Privacy Policy
What we collect when you reserve a trip, who we have to share it with to actually run the trip, and how to get it back.
Last updated: 9 September 2026
This policy covers trips.africanlisbontour.com, where African Lisbon Tour sells multi day journeys to Africa and Brazil. The walking tour site, africanlisbontour.com, has its own copy of this policy; the substance is the same.
Who is responsible for your data
African Lisbon Tour, Lisbon, Portugal, is the data controller.
Email: info@africanlisbontour.com
Phone and WhatsApp: +351 932 273 536
What we collect, and why
| What | When | Why (legal basis) |
|---|---|---|
| Name, email address, phone number and preferred contact method | When you reserve a place or send an inquiry | To perform our contract with you and to organise your trip |
| Which trip you chose, your travel dates, room preference, occupancy option, and the names and email addresses of anyone travelling with you | When you reserve | To book rooms and activities in your name |
| Anything you tell us in the notes field, which may include dietary requirements or health information | When you reserve | Your explicit consent, so we can cater for you safely. Leave the field blank if you would rather not tell us. |
| Deposit and balance payment confirmations from Stripe or PayPal | When you pay | Contract, and our accounting and tax obligations |
| Chat assistant messages, a random session identifier and the page you were on | When you use the chat widget | Our legitimate interest in answering questions well |
| Anonymous traffic counts, added to a daily total. Nothing is stored about you individually. | On every page view | Our legitimate interest in knowing which pages are useful. No personal data is involved. |
Card numbers never reach our website or our servers: Stripe and PayPal handle payments end to end and send us only a confirmation and a reference.
Sharing your details with trip suppliers
Running a trip means passing some of your details to the people who host you. Hotels, guesthouses, local guides and transport operators in the destination country receive the minimum they need, normally your name and the dates of your stay, and dietary requirements where relevant. Airlines, if we book on your behalf, need the name exactly as it appears on your passport, plus your date of birth and passport number. These suppliers are outside the European Economic Area, and that transfer is necessary to perform your travel contract.
Our other processors
| Provider | What they do for us |
|---|---|
| Google (Firebase Hosting, Cloud Firestore, Cloud Functions) | Hosts this site and stores reservations |
| Stripe and PayPal | Process deposits, balances and refunds |
| Twilio SendGrid | Sends your confirmation and pre departure emails |
| OpenRouter | Runs the language model behind the chat assistant |
Transfers outside the EEA rely on the European Commission's Standard Contractual Clauses or on an adequacy decision.
How long we keep it
- Reservation and payment records: for the period Portuguese tax law requires, currently ten years.
- Passport and date of birth details, where we collected them to issue tickets: deleted within 12 months of your return.
- Inquiries: up to 24 months after our last exchange.
- Chat conversations: up to 12 months, most recent 100 messages only.
- Traffic counts: kept indefinitely; they are only numbers, with no personal data in them.
Your rights
You can ask us for a copy of your data, to correct it, to delete it where we no longer need it, to restrict or object to our use of it, to receive it in a portable format, or to withdraw consent you gave. Email info@africanlisbontour.com and we will reply within one month.
You can complain to the Comissao Nacional de Proteccao de Dados, cnpd.pt, or to the authority where you live.
Cookies
This site sets no advertising, tracking or analytics cookies, which is why you have not been shown a cookie banner. The only thing stored in your browser is the random session identifier the chat assistant needs to follow one conversation.
How we measure traffic instead
We count page views on our own servers. Each view adds one to a daily tally: the page, the referring site, your browser language and whether you are on a phone. We store no IP address and set no identifier, so we cannot tell one visitor from another or link two visits together. There is no analytics provider and nothing leaves our own systems.