1. Scope
This policy covers the personal data JHOMEA collects through the jhomea.pt website, its email addresses, its phone lines, WhatsApp and its social media pages. It applies to website visitors, to anyone who asks us for information or for a development's brochure, to newsletter subscribers, to clients and to anyone who attends our events or visits our construction sites.
2. What data we collect
Data you give us directly. When you fill in a form on the website: first name, last name, email, mobile number and, on the contact form, the subject and message. We also record where the request came from (for example, the brochure of a specific development) and the language you were browsing in, so we can reply in the right language. When you email us, message us on WhatsApp, call us or contact us on social media, we process the data you choose to share. We record requests and contacts in our sales management software (X-IMO) so we can follow them up.
Technical data about your visit. Like any website, the server temporarily logs your IP address, browser and operating system, the page requested and the date and time of access. This is needed to run the website and protect it from abuse.
Visit statistics. We measure visits with Vercel Web Analytics and page performance with Vercel Speed Insights, which do not use cookies or identify visitors. If you accept it in the cookie notice, we also use Google Analytics, which stores cookies and collects data about your visit — pages viewed, where you came from, device and browser type, approximate location and a random browser identifier — so we can understand how the website is used and how many requests reach us through it. If you also accept ad measurement, the Meta Pixel stores a cookie and sends Meta the page visited, your browser, a random identifier and whether you made a request or subscribed to the newsletter — never what you typed into the forms — so we know how many requests come from our ads on Facebook and Instagram.
Photos and video. At our events, on visits and on our construction sites we take photos and video, including aerial footage by drone, in which attendees, visitors or people working on site may appear. We avoid capturing people unnecessarily and, in aerial footage, blur anyone who is identifiable where appropriate. When we photograph an event or a visit, we say so in the invitation or on site.
We do not ask for special categories of data (health, ethnic origin, religious or political beliefs, among others). Please do not include them in your messages; if you do, we will only process them as far as needed to reply, and delete them afterwards.
3. Why we use your data, and on what legal basis
- Replying to contact, information and brochure requests, and arranging visits and meetings. Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in replying to people who contact us (Article 6(1)(b) and (f) GDPR).
- Sending the newsletter and news about new developments. Legal basis: your consent (Article 6(1)(a)), given when you subscribe through the newsletter form or tick the corresponding box on another form. We send it through Mailchimp or X-IMO. You can withdraw your consent at any time using the link at the end of every email.
- Contacting you by phone, text message or WhatsApp about our developments. Legal basis: for calls, our legitimate interest in following up with people who asked us for information or are already clients (Article 6(1)(f)); for text messages and WhatsApp, your consent or, if you are already a client, our legitimate interest in presenting similar developments (Article 13-A of Law 41/2004). You can object at any time — just tell us during the call or in a message, or write to info@jhomea.pt — and we will stop contacting you for this purpose.
- Preparing and performing contracts — reservations, promissory contracts and deeds. Legal basis: performance of a contract (Article 6(1)(b)).
- Complying with legal obligations, namely tax obligations and the anti-money-laundering rules that apply to real estate (Portuguese Law 83/2017). Legal basis: legal obligation (Article 6(1)(c)).
- Establishing, exercising or defending our rights in judicial, administrative or out-of-court proceedings. Legal basis: legitimate interest (Article 6(1)(f)).
- Keeping the website running, secure and improving, based on aggregated visit statistics. Legal basis: legitimate interest (Article 6(1)(f)).
- Measuring how the website is used and the requests we receive through it, with Google Analytics. Legal basis: your consent (Article 6(1)(a)), given in the cookie notice. You can withdraw it at any time under “Cookie preferences” in the footer.
- Measuring the results of our ads on Facebook and Instagram, with the Meta Pixel. It is only used to count the requests that come from our ads: we do not use it to build audiences or to show you ads based on your visit. Legal basis: your consent (Article 6(1)(a)), given in the cookie notice. You can withdraw it at any time under “Cookie preferences” in the footer.
- Sharing our events, developments and the progress of our construction sites, on the website, on social media, in campaigns and in company materials, using photos, video and aerial footage in which you may appear. Legal basis: our legitimate interest in showing the company's work (Article 6(1)(f)); to use the image of a person who is the main subject for promotion, we ask for their permission (Article 6(1)(a)). You can object at any time, and we will remove the image from the publications we control.
We do not use your data for automated decision-making or profiling.
4. Required fields
Fields marked with * are the ones we need in order to reply. Without them we cannot handle your request; the others are optional. Subscribing to the newsletter is never a condition for getting a reply.
5. Cookies and similar technologies
The website only stores third-party cookies with your permission: on your first visit, a notice asks whether you accept, and under “Customise” you can choose service by service.
- Google Analytics (visit statistics). Stores the _ga and _ga_<ID> cookies, which last up to 2 years, to tell one visit from the next.
