Privacy policy

Effective date: [Insert Date]

At LisbonFlow, we are committed to protecting your privacy and ensuring that your personal data is handled securely and transparently. This Privacy Policy explains how we collect, use, and safeguard your information when you interact with us, whether by browsing our website, booking a boat tour, or contacting our team.

1.Who We Are

LisbonFlow is a family run tourism company based in Lisbon, Portugal, offering boat tours and private experiences on the Lisbon River (Tagus River).

Data Controller: LisbonFlow

Email: info@lisbonflow.com

2. What Personal Data We Collect

We may collect the following types of personal information:

  • Contact information (name, email, phone number)
  • Booking details (tour selected, number of people, special requests)
  • Payment information (processed securely by third-party providers)
  • Technical data (IP address, browser type, device information)
  • Cookies and usage data (see our Cookies Policy)

3. How We Use Your Information

We use your data to:

  • Process bookings and provide our services
  • Communicate with you about your reservation
  • Improve our website and user experience
  • Comply with legal obligations

We do not sell your personal information to third parties.

4. Legal Basis for Processing

We collect and process personal data based on:

  • Contractual necessity (to provide the service you requested)
  • Consent (for marketing or cookies, where required)
  • Legal compliance (e.g. accounting or tax obligations)

5. Data Sharing

We may share your data with:

  • Payment processors (e.g. Stripe, PayPal)
  • Booking platforms (e.g. Bókun, Get your Guide)
  • IT and analytics providers (e.g. Google Analytics)
  • Public authorities if required by law

All partners are GDPR-compliant.

6. Data Retention

We retain your data only as long as necessary to fulfill the purposes outlined above or as required by law (e.g. 6 years for accounting purposes).

7. Your Rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction or deletion of your data
  • Object to or restrict processing
  • Withdraw consent at any time (for consent-based data)
  • File a complaint with the Portuguese Data Protection Authority (CNPD)

8. Security Measures

We take reasonable and appropriate technical and organizational measures to protect your data against loss, misuse, or unauthorized access.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be published on this page with the new effective date.