This policy explains what personal data we collect when you use this website or contact us, why we use it and the rights you have under the GDPR and the LGPD.
Who we are
This website is operated by Egaming Services, which offers its corporate services under the brand Ecorporate Services (“Ecorporate Services”, “we”, “us”).
- Registered address: Avenida José Malhoa 14, 3.º andar, 1070-158 Lisbon, Portugal
- General enquiries: contact@ecorporateservices.com
- Quotes and new clients: sales@ecorporateservices.com
- Privacy and data protection: compliance@ecorporateservices.com
We are the controller of the personal data described in this policy under the EU General Data Protection Regulation (GDPR) and the controlador under the Brazilian General Data Protection Law (Lei n.º 13.709/2018, LGPD). For LGPD purposes, our data protection contact (encarregado) can be reached at compliance@ecorporateservices.com.
Personal data we collect
Data you give us
- Quote and contact requests: first and last name, company email, the service and jurisdiction you are interested in and any details you choose to add.
- Messages: what you send us by email, WhatsApp or phone, including your number and the content of the conversation.
- Client onboarding (KYC): if you become a client, identification documents, proof of address, information about your business, ownership structure, source of funds and other information required by anti-money laundering rules. This data is collected through our secure onboarding process, not through this website's forms.
Data collected automatically
- Technical data: IP address, browser and device type, pages visited and the date and time of your visit, processed by our hosting and security providers to deliver and protect the website.
- Cookies and similar technologies: only strictly necessary cookies are used without your consent. Analytics and marketing cookies are used only if you accept them. See our Cookie Policy.
We do not ask for special categories of personal data (such as health or political opinions) through this website. Please do not include them in your messages.
Why we use your data and our legal basis
| Purpose | Legal basis (GDPR) | Legal basis (LGPD) |
|---|---|---|
| Replying to your request and preparing a quote | Steps at your request before entering into a contract (Art. 6(1)(b)) | Preliminary procedures related to a contract (Art. 7, V) |
| Providing our services once you are a client | Performance of a contract (Art. 6(1)(b)) | Performance of a contract (Art. 7, V) |
| Identity checks, KYC/AML and record keeping | Legal obligation (Art. 6(1)(c)) | Legal or regulatory obligation (Art. 7, II) |
| Following up on business enquiries and managing our client relationships | Legitimate interests (Art. 6(1)(f)) | Legitimate interests (Art. 7, IX) |
| Website security, fraud prevention and keeping the site running | Legitimate interests (Art. 6(1)(f)) | Legitimate interests (Art. 7, IX) |
| Website analytics and advertising measurement (cookies) | Consent (Art. 6(1)(a)) | Consent (Art. 7, I) |
| Sending newsletters or marketing emails | Consent (Art. 6(1)(a)) | Consent (Art. 7, I) |
| Establishing, exercising or defending legal claims | Legitimate interests (Art. 6(1)(f)) | Regular exercise of rights (Art. 7, VI) |
Where we rely on consent, you can withdraw it at any time without affecting what was done before. Where we rely on legitimate interests, we have balanced them against your rights, and you can object as described below.
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
International transfers
Some of the providers above, and some of the partners in the jurisdictions you choose, are located outside the European Economic Area (EEA) or Brazil. When we transfer personal data outside the EEA, we rely on an adequacy decision of the European Commission (including the EU–US Data Privacy Framework for certified US companies) or on the Standard Contractual Clauses approved by the Commission, with additional safeguards where needed. For transfers from Brazil, we follow Article 33 of the LGPD, using the standard contractual clauses approved by the ANPD or another mechanism it allows.
Where the transfer is necessary to provide the service you asked for (for example, incorporating a company in a jurisdiction outside the EEA), it takes place on that basis.
You can ask us for more information on the safeguards used at compliance@ecorporateservices.com.
How long we keep your data
- Enquiries that do not become clients: up to 24 months after our last contact.
- Client and KYC/AML records: for the duration of the relationship and afterwards for the period required by anti-money laundering legislation (currently seven years under Portuguese Law n.º 83/2017), or longer where another law requires it.
- Accounting and tax records: for the period required by tax law.
- Marketing consent: until you withdraw it or stop engaging with our communications.
- Cookies: for the periods listed in our Cookie Policy.
After these periods, we delete or anonymise the data.
Your rights
Depending on the law that applies to you, you have the right to:
- access your personal data and receive a copy;
- correct inaccurate or incomplete data;
- have your data deleted, anonymised or blocked when it is no longer needed or processed unlawfully;
- restrict or object to processing, including processing based on legitimate interests and direct marketing;
- receive your data in a portable format;
- withdraw your consent at any time;
- under the LGPD, confirm whether we process your data, know which entities we share it with, and be informed about the consequences of not giving consent.
To exercise your rights, email compliance@ecorporateservices.com. We may ask you to confirm your identity. We reply within one month (GDPR) or within the deadlines set by the LGPD. Some rights are limited by law, for example we cannot delete data we must keep under anti-money laundering rules.
You can also complain to a supervisory authority. In Portugal this is the Comissão Nacional de Proteção de Dados (cnpd.pt); you can also contact the authority of the EU country where you live or work. In Brazil it is the Autoridade Nacional de Proteção de Dados (gov.br/anpd).
How we protect your data
We use technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS), access controls, confidentiality obligations for our staff and partners, and providers that offer recognised security certifications. No transmission over the internet is completely secure, so please use our secure onboarding process, not email or WhatsApp, to send identity documents.
Children
Our services are for businesses and adults. We do not knowingly collect personal data from anyone under 18.
Changes to this policy
We may update this policy to reflect changes to our services or the law. The date at the top shows the latest version. If the changes are significant, we will highlight them on this website.
Contact
Questions about this policy or your personal data: compliance@ecorporateservices.com, or by post to Egaming Services, Avenida José Malhoa 14, 3.º andar, 1070-158 Lisbon, Portugal.