1. Who is responsible
e-expat is the controller for the personal data described here. Questions, requests and complaints go to hello@e-expat.com.
e-expat is the trading name of JASMINELOFT - Unipessoal Lda, NIPC 519004442, Avenida António Augusto de Aguiar, n.º 29, Bloco D, 8 Esq., 1050-251 Lisboa, Portugal.
2. What this website collects
Very little. The site is a set of static pages. Forms on this site send your answers to us by email through a form service; nothing you type is stored on this website. Stripe handles payment for every service you order on this site. Documents you upload on a confirmation page are sent to us by email through Web3Forms and stored only in our mailbox and case files. Files you send by WhatsApp or email are handled under those services’ terms. Send documents through the upload on your confirmation page or on WhatsApp. If you prefer email, write to hello@e-expat.com. We keep your messages only as long as needed to answer you.
It sets no cookies. The site keeps a small entry in your browser’s session storage only to show your name and order on the confirmation page after payment, and to fill in your name and email if you upload documents there; it is deleted when you close the tab. You can confirm this in your browser’s developer tools: the cookie jar and local storage stay empty. What it does keep is described under Analytics below.
Every asset the page loads, including the fonts and the icon font, is served from this site’s own domain. The pages make no request to Google, to a font service or to any other third party. The analytics collector is served from this domain too, and its data goes to Vercel, our host.
3. Your CV and report data
Controller. JASMINELOFT - Unipessoal Lda, NIPC 519004442, Avenida António Augusto de Aguiar, n.º 29, Bloco D, 8 Esq., 1050-251 Lisboa, trading as e-expat, hello@e-expat.com.
What we collect for the report. Your name, email, WhatsApp number if given, nationality, country of residence, CV, language levels, target roles, sector, experience, earliest start, salary floor, location preference, current status and anything you add in the free-text field.
Why. To prepare your Employer Match Report and to answer your questions about it. Legal basis: performance of a contract with you (GDPR article 6(1)(b)).
How it travels. The intake form is sent to us by email through Web3Forms (a form service), your CV attached. Payment is handled by Stripe; we never see your card details. If you send your CV by WhatsApp or email, those services’ terms apply to the transfer.
Who else sees it. Nobody outside e-expat. Your CV and answers are not shared with employers, contact-data providers or anyone else. To find employer contacts we use business-contact databases; we search for employers there, we never upload your data to them.
How long. We keep your CV and report data for 12 months after delivery so we can answer follow-up questions and prepare a second batch if you ask, then delete them. You can ask us to delete them earlier at any time.
Your rights. Access, correction, deletion, restriction, portability and objection, by writing to hello@e-expat.com. You may complain to the Comissão Nacional de Proteção de Dados (cnpd.pt).
Where. Data is stored in the EU. Web3Forms and Stripe process data under their own privacy terms.
4. Your School Match Report data
What we collect for the report. Your name, email and WhatsApp number if given; for each child, the date of birth, current grade, curriculum, language of instruction, English level and the latest report card; your arrival month, preferred area, budget per child per year, priorities and anything you add in the free-text field.
Why. To prepare your School Match Report and to answer your questions about it.
How it travels. The intake form is sent to us by email through Web3Forms, and each report card as a separate message through the same service. Payment is handled by Stripe; we never see your card details. If you send report cards by WhatsApp or email, those services’ terms apply to the transfer.
Everything else. The controller, who else sees the data, how long we keep it, where it is stored and your rights are as set out for the CV and report data above.
5. Analytics
We use Vercel Web Analytics to see how many people visit, which pages they read, which country and device type they come from, and which page sent them here. It is aggregate: we see counts, not people.
It works without cookies and without writing anything to your browser; that part we check ourselves on every deployment. How Vercel counts a visit on its own servers is Vercel's account, not something we can verify: according to Vercel, a visit is recognised for the length of a day by a hash of your IP address and browser signature that is discarded afterwards, so it cannot follow you from one day to the next or from one site to another, and there is no advertising identifier and no cross-site tracking.
Besides page views, the site records six things you do on it, each as a handful of fixed codes and never any text you enter: finishing the Build my path tool (the destination, case type and household size you picked, and the language), pressing a WhatsApp button (which button and on which page), opening the WeChat card (which page), switching language (from and to), pressing an Ask-AI button (which assistant and on which page), and asking for a free Employer Match Report preview (whether the request went by the form or by WhatsApp, and on which page). The prefilled WhatsApp message, what you write in the preview request and the prompt sent to an AI assistant are not recorded; the assistant opens on its own site, under its own terms.
The data is processed by Vercel Inc. as our processor, under the agreement listed below, and is held in aggregate form. The analytics script is loaded from /_vercel/insights/ on this domain, and once running it reports to a path on this same domain that Vercel assigns to the project. If you would rather not be counted, a content blocker that stops requests to /_vercel/insights/ on this domain keeps the script from loading, and with the script never loaded nothing is reported. We check that on every deployment, in the same run that loads the page and uses its buttons with that path blocked.
6. Server logs
The site is hosted by Vercel. As with any web host, its servers record ordinary request information so the site can be served and abuse can be prevented: the IP address, the time of the request, the page requested, the referring page and the browser’s user-agent string.
We do not use those logs to build a profile of you, and we do not combine them with anything else. They are held by Vercel under its own retention schedule as our processor.
7. When you contact us
Every contact button on this site opens a conversation somewhere else. Nothing you write reaches us through this website.
8. What we do with what you tell us
If you ask us about a route, we use what you tell us to assess the case, to quote for it and, if you go ahead, to prepare and file it. That can include your nationality, your family situation, your income and the documents a given authority requires. You choose what to send; we ask only for what the route needs.
We do not sell it, we do not use it for advertising, and we do not send marketing you have not asked for.
9. Legal basis
- Answering your enquiry and quoting: our legitimate interest in responding to someone who contacted us, and steps taken at your request before a contract.
- Running a case you have engaged us for: performance of that contract.
- Keeping records of engagements and payments: our legal obligations.
- Serving the website securely: our legitimate interest in operating and protecting it.
10. Who else sees it
Only the parties a case actually needs. Depending on the route that can include the licensed lawyers, solicitors and accountants in our partner network who act on your file, and the authority the application is filed with.
11. Where it goes
Vercel, Meta and Tencent operate infrastructure outside the European Economic Area. Where data reaches those countries it is transferred under the safeguards each provider relies on, such as the European Commission’s standard contractual clauses. If you would rather keep the conversation inside the EEA, email us instead of messaging.
12. How long we keep it
Enquiries that do not become engagements are deleted once they are plainly stale. Files for cases we ran are kept for as long as professional and tax record-keeping requires, then deleted.
13. Your rights
Under the GDPR you can ask for a copy of what we hold, ask us to correct or delete it, object to or restrict what we do with it, and ask for it in a portable form. Write to hello@e-expat.com and we will answer within one month.
If you think we have handled your data badly, you can complain to your local supervisory authority. In Portugal that is the Comissão Nacional de Proteção de Dados (CNPD).
14. Changes
If the site ever starts collecting more, for example if a contact form is added, this page changes first and the date below moves with it.
Last updated: 3 October 2026. Questions about this page: get in touch.
