Privacy Policy

1. Data controller

Douro Guide (douroguide.com) is the controller of your personal data under the GDPR.

2. Data collected

• Name and email (bookings and newsletter)
• Phone number (optional)
• Payment data (processed by Stripe — we do not store card details)
• Browsing data (technical and analytics cookies)

3. Purpose

Your data is used to process bookings, send booking communications, and improve our services.

4. Legal basis

Contract performance (bookings), consent (newsletter and non-essential cookies), and legitimate interest (security).

5. Data sharing

We do not sell data. We share only with Stripe (payments) and operators (booking confirmation).

6. Retention

Booking data retained for 5 years. Newsletter data deleted after unsubscribing.

7. Your rights

You have the right to access, rectify, erase, and port your data. Contact: privacy@douroguide.com

8. Complaints

You may contact the CNPD at www.cnpd.pt.