Privacy
Policy.

Madeira Compass takes the privacy of its clients and website visitors seriously. This policy explains what personal data we collect, why we collect it, and how we handle it, in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, GDPR) and applicable Portuguese data protection law.

The data controller for this website is Madeira Compass, reachable at.

We collect personal data only when you choose to provide it. When you submit an enquiry through our contact form, we collect your name, email address, and the content of your message. We do not collect data in any other way, there is no newsletter sign-up, no account registration, and no tracking pixels on this site.

We use this data solely to respond to your enquiry and to conduct the advisory relationship that may follow.

We process enquiry data on the basis of legitimate interest (Article 6(1)(f) GDPR): the shared interest between you and Madeira Compass in establishing a potential advisory relationship. This interest does not override your rights, you may object to or request erasure of your data at any time and without consequence.

We retain enquiry correspondence for a maximum of 24 months from first contact, unless a longer period is required by law or by an active engagement with you. Where a formal advisory agreement is signed, related records are kept in accordance with applicable obligations under Portuguese law.

You may request deletion of your data at any time by writing to.

We do not sell, trade, or rent personal data to any third party.

Where we coordinate licensed partner professionals, lawyers, notaries, surveyors, accountants, on your behalf, we share only the information required for your transaction and only with your knowledge and agreement. Those professionals are independently bound by their own confidentiality and legal obligations.

Google Analytics 4. We use Google Analytics to understand how visitors interact with this website. This service sets cookies (listed in section 6 below) and transmits usage data — including your IP address, pages visited, and referring site — to Google LLC servers. Google processes this data under its own privacy policy. We have implemented Google Consent Mode v2: analytics cookies are only activated after you provide consent via the cookie banner on your first visit.

Google Ads. We use Google Ads conversion tracking (tag AW-16471376998) to measure the effectiveness of our advertising. This service may set cookies and transmit data to Google LLC. Like Google Analytics, it is subject to Google Consent Mode v2 and only activates after you provide consent.

Vercel Analytics. This website is hosted on Vercel. Vercel's analytics service collects anonymised, aggregate data about page visits, including the URL visited, referring site, approximate device type, and approximate country. This service does not use cookies and does not identify you individually. Data is processed by Vercel, Inc. in accordance with their privacy policy.

Ahrefs Analytics. We use Ahrefs web analytics to understand traffic sources and visitor journeys. This service does not set cookies or collect personal data and processes only anonymised, aggregate metrics.

WhatsApp. Our contact page and footer include links to WhatsApp. Clicking those links opens WhatsApp's service; any communication via WhatsApp is subject to Meta's privacy policy. We do not initiate WhatsApp contact without your request.

When you accept cookies via the consent banner, Google Analytics and Google Ads set the following cookies in your browser:

Cookie	Provider	Purpose	Expires
_ga	Google Analytics	Distinguishes unique users	2 years
_ga_*	Google Analytics	Maintains session state	2 years
_gcl_au	Google Ads	Conversion tracking	90 days

If you decline cookies, none of the above are set. We also use your browser's local storage — a mechanism separate from cookies — to remember your language preference (mc_lang) and your cookie consent choice (mc_cookie_consent). These values contain no personal information and are never transmitted to any server.

Under the GDPR, you have the right to access the personal data we hold about you; request correction of inaccurate data; request erasure of your data; object to processing based on legitimate interest; request restriction of processing; and, where applicable, data portability.

To exercise any of these rights, write to. We will respond within one calendar month.

If you believe your data is being handled unlawfully, you have the right to lodge a complaint with the Portuguese supervisory authority: Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt.

We may update this policy from time to time to reflect changes in our practices or in applicable law. The current version is always available at this address. The date at the top of the page indicates when the policy was last revised.