Privacy Policy

Match2Deal is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (RGPD / GDPR).

1. Data Controller

The controller of your personal data is:

• Entity: Match2Deal, Lda.
• Address: Rua José António Cruz Nº 89, 4715-343 Braga
• Email: privacidade@match2deal.pt

2. Data We Collect

2.1 Data you provide

• Account data: Name, email, phone, password
• Buyer profile: Sectors of interest, budget, acquisition objectives
• Seller profile: Company information, financial data, documents
• Communications: Messages exchanged on the platform

2.2 Data collected automatically

• Technical data: IP address, browser type, device
• Usage data: Pages visited, features used, session duration
• Cookies: As described in our Cookie Policy

3. Processing Purposes

We use your data to:

4. Data Sharing

4.1 With other users

Your public profile information is visible to other users. Confidential information is only shared with your explicit authorisation through our progressive disclosure system.

4.2 With service providers

We share data with:

• Payment processors: Stripe (PCI-DSS compliant)
• Hosting: Servers in the European Union
• Analytics: To understand platform usage
• Communications: Transactional email services

4.3 International transfers

When we transfer data outside the EEA, we ensure adequate protection through EU standard contractual clauses or adequacy decisions.

5. Data Retention

We retain your data for:

• Active account: As long as you maintain an account with us
• After closure: Up to 5 years for financial data (tax obligation)
• Communications: 2 years after the last contact
• Analytics data: 26 months

6. Your Rights

Under the RGPD (GDPR), you have the right to:

• Access: Obtain a copy of your personal data
• Rectification: Correct incorrect or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Restrict processing in certain circumstances
• Portability: Receive your data in a structured format
• Objection: Object to processing based on legitimate interest
• Withdraw consent: At any time, without affecting the lawfulness of prior processing

To exercise your rights, contact us at privacidade@match2deal.pt. We will respond within 30 days.

7. Security

We implement appropriate technical and organisational measures to protect your data:

• Encryption of data in transit (TLS/SSL) and at rest
• Role-based access control
• Continuous security monitoring
• Regular backups and disaster recovery plan
• Regular team training on data protection

8. Protection of Business Information

We recognise that information about businesses for sale is particularly sensitive. Our progressive disclosure system allows:

• Publishing basic information without identifying the business
• Granular control over who can see confidential information
• Digital confidentiality agreements (NDAs) before access to sensitive data
• Logging of all access to confidential information

9. Minors

Our services are not intended for individuals under 18. We do not knowingly collect data from minors. If we become aware of such a situation, we will delete the data immediately.

10. Changes to this Policy

We may update this Policy periodically. We will notify material changes by email or via a notice on the platform. The current version is always available on this page.

11. Complaints

If you believe that the processing of your data violates the RGPD (GDPR), you have the right to lodge a complaint with the Portuguese supervisory authority:

• CNPD - Comissão Nacional de Proteção de Dados (Portuguese Data Protection Authority)
• Website: www.cnpd.pt

We encourage you to contact us first so we can try to resolve any issue.

12. Contact

For questions about privacy or data protection:

• Email: privacidade@match2deal.pt
• Address: Rua José António Cruz Nº 89, 4715-343 Braga