My IMOJAStart selling
Sell

Legal

Privacy notice

Last updated 31 July 2026.

Controller and privacy contact

SONHESQUEMA, LDA, NIPC 516 360 418, Rua São Francisco Sales, 16-A, 1250-231 Lisboa, Portugal, operates IMOJA and is the controller for the processing described here. Send a privacy request through the IMOJA contact form or by post to that address, marked “Privacy”.

Why we process information

Depending on the stage and purpose, processing is based on:

  • steps requested before a possible contract, including reviewing an enquiry or initial Property File;
  • performance of an agreement if the client later appoints IMOJA;
  • legal obligations applying to real-estate mediation, accounting, tax, consumer protection and anti-money-laundering controls;
  • legitimate interests in securing the service, preventing abuse, attributing enquiries, keeping an auditable client record and improving operations, balanced against the individual’s rights;
  • consent only where it is specifically requested for an optional purpose. Consent can be withdrawn without affecting earlier lawful processing.

Enquiries and initial Property Files

An enquiry may contain contact details, service interest, property area and the message supplied. An initial Property File may also hold the selected property address, map reference, property characteristics, preferred selling route, timing and notes. We use these data to provide the requested initial review and communicate the next step.

The current initial Property File is accessed through an essential private browser-session token with a maximum lifetime of 180 days. It is not yet a verified operational account. Do not enter or send identity, bank, anti-money-laundering or other sensitive documents in the public form.

Source and campaign information

The referring page, campaign parameters such as UTM values and an advertising click identifier may be recorded with an enquiry. They are used to understand which campaign produced the request, prevent duplicate or abusive submissions and measure service acquisition. They are not used to make an automated decision about whether IMOJA accepts a property or client.

Address search and Google Maps

The Property File address step may load Google Maps Platform to offer suggestions and allow pin confirmation. Search text and map interactions needed for that feature may therefore be processed by Google. The selected address, Google place identifier and coordinates can become part of the initial Property File so IMOJA can identify the property. Stored precise coordinates are cleared after 30 days; the selected address may remain while the Property File is active.

Google acts under its own Google Maps End User Terms and Privacy Policy. Manual address entry remains available if the map service is not configured or cannot be used.

Property marketing and buyer activity

After the applicable service agreement and any required mediation appointment, approved property information and photographs may be supplied to the portals and marketing channels named in the signed channel plan. Potential-buyer contact details, enquiry content, viewing requests, feedback and offers may be received through those channels and recorded so IMOJA can coordinate the instruction and report relevant activity to the owner.

My IMOJA displays only information available to IMOJA through its own systems, an authorised connection or a verified report. The public listing never exposes the seller’s private Property File.

Contracts, identity and protected documents

If a client proceeds, additional ownership, authority, identity, anti-money-laundering, agreement, signature-certificate, timestamp and delivery information may be required. Those data are collected only through the protected operational process after the applicable provider, purpose and retention information have been supplied. They are not requested through the initial public form.

Payments and billing

When a paid service is activated, the designated payment provider processes payment details under its own privacy information. IMOJA receives only the information needed to confirm and reconcile the payment, issue an invoice, process any applicable refund and comply with accounting, tax and consumer-protection obligations. This can include the amount, payment status, transaction reference and limited billing details. IMOJA does not receive or store full payment-card details.

Recipients and international transfers

Access is limited to authorised IMOJA personnel and providers needed for hosting, security, communication, address search, authorised portal publication, electronic signature and the requested service. Independent lawyers, solicitors, credit intermediaries or technical professionals receive information only when required and under their own professional role. Where a provider processes personal data outside the EEA, IMOJA uses an applicable adequacy decision, contractual clauses or another lawful transfer safeguard.

Retention

Initial enquiries and Property Files that do not proceed are kept for no longer than 12 months after the last meaningful activity, unless a shorter request can be honoured or a legal claim requires longer. Essential browser sessions expire after no more than 180 days and precise map coordinates are cleared after 30 days. Contract, accounting, tax, mediation and anti-money-laundering records are kept for the applicable statutory period. Data are then deleted or irreversibly anonymised.

AI and automated decisions

AI may assist organisation, drafting and routine analysis, but IMOJA does not use the public form to make a solely automated decision with legal or similarly significant effect. A team member remains responsible for client-facing review and decisions.

Your rights

Depending on the processing, you may request access, correction, deletion, restriction, portability or object to processing based on legitimate interests. You may withdraw an optional consent at any time. Identity may need to be verified before a rights request is completed.

You may also complain to Portugal’s data-protection authority, the Comissão Nacional de Proteção de Dados (CNPD). The current version and update date of this notice appear above.