Privacy & Cookie Policy

This policy explains what personal data we collect when you use this website or book a tour, why we collect it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR) and Portuguese data-protection law.

Who we are

This website and the tours booked through it are operated by Fernandes & Sampaio Investments, LDA (“Private Tours PT”), a company registered in Portugal under NIPC 518603504. We are the data controller for the personal data described below.

For any privacy request, contact us at tours@privatetourspt.com.

What we collect

• Booking details — your name, email, phone/WhatsApp number, the date(s) of your tour, the destinations you choose, group size and any notes you send us.
• Payment — card payments are processed by Stripe. We never see or store your full card number; we receive only a confirmation and the amount.
• Messages — anything you send us by email or WhatsApp.
• Analytics — only if you accept analytics cookies (see “Cookies” below), anonymised usage data such as pages viewed and approximate region.

Why we use it, and our legal basis

• To provide your tour (confirm and run your booking, contact you about it) — performance of a contract.
• To take payment — performance of a contract.
• To keep records required by law (e.g. invoicing) — legal obligation.
• To understand and improve the website via analytics — only with your consent.

Who we share it with

We do not sell your data. We share it only with the service providers that make the booking work, each acting as our processor:

• Stripe — payment processing.
• Resend — sending booking confirmation emails.
• Vercel — website hosting.
• Mapbox — the interactive map.
• Google Analytics — website analytics, only if you consent.

Some of these providers may process data outside the EU; where they do, they rely on safeguards approved under GDPR (such as Standard Contractual Clauses).

How long we keep it

We keep booking and payment records for as long as needed to provide the service and to meet our legal and accounting obligations, and then delete or anonymise them. Analytics data is retained only for the period configured in Google Analytics.

Cookies

Cookies are small files stored on your device. We use two kinds:

• Strictly necessary — needed for the site and booking to work (for example, remembering your in-progress booking, or keeping a staff member signed in to the admin area). These do not require consent.
• Analytics — set by Google Analytics to measure how the site is used. These are off by default and load only after you choose “Accept” in the cookie banner. Choosing “Reject” keeps them off.

You can change your choice at any time using the “Cookie settings” link in the footer, or by clearing this site’s data in your browser.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have it corrected if it is wrong;
• have it deleted;
• restrict or object to how we use it;
• receive a copy in a portable format;
• withdraw consent at any time (for anything based on consent).

To exercise any of these, email tours@privatetourspt.com. You also have the right to complain to the Portuguese supervisory authority, the CNPD.

Changes

We may update this policy as the service evolves. The date at the top shows when it was last changed.