Privacy policy

The data controller is Nádia Vilela, lawyer, registered with the Portuguese Bar Association (Ordem dos Advogados) under no. 68.530L. Maison Luso Iberia is the name of her immigration law practice and of this website.

Office

Rua de São José 149, 3.º Dto., 1150-322 Lisboa, Portugal

Email

nadia.vilela@maison-luso-iberia.com

Phone and WhatsApp

+351 929 246 806

Tax number (NIF)

286 911 140

There is no separate data protection officer. Privacy requests go straight to Nádia Vilela.

• When you fill in the formYour name and contact details, and what you tell us about your situation. We ask for documents only when your case needs them.
• When you write or callYour email address or phone number and whatever you tell us, by email, phone or WhatsApp.
• When you book a consultationThe date, the format you choose (at the office or by video call) and the details needed for the invoice.
• When you become a clientThe information and documents your case needs: identity and travel documents, family and civil status details, address, work and income, tax and social security numbers, and the correspondence with AIMA, IRN, the courts and other bodies.
• When you visit this siteTechnical data such as your IP address, browser and the pages requested, kept for a short time in our hosting provider’s server logs. Cookies have their own page: see the Cookie policy.

Some cases need sensitive information, such as a criminal record certificate, health information or details of your family life. We ask for it only when your case requires it.

You do not have to give us anything. Without your contact details we cannot reply; without the documents a case needs, we cannot file it.

If your application includes family members, we give them this information ourselves at our first contact with them. Information about other people that you share with us stays under professional secrecy.

If, on your own initiative, you send us sensitive information in your first message, for example about health or criminal records, we process it on the basis of your explicit consent (Article 9(2)(a)) until a case is opened. Please do not send it before we ask.

We do not use your data for automated decisions or profiling.

Everything you tell us is covered by the duty of professional secrecy that binds lawyers in Portugal (Article 92 of the Statute of the Portuguese Bar Association). It applies from your first message, whether or not you become a client and whether or not a fee is ever paid.

The same duty binds everyone who works with us on your case.

We share your data only when your case or the law requires it.

• Public bodies and courtsAIMA, IRN, consulates, the tax and social security authorities and the courts, when we file or follow an application or a court action on your instructions.
• Other professionals in your caseCertified translators, notaries, solicitors or lawyers in another country. Each one receives only what that step needs.
• Providers that work for usWebsite hosting (Cloudflare), the database where we keep enquiries and case notes (Notion), email, document storage, scheduling, video calls and accounting. They act on our instructions, under a data processing agreement.
• AuthoritiesWhen a law or a court order requires it, and within the limits of professional secrecy.

Nádia Vilela reads what you send. If a translator or another professional needs to see part of your file, we tell you first.

We never sell your data and never pass it on for targeted advertising.

When you contact us on WhatsApp, or when we reply to you on WhatsApp, Meta processes your number and the conversation metadata under WhatsApp’s own privacy policy. The content of the messages is end-to-end encrypted.

Some providers process data in the United States: Notion (where the enquiries sent through this site are stored), Cloudflare, Google and Meta (WhatsApp). These companies are certified under the EU–US Data Privacy Framework (official list checked in October 2026). If a certification lapses, the European Commission’s standard contractual clauses in our contracts with those providers apply. You can ask us for a copy of the safeguards used.

If your case involves another country, for example a document request in Brazil, we send there only what that step needs, on your instructions, as necessary to perform our contract with you or to establish your legal claims (Art. 49 GDPR), unless an adequacy decision for that country applies at the time.

You can ask us, at any time, to:

• Show you the data we hold about you and give you a copy
• Correct data that is wrong or incomplete
• Delete your data
• Restrict a particular use of it
• Stop processing based on our legitimate interests if you object on grounds relating to your particular situation (Article 21 GDPR); we continue only if compelling legitimate grounds prevail
• Hand it over in a format you can take to another provider
• Withdraw a consent you gave

If you authorised us to publish a message of yours on this site and want it removed, write to us. We take it down within five working days.

Write to nadia.vilela@maison-luso-iberia.com. We reply within one month. We may ask you to prove who you are, so that nobody else can reach your file.

Some requests have legal limits. We cannot delete what the law requires us to keep, and professional secrecy protects what other people have told us.

If you believe we have handled your data wrongly, you can complain to the Portuguese data protection authority: Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, www.cnpd.pt. We would appreciate the chance to put it right first.

Only the people working on your case can open your file. This site uses encrypted connections, our devices and accounts are protected, and we choose providers that offer appropriate guarantees.

Email is not a fully secure channel. If you would rather not send a document by email, tell us and we will arrange another way, such as handing it over at the office.

On WhatsApp we use a business account with encrypted backups. Documents you send there are saved to your file. Please do not send identity documents before we ask for them.

This site is not aimed at children. When a case involves a child, for example in family reunification or citizenship by descent, we process the child’s data only as the application requires, on the same legal bases as the parent’s. Parents or guardians exercise the child’s rights, and an older child can contact us directly.

We update this page when the site or the law changes. The date at the top shows the current version. If a change affects data you have already given us, we will tell you directly.

This policy follows the EU General Data Protection Regulation (Regulation (EU) 2016/679) and Portuguese Law 58/2019.