PRIVACY & COOKIES POLICY
YourNIF.com Privacy & Cookies Policy
1) Who we are (Data Controller)
This Privacy Policy & Cookie Policy (“Policy”) explains how YourNIF.com (“we”, “us”, “our”) collects and processes personal data when you use our website and request our services related to obtaining a Portuguese tax identification number (NIF) and associated support services.
Data Controller: Francisco G. Pereira
Address: Campo Grande 28 7.ºD, 1700-093 Lisbon, Portugal
2) Data Protection Officer (DPO)
We have appointed a Data Protection Officer (DPO).
DPO contact email: info@yournif.com
3) Scope
This Policy applies to personal data processed when you:
browse or use YourNIF.com;
request, purchase, or receive our services;
contact us for support, information, or complaints;
manage cookie preferences via our cookie banner/settings.
4) Personal data we process
Depending on the service requested, we may process:
4.1 Identity and contact data
full name, date of birth, nationality;
email address, phone number;
residential address and/or tax address.
4.2 Documents and verification data (service-dependent)
To deliver NIF-related services, we may process:
copy/scan/photo of an identification document (e.g., passport or national ID), including document number, validity dates, and photo;
proof of address (e.g., utility bill/bank statement);
authorisations/mandates and signature (if required for your case);
other information strictly necessary to submit and follow up your request.
4.3 Billing and transaction data
invoicing details (name, address, tax number where applicable, purchase history);
payment status and transaction references.
Payment card data: When you pay by card via PayPal, card processing is handled by PayPal and/or its regulated partners; we do not typically receive or store full card details.
4.4 Communications and support data
the content of communications you send (email/forms/chat), support history, complaint handling.
4.5 Technical and usage data (website)
IP address, device/browser information, logs, timestamps, and interactions;
cookie identifiers and consent signals/preferences (see Section 11).
5) Purposes and legal bases
We process personal data only where permitted under the GDPR.
5.1 Provide the services you request
Including reviewing your request, preparing documentation, supporting submissions and follow-ups needed for NIF-related processes.
Legal basis: performance of a contract and steps at your request prior to entering a contract.
5.2 Legal and regulatory compliance
Including accounting, invoicing, and responding to lawful requests from competent authorities.
Legal basis: legal obligation.
5.3 Customer support, quality, and security
Including handling inquiries, preventing fraud/abuse, maintaining service security, and improving reliability.
Legal basis: legitimate interests (service delivery, security, quality), balanced against your rights.
5.4 Marketing (optional)
If you opt in, we may send newsletters or offers. You may unsubscribe at any time.
Legal basis: consent.
5.5 Cookies and analytics (optional)
We use non-essential cookies/analytics only where you consent (see Section 11).
Legal basis: consent for non-essential cookies under applicable rules in Portugal.
6) Automated decision-making
We do not use personal data for solely automated decision-making that produces legal effects or similarly significant effects on you.
7) Who we share data with (recipients)
We share personal data only as necessary to operate the website and deliver the service.
7.1 Service providers (processors)
We may use suppliers for:
hosting and infrastructure,
customer support tooling,
security/anti-fraud,
document management,
analytics (only if enabled by your cookie choices).
These providers process data under contractual obligations, confidentiality, and security requirements.
7.2 Payments — PayPal (independent controller for payment processing)
We use PayPal for payments (PayPal payments and credit/debit card payments via PayPal). PayPal processes certain personal data as an independent controller for payment processing purposes and requires merchants to inform customers accordingly and provide access to PayPal’s privacy statement.
7.3 Google Analytics (processor under Google’s data processing terms)
If you consent to analytics cookies, we use Google Analytics (Google Analytics) to understand website usage and improve performance. Google provides data processing terms applicable to analytics processing for businesses subject to the GDPR.
7.4 Authorities
Where required for the service and/or by law, data may be provided to competent public authorities, including the Autoridade Tributária e Aduaneira.
We do not sell your personal data.
8) International data transfers
Some providers (e.g., payments and analytics) may process data outside the EEA. Where international transfers occur, we rely on lawful transfer mechanisms such as Standard Contractual Clauses and other measures as required.
9) Data retention
We retain personal data:
for the duration of the contract, and
for fifteen (15) years after the contract terminates.
Where shorter retention is possible and appropriate (e.g., data that is no longer necessary for any purpose), we may delete or anonymise earlier. Where a longer period is legally required (e.g., litigation hold), we may retain data longer for that specific purpose.
10) Security
We implement appropriate technical and organisational measures to protect personal data, including access controls, confidentiality restrictions, and security monitoring. Identification documents are treated with heightened care due to their sensitivity. No system is completely secure, but we work to reduce risk to an appropriate level.
11) Cookies — Cookie Policy (CookieAdmin)
11.1 What cookies are
Cookies are small text files stored on your device. Some are necessary for the website to function; others are optional and require your consent.
11.2 Cookie categories
Strictly necessary cookies: required for core site functionality, security, and storing your cookie preferences.
Preferences cookies (optional): remember choices (e.g., language).
Analytics cookies (optional): measure traffic and usage (e.g., Google Analytics), only if you consent.
Marketing cookies (optional, if used): support advertising/personalisation (only if implemented and only with consent).
11.3 Cookie consent management (CookieAdmin)
We use CookieAdmin to present the cookie banner, manage your choices, and (where applicable) maintain consent records/logs.
11.4 Managing cookies
You can set, refuse, or withdraw consent at any time using the Cookie Settings option on the website and through your browser settings.
In Portugal, the website operator is responsible for cookies placed on users’ devices and, in general, non-essential cookies require prior consent.
12) Your rights (GDPR)
Subject to conditions and limitations, you may request:
access, rectification, erasure;
restriction, portability;
objection (including where processing relies on legitimate interests);
withdrawal of consent (where applicable), without affecting prior lawful processing.
To exercise your rights, contact the DPO at info@yournif.com. We may request information strictly necessary to verify your identity.
Complaints
You may lodge a complaint with the Portuguese supervisory authority, the CNPD.
13) Third-party links
Our website may include links to third-party sites. We do not control those sites and are not responsible for their privacy practices.
14) Children
Our services are not intended for children. If you believe a child has provided us with personal data, contact info@yournif.com.
15) Changes to this Policy
We may update this Policy from time to time. We will publish the updated version on the website and adjust the “Last updated” date.
16) Contact
Data Controller: Francisco G. Pereira
Address: Campo Grande 28 7.ºD, 1700-093 Lisbon, Portugal
DPO email: info@yournif.com