Legal information

Privacy Policy

Last updated: 29 August 2026

We only collect what we need in order to reply to you. We do not sell or pass your information to third parties for marketing, and this website uses no advertising cookies and no traffic analytics.

What we collect

Only what you give us yourself when you fill in one of the forms on this site:

• Booking enquiry — name, email, phone, the house you are interested in, check-in and check-out dates, number of guests and whatever you write in the message.
• Event quote request — name, email, phone, type of event, number of guests, intended date and whatever you write in the message.

If you would rather reach us by phone, email or WhatsApp, we keep whatever that conversation contains. We collect no sensitive data, we build no profiles, and we make no automated decisions about you.

Why we use it, and on what basis

Purpose	Legal basis (GDPR)
Replying to your booking or quote request with availability and terms	Pre-contractual steps at your request — Art. 6(1)(b)
Managing your stay or event, should you go ahead with the booking	Performance of a contract — Art. 6(1)(b)
Meeting invoicing, tax and guest-registration obligations	Legal obligation — Art. 6(1)(c)

We do not send newsletters or promotional messages off the back of these forms. If we ever do, it will be with your express consent and with a way to opt out in every message.

Who we share it with

Your data stays with us. It is processed by service providers acting on our behalf and only for their specific role:

• Web3Forms — receives the form contents and forwards them to our inbox. It keeps no permanent copy of submissions. Privacy policy.
• Google (Gmail) — where we receive and store the messages.
• Vercel — hosts the website and, for security, logs technical access data (IP address, date and time, browser type), deleted after a few days. Privacy policy.
• Google Fonts — the site's typefaces load from Google servers, which involves your IP address being sent to them.

Some of these providers are based outside the European Economic Area. Where that is the case, the transfer relies on the European Commission's standard contractual clauses or on an adequacy decision. Beyond this, we disclose data to authorities only where the law requires it.

How long we keep it

• Enquiries that did not lead to a booking — up to 12 months after the last message, so we can pick the conversation back up if you return.
• Completed bookings — for the statutory retention periods for accounting and tax records, currently 10 years.
• Server technical logs — a few days, as part of hosting management.

Once those periods are over, the data is deleted.

Cookies

This site uses no tracking cookies, no advertising cookies and no visitor analytics. That is why you will not see a consent banner here — there is nothing to consent to.

Your rights

As the data subject, you can ask us at any time for:

• Access — to know what data of yours we hold and what we do with it.
• Rectification — to correct data that is wrong or incomplete.
• Erasure — to delete your data, where no legal duty requires us to keep it.
• Restriction of or objection to processing, in the cases the law provides for.
• Portability — to receive the data you gave us in an open format.

Just write to casascasaldocarvalhal@gmail.com. We reply within one month at the latest. If you feel we have not handled the matter properly, you may lodge a complaint with the Portuguese data protection authority, CNPD.

Security

The site is served over HTTPS only and form submissions are encrypted. Access to the messages is limited to those at Freitas Pimentel, Lda who handle bookings.

Changes to this policy

If we change the way we handle data — by adding a booking engine, for instance — we update this page along with the date at the top.