Legal

Privacy Policy

Effective date: 1 November 2026

1. Who we are

MARSF Serviços is the controller of the personal data described in this policy. Confidentiality is a core part of how we work: we never publish or sell client data, and we sign an NDA once we receive your passport or company documents.

2. Data we collect

• Contact form: name, email, phone number, the service you are interested in and your comments.
• Guide request: your email address.
• Messengers and email: your phone number, name and anything you choose to send us via WhatsApp, Telegram or email.
• Client engagements: identity and company documents (e.g. passport, articles of association) and other information needed to provide the service you request.
• Technical data: basic, aggregated visit statistics collected by our website platform (pages viewed, device type, approximate location).

3. Why we use it and on what basis

• To reply to your enquiry and prepare a proposal — your consent and steps taken at your request before a contract.
• To send you the free guide you requested — your consent.
• To provide our services and communicate with authorities on your behalf — performance of our contract with you.
• To meet legal, accounting and anti-money-laundering obligations — legal obligation.
• To keep the website secure and understand how it is used — our legitimate interest.

We do not use your data for automated decision-making and we do not sell it to anyone.

4. Who we share it with

• Service providers that host our website and forms (Tilda Publishing) and our email and file storage (Google), acting on our instructions.
• Public authorities in São Tomé and Príncipe (e.g. the Guiché Único, immigration or licensing bodies) — only when needed for your application and with your instruction.
• Professional advisers (lawyers, accountants, notaries) bound by confidentiality, when your case requires it.

Some providers store data on servers outside São Tomé and Príncipe (for example in the EU or the USA). We use reputable providers with appropriate security safeguards.

5. How long we keep it

Enquiries that do not lead to an engagement are deleted within 24 months. Guide requests are kept until you unsubscribe or ask us to delete them. Client files are kept for as long as required by applicable law (for example, accounting and registry rules) and then securely deleted.

6. Your rights

You may at any time ask us to access, correct or delete your data, to restrict or object to its use, to receive a copy in a portable format, or withdraw your consent (this does not affect processing already carried out). Write to marsf.stp@gmail.com — we reply within 30 days.

You also have the right to complain to the data protection authority of São Tomé and Príncipe (Agência Nacional de Proteção de Dados Pessoais, under Law No. 3/2016) or, if you live in the European Union, to your local supervisory authority under the GDPR.

7. Security

Access to your file is limited to the team members working on your case. Documents are exchanged through private channels, and we apply technical and organisational measures to protect your data against loss and unauthorised access.

8. Cookies

Our website uses only technical cookies needed for it to work and anonymous visit statistics. We do not use advertising cookies. You can block or delete cookies in your browser settings.

9. Children

Our services are intended for adults. We do not knowingly collect data from children, except data about family members that a client provides for a residence or citizenship application.

10. Changes to this policy

We may update this policy. The current version is always published on this page with its effective date.