protocols:

Encrypted cloud databases protected by multi-factor authentication and role-based access restrictions.
End-to-end SSL/TLS encryption for all website submissions and digital document transfers.
Strict internal confidentiality agreements for all staff and contractors handling client documentation.

7. Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal information:

Right of Access: Request copies of your personal data held by us. This service is completely free of charge.
Right to Rectification: Request corrections to incomplete or inaccurate personal data.
Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data, provided retention is not required by active contracts or statutory legal/AML obligations.
Right to Restrict Processing: Request restrictions on processing under specific legal conditions.
Right to Object: Object to data processing based on legitimate interest or direct marketing.
Right to Data Portability: Request transfer of your data to another organization or directly to you in a standard format.
Right to Withdraw Consent: Withdraw consent at any time where processing relies on consent.

To exercise any of these rights, contact us at info@morpho.pt or write to our registered office. We respond to all valid requests within 30 days.

8. Cookies and Web Tracking

Our website utilizes essential, functional, and analytical cookies to ensure proper site operation, store preferences, and analyze web traffic. You can adjust your cookie settings through your browser at any time.

9. How to Contact the Supervisory Authority

If you believe that Morpho Real Estate Lda has handled your personal data in non-compliance with the law, you have the right to lodge a complaint directly with the Portuguese Data Protection Authority:

Website: www.cnpd.pt | Email: geral@cnpd.pt

Supervisory Body: Comissão Nacional de Proteção de Dados (CNPD)

Address: Av. D. Carlos I, 134 – 1.º, 1200-651 Lisboa, Portugal