Privacy Policy
1. What makes this service special
Our service consists of receiving, opening and scanning your postal mail under your express mandate. Your correspondence can contain any category of personal data, including sensitive data. We treat all mail content under strict confidentiality, process it only to deliver the service to you, and never use it for any other purpose. Mail content is never used for advertising, profiling or training of any kind, and is never sold or shared.
2. What we process, why, and for how long
| Data | Purpose | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Identification (name, ID document, residential address, NIF) | Onboarding, identity verification, the reception mandate | Art. 6(1)(b) contract; art. 6(1)(c) legal obligations | Duration of contract + legal limitation periods |
| Contact (email) | Delivery of scans and service notices | Art. 6(1)(b) contract | Duration of contract + 1 year |
| Mail scans (envelope and contents) | The service itself | Art. 6(1)(b) contract, executed under your written mandate | While subscription is active; deleted 90 days after termination |
| Physical originals | Temporary storage before destruction or forwarding | Art. 6(1)(b) contract | 60 days after scanning, then confidential destruction |
| Billing data | Payments and invoicing | Art. 6(1)(b) and (c) | 10 years (tax law) |
| Waitlist email | Telling you when the service opens | Art. 6(1)(a) consent | Until launch communication or withdrawal |
3. Processors we use
- Stripe — payments (we never see full card numbers).
- Vercel — website and application hosting.
- Scaleway (Paris, France) — encrypted storage of your signed mandate and signature, in a private bucket inside the EU.
- Email and storage providers — delivery of scans and secure storage, under data processing agreements, within the EU/EEA or with adequate safeguards.
We share data with authorities only where legally required.
4. Security
Scans are stored encrypted; access to mail content is limited to the minimum staff necessary, bound by confidentiality; originals are kept in locked storage until destruction; destruction is by cross-cut shredding.
5. Your rights
Access, rectification, erasure, portability, restriction and objection — write to hello@portugalmailbox.com. You may complain to the CNPD (cnpd.pt). Withdrawing the mandate stops all mail processing immediately for new mail.
6. Cookies and browser storage
The site uses essential cookies and, with your consent, Google Analytics 4.
We also keep attribution data in your browser's local storage for 90 days, so we know which channels bring customers and where to spend:
- Referrer and landing page — the site you came from and the first page you opened here.
- Click identifier — if you arrived from a Google ad, the
gclid(orgbraid/wbraid) in the link. - Campaign parameters — any
utm_*values in the link you arrived through.
If you subscribe, the click identifier is sent to Google Ads and Google Analytics so the sale can be matched to the click that produced it. We do not use any of this to build a profile of you or to show you ads elsewhere, and it is erased automatically after 90 days. You can remove it sooner by clearing this site's data in your browser.