Privacy Policy
What we collect when you book, why we collect it, who we share it with, and how to get it back or have it deleted.
Last updated: 9 September 2026
This policy explains what personal data African Lisbon Tour collects when you book a tour, contact us, subscribe to our newsletter or use the chat assistant on this website, why we collect it, who we share it with and what rights you have over it. It applies to africanlisbontour.com.
Who is responsible for your data
African Lisbon Tour, Lisbon, Portugal, is the data controller.
Email: info@africanlisbontour.com
Phone and WhatsApp: +351 932 273 536
What we collect, and why
| What | When | Why (legal basis) |
|---|---|---|
| Name, email address, phone number, preferred contact method | When you book a tour or send an inquiry | To perform our contract with you: to hold your place, send your confirmation and reach you if the tour changes |
| Number of guests, names of people in your party, tour date and time, and any notes you add (for example dietary preferences or accessibility needs) | When you book | To run the tour you booked, and to cater the optional dinner correctly |
| Payment confirmation: amount, currency, payment method, and the transaction reference from Stripe or PayPal | When you pay | To perform the contract and to meet our accounting and tax obligations |
| Your email address alone | If you subscribe to the newsletter | Your consent, which you can withdraw at any time |
| The messages you type into the chat assistant, plus a random session identifier and the page you were on | When you use the chat widget | Our legitimate interest in answering questions and improving the assistant |
| Anonymous traffic counts: which pages were viewed, which site sent you here, your browser language, and whether you are on a phone or a computer. These are added to a daily total. Nothing is stored about you individually. | On every page view | Our legitimate interest in knowing which pages are useful. No personal data is involved, so there is nothing here to consent to. |
| Technical logs: IP address, timestamps and error traces | Automatically, on every request | Our legitimate interest in keeping the site secure and working |
We never see your card details
Card payments are handled entirely by Stripe, and PayPal payments by PayPal. Your card number never reaches our website or our servers. We receive only a confirmation that the payment succeeded, the amount, and a reference we can use to issue a refund.
Who we share it with
We do not sell your personal data and we do not share it for anyone else's marketing. We use a small number of service providers who process data on our instructions:
| Provider | What they do for us |
|---|---|
| Google (Firebase Hosting, Cloud Firestore, Cloud Functions) | Hosts this website and stores bookings and inquiries |
| Stripe | Processes card payments and refunds |
| PayPal | Processes PayPal payments and refunds |
| Twilio SendGrid | Delivers your booking confirmation and reminder emails |
| OpenRouter | Runs the language model behind the chat assistant |
Some of these providers are based outside the European Economic Area, mainly in the United States. Where that is the case, transfers are covered by the European Commission's Standard Contractual Clauses or by an adequacy decision such as the EU-US Data Privacy Framework.
We will also disclose data where we are legally required to, for example to tax authorities or in response to a lawful request.
How long we keep it
- Booking and payment records: retained while your booking is active and then for the period Portuguese tax law requires us to keep accounting records, which is currently ten years.
- Inquiries and contact form messages: up to 24 months after our last exchange with you.
- Newsletter subscription: until you unsubscribe.
- Chat assistant conversations: up to 12 months, and only the most recent 100 messages of any one conversation are stored.
- Traffic counts: kept indefinitely, because they are only numbers. There is no personal data in them to delete.
- Technical and email delivery logs: automatically deleted on a rolling schedule, normally within 90 days.
Your rights
Under the General Data Protection Regulation you can ask us to:
- give you a copy of the personal data we hold about you;
- correct anything that is wrong or incomplete;
- delete your data, where we no longer need it for the tour or for our legal obligations;
- restrict or object to how we use it;
- send your data to you or another provider in a portable format;
- withdraw consent you have given, for example to marketing emails or analytics cookies, without affecting anything we did before you withdrew it.
Email info@africanlisbontour.com and we will respond within one month. Every marketing email we send also contains a one click unsubscribe link.
If you think we have handled your data badly, you can complain to the Portuguese data protection authority, the Comissao Nacional de Proteccao de Dados (CNPD), cnpd.pt, or to the supervisory authority in the EU country where you live.
Cookies
This site sets no advertising cookies, no tracking cookies and no analytics cookies, which is why you have not been shown a cookie banner. There is nothing optional to agree to.
The only thing stored in your browser is a random session identifier the chat assistant needs so it can follow one conversation, and it is discarded when you clear your browser data. It is strictly necessary for that feature to work.
How we measure traffic instead
We count page views on our own servers rather than handing your visit to a third party. Each view adds one to a daily tally: the page, the site that referred you, your browser language and whether you are on a phone. That is the whole record. We do not store your IP address, we do not set an identifier, and we cannot tell one visitor from another or link two visits together. There is no analytics provider and nothing leaves our own systems.
Children
This website is not directed at children under 16 and we do not knowingly collect their data. Children are welcome on the tour when accompanied by an adult who makes the booking.
Changes to this policy
If we change this policy we will update the date at the top of the page. If the change is significant we will say so on the site.