Privacy Policy

Last updated: July 2025

Who we are

Funchal Tours is a brand of Potential Green LDA, a company registered in Portugal (NIF: PT518205061), operating under RNAAT n.º 970/2024. Our website is funchaltours.com.

This privacy policy explains what personal data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and applicable Portuguese law.

Data we collect

Booking enquiries and contact forms

When you submit a booking enquiry or contact form on our website, we collect:

  • Your name
  • Email address
  • Phone number (if provided)
  • Your message or enquiry details (tour preferences, dates, group size)

This data is collected to respond to your enquiry and, if you proceed, to fulfil your booking. The legal basis is the performance of a contract (or steps taken at your request before entering into one), under Article 6(1)(b) of the GDPR.

Email correspondence

If you email us directly at hi@go.funchaltours.com, we retain that correspondence to manage our relationship with you. We do not share it with third parties except as required by law.

Analytics

Our website uses Umami Analytics, a privacy-respecting analytics platform that does not use cookies or track you across other websites. It collects anonymised data including page views, referral sources, and device type to help us understand how visitors use the site. No personal data is stored by Umami.

We may also use Meta (Facebook) Pixel to measure the effectiveness of advertising campaigns. This may set a cookie on your device if you have consented to marketing cookies. See the cookies section below for details and how to opt out.

How we use your data

  • To respond to your enquiry and manage your booking
  • To send booking confirmations, reminders, or tour updates related to your reservation
  • To comply with legal obligations (for example, tax or tourism registration requirements)
  • To improve our website and services through anonymised analytics
  • To contact you about future tours or offers, only if you have given us consent to do so

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

Cookies

Cookies are small text files placed on your device by websites you visit. We use the following categories:

Strictly necessary

Essential for the website to function. These cannot be disabled. They include session cookies that remember your preferences during a visit (for example, your cookie consent choice).

Analytics

Umami Analytics does not use cookies. If enabled, Meta Pixel may set a cookie to measure advertising performance. This requires your consent.

Marketing

Meta Pixel cookies, when active, help us understand whether visitors who arrived via a Facebook or Instagram ad went on to make an enquiry. This only applies if you have accepted marketing cookies.

You can change your cookie preferences at any time using the cookie banner on this site, or by clearing cookies in your browser settings. Most browsers allow you to refuse cookies; however, some features of our website may not function correctly without them.

How long we keep your data

Enquiry data is retained for up to 2 years after your last interaction with us. Booking data is retained for 10 years to comply with Portuguese tax law. We delete or anonymise data once the retention period ends.

Your rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your data (the "right to be forgotten"), where legally permitted
  • Restrict how we process your data
  • Object to processing based on legitimate interests
  • Data portability: receive your data in a structured, machine-readable format
  • Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, email us at hi@go.funchaltours.com. We will respond within 30 days. If you believe we have not handled your data lawfully, you have the right to lodge a complaint with the CNPD (Comissão Nacional de Proteção de Dados), the Portuguese data protection authority at cnpd.pt.

Data security

We use industry-standard measures to protect your personal data against unauthorised access, disclosure, or loss. Our website is served over HTTPS. We review our security practices regularly.

Third-party services

We may use the following third-party services to operate the site and our business:

  • Umami Analytics (privacy-first analytics, no personal data stored)
  • Meta Pixel (advertising measurement, with your consent)
  • Stripe (payment processing for online bookings, when applicable)
  • Cloudflare (website infrastructure and DDoS protection)

Each of these providers has its own privacy policy. We only share the minimum data necessary for them to perform their service.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. Significant changes will be communicated via email if you are an active client.

Contact

For any privacy-related questions or requests:

Potential Green LDA · NIF: PT518205061 · RNAAT n.º 970/2024

See also our Terms and Conditions.