Privacy policy.

1. Controller

The controller of the personal data collected through this website is Ferraz e Aguiar Soares – Sociedade de Advogados, SP RL ("F+AS"), the Portuguese law firm operating DefesaLegal.pt, with offices at:

• Porto — Edifício Scala, Rua de Vilar, 235, 2.º Esq., 4050-626 Porto, Portugal · (+351) 222 084 267
• Lisboa — Praça Marquês de Pombal, 14, 1250-162 Lisboa, Portugal · (+351) 210 204 586

For any matter concerning the processing of personal data: support@defesalegal.pt.

2. Data collected, purposes and legal bases

Simply browsing this website does not require you to provide personal data. Personal data is processed in the following situations:

• Contact and consultation requests — name, email address, telephone number and any information you choose to include in your request. Purpose: handling your request, preliminary eligibility assessment and reply. Legal basis: pre-contractual steps taken at your request and, where applicable, consent.
• Provision of legal services — the data required to open and manage a case file. Legal basis: performance of a contract and compliance with the legal and professional obligations applicable to the legal profession.
• Updates and other communications — your email address, where you subscribe to updates or agree to receive relevant information. Legal basis: consent, which you may withdraw at any time.
• Website usage statistics — browsing data collected through cookies and similar technologies (see section 3), only with your consent.

3. Cookies and similar technologies

This website uses cookies and similar technologies for essential operation, audience measurement (Google Analytics, deployed through Google Tag Manager) and the operation of contact forms (HubSpot). The website is hosted on Cloudflare, which may set strictly necessary security cookies.

Non-essential cookies are only used after consent, which may be given, refused or withdrawn at any time through the consent management panel available on the website. You may also manage or delete cookies in your browser settings; disabling essential cookies may limit the operation of the website.

4. Disclosure of data to other entities

F+AS may transmit personal data to:

• Service providers (processors) processing data on behalf of F+AS under contract and strict confidentiality obligations — notably website hosting and security (Cloudflare), contact and form management (HubSpot) and productivity and analytics tools (Google);
• Third parties, where necessary to comply with a legal obligation, a court order, a decision of a regulatory authority or a legitimate request from a public authority.

5. International transfers

Some of the providers listed above may process data outside the European Economic Area. In such cases, the transfer is based on appropriate safeguards under the GDPR, namely adequacy decisions of the European Commission (including the EU-U.S. Data Privacy Framework, where applicable) or standard contractual clauses.

6. Retention periods

Personal data is kept only for as long as necessary for the purposes for which it was collected, without prejudice to retention periods imposed by law and to the professional and archiving obligations applicable to the legal profession. Once the applicable period has elapsed, data is deleted or anonymised.

7. Data subject rights

Under the GDPR, you may at any time request:

• access to your personal data;
• rectification of inaccurate data;
• erasure of your data, in the cases provided for by law;
• restriction of processing;
• data portability;
• objection to processing;
• confirmation as to whether or not your data is being processed.

Where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out until that date. Rights may be exercised by email to support@defesalegal.pt or by letter to Praça Marquês de Pombal, 14, 1250-162 Lisboa, Portugal. The exercise of these rights may be limited by lawyers' professional secrecy obligations, as provided by law.

8. Security

F+AS adopts appropriate technical and organisational measures to protect personal data against unauthorised access, misuse, disclosure, loss or destruction. Users should, in turn, ensure that the devices they use to access the website are protected against malicious software.

9. Links to third-party websites

This website may contain links to third-party websites. F+AS is not responsible for their content or privacy practices. This policy applies exclusively to data collected on this website.

10. Complaints

If you consider that the processing of your data infringes applicable law, you may lodge a complaint with the competent supervisory authority — in Portugal, the Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa · www.cnpd.pt.

11. Changes to this policy

F+AS reserves the right to amend this privacy policy at any time. Changes will be published on this page, with the date of the update indicated.

12. Contact

Phone: (+351) 222 084 267 · Email: support@defesalegal.pt · Address: Praça Marquês de Pombal, 14, 1250-162 Lisboa, Portugal.

Last updated: 8 July 2026.