This notice covers what happens with your personal data when you use this website or book a tour with us. Kept short on purpose — a landing page and an email inbox don't generate much data to talk about.
Who is the data controller
Guincho Adventours, based at Rua da Areia n.º 1306, Areia, 2750-095 Cascais, Portugal. For any privacy question, write to guinchoadventours@gmail.com.
What we collect
When you book
The Book / Enquire buttons open your email app with a pre-filled template. When you send it, we receive: your name, email address, phone number (if you type one), the tour you asked about, and anything else you wrote in the message. That's the same information you would give us over the phone.
When you browse
The site is hosted on Vercel, which keeps standard server logs (IP address, browser type, page requested, referrer) for security and performance. These logs are not used to identify individual visitors.
Optional: analytics cookies
If you accept the cookie prompt, we load Google Analytics 4 (GA4) and Microsoft Clarity to see which sections and tours get clicked on and where visitors get stuck. Both set a small set of cookies and send aggregated data to their providers. Clarity may record anonymized session replays; input fields (name, email, phone, notes) are masked by default and never stored in the recordings. We use both tools to improve the site — not to build advertising profiles.
Rejecting the prompt turns analytics off completely. You can change your choice any time by clearing the site's cookies for this domain and reloading.
Why we collect it
- Booking correspondence — to reply to your enquiry and confirm your tour (contract performance under Article 6(1)(b) GDPR).
- Legal obligations — insurance, tourism registration, and tax records (Article 6(1)(c) GDPR).
- Improving the site — analytics only when you consent (Article 6(1)(a) GDPR).
Who we share it with
Your enquiry email lives in our inbox and nowhere else. We do not sell or trade personal data. We use the following processors:
- Vercel (hosting) — serves the website and stores server logs.
- Email provider — [TODO: name the provider, e.g. Gmail / Google Workspace / other].
- Google Analytics 4 — only when you consent. Data is processed by Google Ireland Limited.
- Microsoft Clarity — only when you consent. Anonymized session replays and heatmaps; input fields are masked. Data is processed by Microsoft Corporation (with EU data-transfer safeguards).
How long we keep it
- Booking emails: kept as long as needed for the tour and afterwards for tax / accounting purposes as required by Portuguese law.
- Server logs: rotated by Vercel on their standard schedule.
- Analytics data: kept in GA4 for [TODO: retention period, default 14 months].
Your rights
Under GDPR you can ask us to:
- Confirm what data we hold about you and get a copy.
- Correct anything that's wrong.
- Delete your data (right to be forgotten).
- Restrict or object to processing.
- Withdraw consent for analytics at any time.
Write to guinchoadventours@gmail.comand we'll act on it within 30 days. You also have the right to complain to the Portuguese data-protection authority (CNPD).
Contact
Guincho Adventours · RNAAT 78/2008 · guinchoadventours@gmail.com