Contact
Privacy Policy

Privacy Policy

This Privacy Policy explains how Heritage Trails processes personal data when you use the website, make an enquiry, or book a guided culinary or market experience.

Terms of Service Contact
Data collected only as described in this policy
Your rights and options are detailed below
Questions handled via our contact channel
01 · Purpose

How We Use Data

We use personal data to respond to enquiries, manage date and group requests, collect dietary information, confirm venue availability, arrange routes and tastings, process booking payments, coordinate meeting point check-in, deliver guided tasting walks, and provide post-tour recommendations where relevant. We also use data to operate the website, maintain records, improve service administration, and meet legal, tax, and security obligations.

We process data only for booking, delivery, support, and compliance purposes.
02 · Sharing

Service Partners

We may share personal data with service providers that support website hosting, payment processing, communications, booking administration, and technical maintenance. Where a tasting venue, market vendor, or other operational partner needs information to confirm availability or deliver part of the experience, we share only the details necessary for that purpose. These recipients are expected to handle data under appropriate confidentiality and security obligations.

Operational partners receive only the information needed for their role.
03 · Legal basis

Legal Disclosure

We may disclose personal data to public authorities, regulators, courts, or other parties when necessary to comply with legal obligations, respond to lawful requests, protect our rights, or establish, exercise, or defend legal claims. We may also share information where disclosure is needed to prevent fraud or address security issues.

Disclosure may be required where law, court order, or public authority requests apply.

Contact Details

Email contact
feedback@examplelorryfish.click
Telephone
+351 915 407 679
Postal address
Rua António Granjo 6, 3000 Coimbra
Privacy contact

Use the contact details below for privacy questions or requests relating to this policy.

Contact Page
01

Data We Collect

We may process identification and contact details, booking and group information, dietary preferences or restrictions you choose to provide, payment-related records, meeting point and attendance details, and technical data such as device and browser information, log data, and cookie identifiers. We do not seek to collect more data than is needed for the requested tour or for the operation of the website.

The data we collect depends on booking, communication, and website use.
02

How We Collect Data

We receive personal data from you when you submit a consultation request, contact us by email or phone, share dietary or route preferences, complete payment steps, or communicate with us about a booking. We may also obtain limited technical data automatically when you visit the website or interact with its pages.

Most information comes directly from the user during booking or enquiry steps.
03

Cookie Types

The website may use essential cookies to support core functions, preference cookies to remember selected settings, and limited analytics cookies to understand general site use. Cookies may be session-based or persistent depending on their purpose. We do not rely on cookies to collect unnecessary sensitive information.

We use only standard cookie categories needed for site operation and basic analytics.
04

Cookie Controls

You may block or delete cookies through your browser settings. If the website provides a cookie preference tool, you may use it to manage non-essential cookies. Restricting cookies may affect some site functions, including form handling and preference storage.

Cookie choices can be adjusted through browser settings and, where available, site controls.
GDPR
EU framework

GDPR Notice

Where the GDPR applies, we process personal data on a lawful basis such as performance of a contract, steps taken at your request before a booking, compliance with legal obligations, legitimate interests in operating and securing the website, or consent where required for specific cookies or communications. We use data only for the purposes described in this policy and keep it no longer than necessary.

If you are located in the European Economic Area, the GDPR may apply to our processing of your personal data.

Reference framework
Regulation
General Data Protection Regulation (GDPR) - EUR-Lex
Supervisory Authority
Comissão Nacional de Proteção de Dados (CNPD)
This section is intended for users whose data is protected by the GDPR.
GDPR-aware

GDPR Rights

Where applicable, you may request access, rectification, erasure, restriction, portability, or objection to processing. If processing is based on consent, you may withdraw consent at any time for future processing. You also have the right to lodge a complaint with the competent supervisory authority if you believe your data protection rights have been infringed.

GDPR rights are available subject to the conditions and limits set by law.

Subject to applicable law, you may have rights to access your data, correct inaccurate information, request deletion, object to certain processing, and ask for restriction or portability in appropriate cases. We may need to keep some information where required by law or where it is necessary to complete a booking or resolve a dispute.

Your rights may depend on the legal basis and the type of data involved.

To exercise a privacy right, send a clear request using the contact details in this policy and describe the data or processing activity concerned. We may ask for information needed to confirm your identity and to understand the request. If a request cannot be fully granted, we will explain the reason where permitted by law.

We may need to verify identity before acting on a rights request.

Booking, payment, and communication records are retained for as long as needed to manage the service, handle follow-up questions, and meet accounting or legal obligations. Technical logs and cookie data are kept for shorter periods unless a longer retention period is required for security, dispute handling, or compliance. When data is no longer needed, it is deleted or anonymised where appropriate.

We keep data only for the period needed for the stated purpose or legal recordkeeping.

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. The revised version will apply from the date it is made available on the website, unless a different effective date is stated.

We review this policy when our practices or legal obligations change.