PRIVACY NOTICE

This notice covers what happens with your personal data when you use this website or ask us about a tour. We have kept it short and plain.

Who is responsible for your data

Guincho Adventours (VAT 508 592 917), Rua da Areia n.º 1306, Areia, 2750-095 Cascais, Portugal. For any privacy question, write to guinchoadventours@gmail.com.

What we collect

When you send a booking request

The Book and Enquire buttons open a short form. When you send it, we receive your name, email address, phone number (if you give one), the tour you asked about, your preferred date and time of day, your group size, and anything you wrote in the message. We also record the language of the page, which page and button you came from, and your answer if you choose to answer the short question shown after the form.

When you browse

The site is hosted on Vercel, which keeps standard server logs (IP address, browser type, page requested, referring page) for security and performance.

Visitor counts and page speed, without cookies

We use Vercel Web Analytics and Vercel Speed Insights to count visits and to measure how fast pages load. They set no cookies, do not follow you across other websites, and do not let us identify you. They run for every visitor.

Optional analytics cookies

If you accept the cookie prompt, we also load Google Analytics 4 and Microsoft Clarity, to see which sections and tours get clicked on and where visitors get stuck. Both set cookies. Clarity may record anonymised session replays; the form fields (name, email, phone, message) are masked and never appear in a recording. We use these to improve the site, not to build advertising profiles. If you reject the prompt, neither is used. You can change your choice at any time by clearing this site's cookies and reloading.

What we do with a booking request

• You receive an automatic email within a few seconds saying that your request arrived and repeating what you asked for. It is not a confirmation of the booking.
• Arlindo, who runs the tours, reads your request and replies to you personally, by email or on the phone number you gave.
• To answer faster, the text of your message, together with the tour, date and group size, is read by an AI service that suggests a draft answer. Your name, email address and phone number are not sent to it. Arlindo reads and can change every answer before it is sent.
• After the tour date, we record whether the tour took place and what was paid, for our accounts.

No decision about your booking is made automatically.

Why we are allowed to do this

• Your booking request and our reply — steps taken at your request before a contract, and performance of that contract (Article 6(1)(b) GDPR).
• Tax, insurance and tourism-registration records — legal obligation (Article 6(1)(c) GDPR).
• Server logs, cookieless visitor counts and page-speed measurement — our legitimate interest in keeping the site secure and working (Article 6(1)(f) GDPR).
• Google Analytics and Microsoft Clarity — only with your consent (Article 6(1)(a) GDPR).

Who receives your data

We do not sell or trade personal data. These companies and people process it for us:

• Vercel — hosts the website, keeps server logs, and provides the cookieless visitor counts and page-speed measurement.
• Google — your booking request is stored in a Google Sheets spreadsheet, and our mailbox is Gmail.
• Resend — delivers the email that carries your request to us, the automatic email to you, and our reply. Resend, Inc. is based in the United States.
• CallMeBot — relays a WhatsApp alert to us when a request arrives, so we can answer quickly. It receives your name, phone number, email address, tour, date, group size and message.
• Anthropic — its AI model, Claude, reads the text of your message to suggest a draft answer. Anthropic, PBC is based in the United States and does not use this text to train its models.
• Our website developer — builds and maintains this website and the booking system, and has access to booking requests for that purpose only.
• Google Analytics 4 — only if you consent. Processed by Google Ireland Limited.
• Microsoft Clarity — only if you consent. Processed by Microsoft Corporation.

Some of these companies are based in, or use servers in, the United States. Where personal data leaves the European Economic Area, we rely on the safeguards those companies provide, such as the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.

How long we keep it

• Requests that became a tour — kept for as long as Portuguese tax and accounting law requires.
• Requests that did not become a tour — 24 months from the date of the request. After that we delete your name, email address, phone number and message, and keep only anonymous figures (tour, date, group size).
• Server logs — rotated by Vercel on its standard schedule.
• Google Analytics data — 14 months.
• Microsoft Clarity — session recordings for 30 days; a small sample of recordings and the click and heatmap figures for up to 13 months.

Your rights

Under the GDPR you can ask us to:

• confirm what data we hold about you and give you a copy;
• correct anything that is wrong;
• delete your data;
• restrict or object to how we use it;
• withdraw your consent to analytics at any time.

Write to guinchoadventours@gmail.com and we will act on it within 30 days. You also have the right to complain to the Portuguese data-protection authority, the CNPD (cnpd.pt).

Contact

Guincho Adventours · RNAAT 78/2008 · guinchoadventours@gmail.com