Privacy Policy
Last updated: 28 October 2026
This policy explains how SipDouro collects and uses personal data when you visit this website, send us a request or book an experience. We follow the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Portuguese Law 58/2019.
1. Who is responsible for your data
SIP & SAVOR, LDA (trading as SipDouro), NIF 518537994, registered tour operator (Registo Nacional dos Agentes de Animação Turística) no. 280/2025, registered office at Bairro da Barragem, Casa 4, 5070-015 Alijó, Portugal. Email: geral@sipdouro.com · WhatsApp: +351 937 587 350.
2. What data we collect
- Request form and messages: name, email, WhatsApp number (optional), preferred dates, number of adults and children, where you are staying, the day you are interested in and anything you choose to tell us in the notes.
- Bookings: the details above plus the data needed to confirm, invoice and run your experience (for example billing name and tax number if you ask for an invoice). Payments are handled by our booking and payment providers; we do not see or store your full card details.
- Allergies and dietary needs: if you tell us about them, we use them only to let the restaurant or quinta know. This may be health information, so we only process it because you choose to give it to us, and you can ask us to delete it at any time.
- Website: our hosting provider keeps technical logs (such as IP address, browser and pages requested) for security and to keep the site working. We do not use analytics or advertising cookies. See our Cookie Policy.
3. Why we use it and on what legal basis
- To reply to your request and prepare a proposal – steps taken at your request before a contract (Art. 6(1)(b) GDPR).
- To run the experience you booked: pickups, tastings, lunch and boat – performance of a contract (Art. 6(1)(b)).
- To issue invoices and keep accounting records – legal obligation (Art. 6(1)(c)).
- To share dietary or health information with the restaurant or quinta – your explicit consent (Art. 9(2)(a)), which you can withdraw at any time.
- To keep the website secure – our legitimate interest (Art. 6(1)(f)).
We do not use your data for marketing unless you ask us to, and we never sell it.
4. Who we share it with
- The quintas, restaurant and boat operator that are part of your day, only with the details they need (name, group size, date, dietary needs).
- Service providers that act on our behalf: website hosting (Hostinger), email, our online booking and payment system, and WhatsApp (Meta) if you choose to contact us there.
- Our accountant and the tax authorities, where the law requires it.
Some of these providers may process data outside the European Economic Area. When that happens, they do so under the safeguards allowed by the GDPR, such as the European Commission’s standard contractual clauses or an adequacy decision.
5. How long we keep it
- Requests that do not become a booking: up to 12 months, then deleted.
- Bookings and invoices: 10 years, as required by Portuguese tax and accounting law.
- Dietary and health information: deleted after your experience.
6. Your rights
You can ask us to access, correct or delete your data, to restrict or object to its use, to receive it in a portable format, or to withdraw your consent at any time. Write to geral@sipdouro.com and we will reply within one month. You also have the right to complain to the Portuguese data protection authority, CNPD (www.cnpd.pt).
7. Photos
We only use photos of guests on this website or on social media with their permission. If you appear in a photo and would like it removed, tell us and we will remove it.
8. Changes
If we change this policy, we will publish the new version on this page with a new date.
Maps
Some pages show a map. The map images come from OpenStreetMap, so your browser loads them from the OpenStreetMap Foundation’s servers, which receive your IP address. If you use the “Where are you staying?” box, what you type is sent to OpenStreetMap’s Nominatim service to find the place on the map. If you tap “Use my location”, your browser asks for permission first and the location is only used on your screen. We don’t store any of this.