- Meta Pixel (ad measurement). Stores the _fbp cookie, which lasts up to 90 days, and, if you reached the website through an ad, the _fbc cookie, to link the request to that ad.
- Google Maps (map on the contact page). When the map loads, Google may store cookies and collect data about your visit.
If you decline, none of this loads; a notice with a button to show the map appears in its place. Google is responsible for its own processing, which is governed by Google's privacy policy at policies.google.com/privacy.
Data collected by the Meta Pixel on the website is collected under our joint responsibility with Meta Platforms Ireland Limited; any further processing by Meta is Meta's responsibility and is governed by Meta's privacy policy at facebook.com/privacy/policy.
Your choice is stored in your browser (local storage) for 6 months, so we do not ask again on every page; after that, we ask again. You can change your mind at any time under "Cookie preferences", in the footer of every page.
We have pages on Instagram, Facebook and LinkedIn. The links on the website only open those networks; what you do there, including interacting with our pages, is also processed by the networks themselves, as independent controllers, under their own privacy policies.
6. Who we share data with
We do not sell or rent personal data. We only share it with:
- Service providers that process it on our behalf, under contract and only for the purposes described here: Vercel Inc. (website hosting and visit statistics), Intuit Mailchimp (contact management and newsletter), Resend, Inc. (forwarding requests made on the website to our team), Dominios.pt (our email hosting), InovaDigital – Tecnologias da Informação, Lda. (X-IMO, our sales and contact management software), Google Ireland Limited (Google Analytics, if you accept it), Meta Platforms Ireland Limited (Meta Pixel, if you accept it) and WhatsApp Ireland Limited (WhatsApp Business, when we talk to you that way).
- Partners involved in a transaction you asked us for, such as lawyers, notaries or banks, as far as that transaction requires.
- Public authorities — judicial, tax or regulatory — when the law requires it.
7. Transfers outside the European Union
Vercel, Intuit Mailchimp and Resend are based in the United States, and Google Ireland Limited, Meta Platforms Ireland Limited and WhatsApp Ireland Limited may transfer data to their parent companies, Google LLC and Meta Platforms, Inc., also in the United States. Transfers to them are made under the EU-U.S. Data Privacy Framework, which is covered by a European Commission adequacy decision, or, failing that, under standard contractual clauses approved by the European Commission.
8. How long we keep data
- Contact, information and brochure requests, communications and the history of our business relationship: for as long as they are needed to follow them up, up to a maximum of 10 years after the last contact.
- Newsletter: for as long as you stay subscribed. Once you unsubscribe, the emails stop immediately.
- Clients and contracts: for the duration of the contract and, afterwards, for the periods required by law — 10 years for tax and accounting records and 7 years for anti-money-laundering records.
- Photos and video from events and construction sites: for as long as they are relevant to the company's history and communications. If you object, we remove the image from the publications we control.
- Google Analytics statistics: 14 months.
- Meta Pixel cookies: up to 90 days.
- Server logs: for short periods set by the hosting provider, for security and operation.
These maximum periods do not mean that all data is kept until the end: once it is no longer needed, or if you withdraw your consent, object or ask for erasure, it is deleted or anonymised — except for what the law requires us to keep or what is needed to defend our rights.
9. Your rights
Under the GDPR you may, at any time:
- find out what data we hold about you and get a copy (right of access);
- correct inaccurate or incomplete data (rectification);
- ask us to delete it (erasure), unless the law requires us to keep it;
- ask us to suspend processing (restriction);
- receive the data you gave us in a structured, commonly used format, or ask us to send it to another organisation (portability);
- object to processing based on legitimate interest and, at any time and without giving a reason, to direct marketing (objection);
- withdraw any consent you gave, without affecting the processing carried out before that.
To exercise any of these rights, write to info@jhomea.pt. Requests are free of charge, and we reply within one month, extendable by two further months for complex requests, in which case we will let you know. We may ask you to confirm your identity so that we never hand data to someone other than its owner.
You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.
10. Security
The website always communicates over an encrypted connection (HTTPS). Access to data is limited to the team members who need it, and we only work with providers that offer adequate security guarantees. No system is infallible: if a data breach occurs that poses a risk to your rights, we report it to the CNPD within 72 hours and, where the risk is high, we also inform the people affected.
11. Children
The website and our services are not aimed at anyone under 18, and we do not knowingly collect their data. If you become aware of such a case, write to info@jhomea.pt and we will delete that data.
12. Changes to this policy
We may update this policy when the law, our services or the website's tools change. The date of the current version is shown at the top of this page.
13. Applicable law
This policy complies with Regulation (EU) 2016/679 (the General Data Protection Regulation), Portuguese Law 58/2019 of 8 August, which implements it in Portugal, and Portuguese Law 41/2004 of 18 August on privacy in electronic communications and cookies.