
Privacy Policy
Last updated: September 2026
This policy explains what personal data we receive when you use the Maison Tejo website, why we use it and how you stay in control of it.
We only collect what we need to answer your request and assess your property. We do not sell your data or use it for advertising.
1.Data controller
The controller of the data collected on this website is Maison Tejo, a short-term rental management business based in Lisbon, Portugal.
For any question about your personal data, write to us at maisontejo@gmail.com.
2.Data we collect
We receive three kinds of information:
- information you give us through our forms, by email or on WhatsApp (identity, contact details, address and features of your property);
- technical data recorded automatically by the server hosting the website, as with any website: IP address, browser type, pages requested, date and time of access;
- your language preference, stored in a cookie (see Cookies below).
We do not ask for any sensitive data (health, opinions, etc.). Please do not include any in free-text fields.
3.Why we use your data
We only use your data to:
- answer your contact request;
- assess your property: address, Alojamento Local situation, how ready it is;
- prepare, if you wish, a proposal for support or management;
- get back to you through the channel you chose (email, phone or WhatsApp);
- keep the website running securely, including protection against automated (spam) submissions.
We do not sell, rent or trade your data. We do not sign you up to any newsletter.
4.Legal basis
Under the General Data Protection Regulation (GDPR), we rely on:
- steps taken at your request before entering into a contract: when you contact us or fill in the eligibility form, we use your information to reply and, where relevant, make you a proposal;
- performance of a contract, if you then entrust us with managing your property;
- our legitimate interest in following up on our exchanges and keeping the website secure;
- our legal obligations, in particular accounting and tax obligations, once we work together.
No processing on this website currently relies on your consent: we use no advertising cookies and no analytics tool. Should we ever ask for your consent, you could withdraw it at any time.
5.Website forms
Contact form
The “Let’s discuss your property” form asks for: first name, last name, property address (street, floor or door if you add it, postcode, city), email address and phone number. The language of the page you write from is attached to the request.
This information is sent to us by email so that we can reply and get back to you.
Alojamento Local eligibility form
This four-step questionnaire collects:
- the property: address (number, street, postcode, city), property type, current use (main home, second home or investment), number of bedrooms, guest capacity, whether it is furnished;
- the Alojamento Local situation: whether there is an AL number, what the building’s condominium rules say about short-term rentals, whether you would like help with the paperwork;
- your project: how far along you are, listings already online, any work needed, preferred timing;
- your contact details: first name, email address, phone number (optional, unless you ask to be contacted by phone or WhatsApp), preferred contact method and, if you wish, a free-text message.
These answers are sent to us by email. We use them to carry out a first check of your situation and reply to you. This assessment is indicative: it does not replace a decision by the competent authorities and involves no automated decision-making.
6.Contact via WhatsApp
The website lets you message Micka, from the Maison Tejo team, on WhatsApp. When you click that link, you leave the Maison Tejo website and use a service operated by WhatsApp (part of Meta).
Messages exchanged on WhatsApp are subject to WhatsApp’s terms and privacy policy. On our side, we only use the content of these conversations to answer your request.
8.Service providers and processors
Your data is only accessible to the members of the Maison Tejo team who need it to handle your request. We also use technical service providers, who act on our behalf and on our instructions:
- the website host, which runs the website and keeps technical logs;
- Resend, an email delivery service used to send us the requests submitted through our forms (contact and eligibility);
- our email provider, for email exchanges.
We do not share your data with any other third party, unless required by law (for example, at the request of an authority).
9.Hosting and transfers outside the EU
The website is hosted by a professional hosting provider. Some providers may process data outside the European Union.
This is the case for Resend, which is based in the United States. These transfers are covered by the safeguards provided for in the GDPR: the European Commission’s standard contractual clauses and the EU–U.S. Data Privacy Framework, in which Resend participates.
10.How long we keep your data
- Contact and eligibility requests: kept for as long as needed to handle your request and follow up on our exchanges. If we do not end up working together, we delete them once they are no longer useful for that purpose.
- If you entrust us with your property: your data is kept for as long as we work together, then for the periods required by our legal obligations, in particular accounting and tax obligations.
- Technical logs: kept by the host for a limited period, for security purposes.
- Language cookie: 1 year.
You can ask us to delete your data at any time (see “Your rights”).
11.Data security
We take reasonable measures to protect your data: access limited to the people who need it, well-established service providers, and protection of the contact form against automated submissions.
No system is infallible; if an incident affected your data, we would act in line with our legal obligations, including notifying the supervisory authority and, where required, the people concerned.
12.Your rights
You have the following rights over your data:
- access: find out what data we hold about you and get a copy;
- rectification: correct inaccurate or incomplete information;
- erasure: ask us to delete your data;
- restriction: ask us to temporarily stop using your data;
- objection: object to processing based on our legitimate interest;
- portability: receive the data you gave us in a common format, where processing is based on a contract or on your consent;
- withdrawal of consent: at any time, where processing is based on your consent.
13.How to exercise your rights
Simply email us at maisontejo@gmail.com and tell us what you would like.
We reply within one month. This can be extended by two further months for complex requests, in which case we will let you know. If we have reasonable doubts about your identity, we may ask you for proof.
14.Complaints to the supervisory authority
If you believe your rights have not been respected, you can lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD): www.cnpd.pt.
You can also contact the data protection authority in your country of residence. Feel free to contact us first: we will do our best to find a solution.
15.Changes to this policy
We may update this policy, for example if the website changes or we switch service providers. The date of the latest update is shown at the top of this page.
16.Contact
For any question about this policy or your personal data: maisontejo@gmail.com.