Legal

Privacy Policy

Last updated: March 2026

IHD Travel Lda ("IHD Travel", "we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information in accordance with the General Data Protection Regulation (GDPR – Regulation EU 2016/679) and applicable Portuguese law.

1. Data Controller

The data controller responsible for your personal data is:

IHD Travel Lda

NIF: 518 018 091

R. Alfredo Cunha 300, 1º Dtº FT, 4450-021 Matosinhos, Portugal

Email: geral@ihdtravel.com

Website: ihdtravel.com

RNAVT: 11687 | RNAAT: 420/2024

2. Personal Data We Collect

We collect the following categories of personal data:

  • Contact information: Full name, email address, and phone number, provided through our contact form or booking requests.
  • Inquiry details: Subject, message content, and tour or service interest submitted via our contact form.
  • Communication records: Messages exchanged via email, our website, or WhatsApp for the purpose of booking coordination and customer support.
  • Booking data: Travel dates, number of guests, pickup and drop-off locations, and special requests related to tours or transfers.

We do not collect sensitive personal data (e.g. health, financial, or biometric data) unless explicitly required and consented to for specific accessibility needs.

3. Purpose and Legal Basis for Processing

We process your personal data for the following purposes and on the following legal bases:

Tour inquiries and bookings

Performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR)

Customer communication and support

Legitimate interest (Art. 6(1)(f) GDPR) — ensuring quality service delivery

Sending booking confirmations and updates

Performance of a contract (Art. 6(1)(b) GDPR)

Contact form submissions

Consent (Art. 6(1)(a) GDPR) — provided via checkbox at submission

Compliance with legal obligations

Legal obligation (Art. 6(1)(c) GDPR)

4. Data Retention

We retain your personal data only for as long as necessary for the purposes described above:

  • Booking and transaction records: Retained for 10 years in accordance with Portuguese commercial and tax law.
  • Contact form inquiries (no booking made): Deleted within 12 months of your last interaction.
  • Communication records (email, WhatsApp): Retained for up to 2 years for customer service purposes, then deleted.

5. Sharing of Personal Data

We may share your personal data with trusted third parties strictly when necessary to deliver our services:

  • Transport providers and drivers: For the purpose of executing confirmed bookings (name, date, time, pickup location).
  • Partner venues (wineries, hotels, restaurants): Where included in tour itineraries, limited to guest count and visit date.
  • IT and platform service providers: Hosting, CRM, and communication tools operating under appropriate data processing agreements.

We do not sell, rent, or disclose your personal data to any third parties for marketing or commercial purposes.

6. International Data Transfers

We use WhatsApp (operated by Meta Platforms, Inc., USA) for customer communication. This involves the transfer of personal data outside the European Economic Area (EEA). Meta relies on Standard Contractual Clauses (SCCs) approved by the European Commission as a safeguard for such transfers.

Where other international transfers occur, we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR.

7. Your Rights Under GDPR

Under the GDPR, you have the following rights in relation to your personal data:

  • Right of access: Request a copy of the personal data we hold about you.
  • Right to rectification: Request correction of inaccurate or incomplete data.
  • Right to erasure: Request deletion of your data where it is no longer necessary or you withdraw consent.
  • Right to restriction: Request that we limit the processing of your data in certain circumstances.
  • Right to data portability: Receive your data in a structured, machine-readable format.
  • Right to object: Object to processing based on legitimate interests.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at geral@ihdtravel.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Portuguese data protection authority: CNPD (Comissão Nacional de Proteção de Dados) CNPD (Comissão Nacional de Proteção de Dados)www.cnpd.pt.

8. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, or disclosure. Access to personal data is restricted to authorised personnel only, and all third-party processors are required to maintain equivalent security standards.

9. Cookies

Our website uses only essential cookies necessary for its operation. We do not use analytics, tracking, or marketing cookies. For full details, please refer to our Cookie Policy. Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be published on our website with a revised date. We encourage you to review this page periodically.

11. Contact Us

For any questions or concerns regarding this Privacy Policy or your personal data, please contact us:

IHD Travel Lda

R. Alfredo Cunha 300, 1º Dtº FT, 4450-021 Matosinhos, Portugal

Email: geral@ihdtravel.com