Privacy Policy
Last updated: September 2026
Who we are
Frontr is a service provided by CrossBorder Corporate Law LLP, trading as Smart Relocation, a UK limited liability partnership whose immigration work is carried out by lawyers based in Lisbon, Portugal, regulated by the Portuguese Bar Association. This policy explains how we collect, use, and protect your personal data when you use Frontr to apply for a Portuguese tax identification number (NIF).
What data we collect
Depending on your application, we collect: identification data (full name, nationality, passport or national ID number), contact data (email address, phone number), your proof of address, and, for minors, a birth certificate. Payments are processed by Stripe, our payment provider; we do not store your card details.
Why we collect it
The data collected is processed for the purposes of legal analysis, internal review, and the provision or preparation of legal services, including preparing your power of attorney and submitting your NIF application to the Portuguese Tax and Customs Authority (Finanças). We also use it to comply with anti-money laundering and tax legislation, and to meet the professional obligations that apply to the lawyers who carry out this work.
How your data is protected
The documents and personal data submitted through Frontr are transmitted via a secure, encrypted connection and are accessible solely to authorized personnel, in accordance with professional secrecy and confidentiality obligations.
Who we share it with
Personal data and documents are submitted to the Portuguese Tax and Customs Authority (Finanças) as necessary to process your NIF application, and may be shared with IT service providers bound by confidentiality obligations. They will not be disclosed to any other third party, including banks or other institutions, unless required by law, professional obligations, or with your prior consent. We do not sell or rent your data.
How long we keep it
In accordance with applicable Portuguese law, professional regulations governing the legal profession, and the GDPR, certain documents and personal data may be retained for legally mandated periods, generally up to seven years. Where no such obligation applies, data is retained only for as long as necessary to fulfil the purposes for which it was collected, then securely deleted or anonymized.
Your rights
Under the GDPR and Portuguese law, you have the right to access, rectify, restrict the processing of, or request the erasure of your personal data, the right to data portability, and the right to withdraw consent at any time. You also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese data protection authority. To exercise any of these rights, contact us at contact@smartrelocationlisbon.com.
Contact
For any questions regarding this policy or the processing of your personal data, contact CrossBorder Corporate Law LLP at contact@smartrelocationlisbon.com.
