EXPANSION GROUP
Privacy & cookies
Updated 7 November 2026
Data controller
DÉCADA FILANTROPA UNIPESSOAL LDA · NIPC 519303296 · Avenida François Mitterrand 42 - 2 Esquerdo, 1950-354 Lisboa. General enquiries, brand partnerships and privacy: contact@expansiongroup.eu. Franchising: sales@expansiongroup.eu.
Information covered
Name, email, enquiry type and project description; phone, company or brand, city and budget only if you provide them. This also includes messages and project information you send during follow-up. Budget ranges are not brand quotations.
Purposes and legal basis
We review and respond to your request and follow up on the franchising or brand partnership opportunity you asked about. This business contact follows your initiative and is based on our legitimate interest in managing these business relationships under GDPR Article 6(1)(f). It does not automatically subscribe you to advertising, promotions or general campaigns.
Sending your enquiry
The form prepares an email in your browser without saving it in a website database. It is sent only when you confirm in your email app. Marked fields are needed to prepare a response; other fields are optional. You may also email us directly.
Recipients
Internal staff responsible for online business access enquiries according to their duties. Company email uses Microsoft 365. Website hosting and security use Cloudflare. Enquiries are not automatically forwarded to brands.
Sharing with brands
Before sharing with CAKEME, Papa Johns or another partner, we explain the purpose, recipient and relevant data and request your specific consent. You may withdraw it for future sharing at contact@expansiongroup.eu without affecting earlier lawful processing.
Retention
Enquiries that do not progress to a contract are deleted 180 days after the last substantive project-related communication. Records that progress to a contract are managed separately according to contract performance and applicable retention obligations.
Your rights
You may request access, correction, erasure, restriction and, where the GDPR provides for it, portability. You may object to processing based on legitimate interests on grounds relating to your situation. Contact contact@expansiongroup.eu. You may complain to the CNPD at www.cnpd.pt.
Cookies and browser storage
This version uses no advertising or audience analytics cookies. Confirming necessary settings saves only your notice choice and its date in browser local storage for 180 days. Closing without saving does not persist a choice. Reopen the notice using “Cookie settings”. This choice is separate from enquiry handling and sharing with brands.
Technical data and international services
Website delivery and security may involve IP addresses and technical request data processed by the host. Microsoft 365 and Cloudflare may involve processing outside the EEA. Applicable service terms and transfer mechanisms, including standard contractual clauses where relevant, govern that processing. Ask our privacy contact for information on relevant safeguards.
Decisions and imagery
The form does not approve franchise applications or make automated franchise decisions. CAKEME images show brand material in Spain; Papa Johns images come from the brand in Portugal. The atmosphere photograph does not identify a venue operated by Expansion Group.