Privacy Policy
Privacy Policy
This policy explains how we handle personal data in the context of accounts, bookings, payments, support, and operation of the platform.
1. Data controller
Nuno Miguel Martins Costa, tax ID 261009176, with address at Rua do Cabeço n4, Portugal, is the controller for personal data collected through the Portugal Retreats platform.
For privacy questions you can contact us at geral@portugalretreats.pt.
2. Data we process
We may process identification and contact data, account data, booking data, communication data, technical usage data, and, where applicable, data needed for payments, invoicing, business claims, disputes, and support.
The exact fields depend on which platform features are used by the client, provider, or admin.
3. Purposes and legal bases
We process data to create and manage accounts, process bookings, communicate about requests and reservations, operate payments, run dashboards, prevent fraud/abuse, answer support requests, and comply with legal obligations.
Depending on the context, the legal basis may be contract performance, pre-contractual steps, legal obligation, legitimate interests, or user consent.
4. Sharing with third parties
Data may be shared with service providers that help us operate the platform, including hosting/infrastructure, authentication, database, payments, transactional email, analytics, and abuse-prevention tools.
When a booking is made, relevant data is also shared with the listing provider so the service can be delivered.
5. Retention
We keep personal data only for as long as necessary for the purposes described above, to comply with legal obligations, manage disputes, prevent fraud, and defend legal rights.
Concrete retention periods may vary depending on the type of data and the contractual relationship involved.
6. Your rights
Where applicable, you may request access, rectification, erasure, restriction, objection, and portability of your personal data, and you may withdraw consent where processing relies on consent.
You may also lodge a complaint with the competent supervisory authority if you believe the processing breaches applicable law.
7. Cookies and tracking
Our use of cookies and similar technologies is described in the Cookie Policy. Strictly necessary cookies may be used without consent. Analytics and marketing tracking should only be activated after your explicit choice in the consent banner.