Privacy Policy

1. Data Controller

Na Luz de Portugal Unipessoal Lda, Rua Garrett, 1200-203 Lisboa, Portugal, NIPC 000 000 000, is the data controller responsible for personal data collected through this website and in the course of delivering services to clients and guests. You can reach our data protection contact at privacy@naluzdeportugal.pt.

2. Data We Collect

We collect contact details (name, email, phone), information you provide when enquiring about our services or making a booking, property preferences, payment and invoicing data, government identification required under Portuguese short-term-rental law, and website usage data through cookies and analytics.

3. Legal Basis

Processing is based on the performance of a contract (GDPR Art. 6(1)(b)), compliance with legal obligations under Portuguese tax and hospitality law (Art. 6(1)(c)), our legitimate interest in operating and improving the business (Art. 6(1)(f)), and, where applicable, your explicit consent (Art. 6(1)(a)).

4. Retention

Contract-related data is kept for the duration of the contractual relationship plus ten years, as required by Portuguese accounting and tax regulations. Website analytics and enquiry data unrelated to a contract are kept for no longer than 24 months.

5. Your Rights

You have the right to access, rectify, erase or restrict the processing of your personal data, to data portability, and to object to processing based on our legitimate interest. You may also lodge a complaint with the Portuguese data protection authority (CNPD) at www.cnpd.pt.

6. Processors & Transfers

We rely on reputable processors for hosting, analytics, email, payments and booking-channel distribution. Where data is transferred outside the European Economic Area, we rely on Standard Contractual Clauses or equivalent safeguards.

7. Cookies

This website uses strictly necessary cookies by default and, with your consent, analytics cookies. You can withdraw or modify cookie consent at any time via the cookie banner or your browser settings.