Privacy

iva.pt is a free service provided by Sooma.com Web Services, Lda., with registered office in Matosinhos, Portugal.

What data we process

To check a VAT number, the data you enter (the VAT number checked, your own VAT number in a qualified check and, if you provide them, the expected name and address) is sent to the European Commission's VIES system. No account or email address is needed.

In a qualified check, your own VAT number is confirmed before the query: in VIES and, if it is not there, at LEI.PT, which receives only the tax number.

We store the result of each check and the data of each report issued, so that its authenticity can later be verified at iva.pt/en/verify. Reports can only be looked up by someone who knows their SHA-256 fingerprint.

If you ask for the report by email, we store the address you give and use it only to send you the confirmation and the report. The address is recorded in the report as its recipient. Emails are sent through the Duo platform.

When the Portuguese VAT number of a legal person (a company or other entity) is confirmed as active in VIES — whether the number checked or the requester's — the public name and address returned by VIES are added to the entity database of lei.pt, another Sooma service. Numbers of individuals (including sole traders) are not added.

Checks made through the public API and the MCP server are not stored, apart from technical logs.

To prevent abuse we temporarily keep a hashed version of the requesting IP address, deleted after 24 hours.

Cookies

iva.pt uses no tracking cookies and no advertising tools.

Contact

To exercise your rights under the GDPR or for any question, contact support@sooma.com.

The Portuguese version of this notice is at iva.pt/privacidade.