Legal
Privacy Policy
Last updated: April 2026
How we collect, use, and protect your personal data when you book a tour or transfer with Get Lisbon Unlocked. Plain language, GDPR compliant.
1. Who we are
Get Lisbon Unlocked ("we", "us", "our") is a private tour and transfer operator based in Lisbon, Portugal. We are the data controller responsible for the personal information we collect when you contact us, book a tour, or use our website. You can reach us at hello@getlisbonunlocked.com.
2. What data we collect
We collect only what we need to provide our service: your name, email address, phone number (for WhatsApp coordination), pickup details (flight number, hotel address, time), and any preferences or accessibility needs you share with us. We also receive basic technical data from your browser (IP address, device type, pages visited) when you use our website.
3. How we use your data
Your data is used to confirm and deliver your booking, communicate with you before and during your experience, send booking confirmations and receipts, respond to enquiries, and comply with our legal and tax obligations. We do not sell, rent, or share your data with third parties for marketing purposes.
4. Legal basis (GDPR)
We process your data on the following legal bases under the EU General Data Protection Regulation (GDPR): performance of a contract (to deliver the tour or transfer you booked), legitimate interests (responding to enquiries, fraud prevention, improving our service), legal obligation (tax and accounting records), and consent (where you have given it, e.g. for non-essential cookies).
5. Who we share data with
We share data only with trusted service providers who help us run the business: WhatsApp (Meta) for messaging, our email provider, our payment processor, and our accountant for tax records. Each of these providers is bound by their own privacy and security obligations. We never sell your data.
6. International transfers
Some of our service providers (such as WhatsApp/Meta and Google) may process data outside the European Economic Area. Where this happens, transfers are protected by Standard Contractual Clauses or equivalent safeguards approved under GDPR.
7. How long we keep your data
Booking and contact data is kept for up to 24 months after your last interaction with us, so we can support repeat bookings and answer follow-up questions. Invoicing and tax records are kept for the period required by Portuguese law (currently 10 years). After these periods, your data is securely deleted.
8. Cookies
Our website uses only essential cookies needed for the site to function (such as remembering your session). We do not use advertising cookies or third-party tracking pixels. If we ever add analytics, we will ask for your consent first via a cookie banner.
9. Your rights
Under GDPR you have the right to: access the data we hold about you, correct inaccurate data, request deletion ("right to be forgotten"), restrict or object to processing, request your data in a portable format, and withdraw consent at any time. To exercise any of these rights, email us at hello@getlisbonunlocked.com and we will respond within 30 days.
10. Security
We take reasonable technical and organisational measures to protect your data against loss, misuse, or unauthorised access. Communications via WhatsApp are end-to-end encrypted. No system is 100% secure, but we treat your information with the same care we treat our own.
11. Children
Our service is intended for adults booking tours and transfers, often on behalf of families. We do not knowingly collect personal data directly from children under 16. If you believe we have, please contact us and we will delete it.
12. Complaints
If you are unhappy with how we have handled your data, please contact us first at hello@getlisbonunlocked.com so we can try to resolve it. You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD — Comissão Nacional de Proteção de Dados, www.cnpd.pt).
13. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The "Last updated" date at the top will always show the latest version. Significant changes will be flagged on this page.
Questions about your data?
We're a quick message away.
If anything in this policy is unclear, message us on WhatsApp or email and we'll happily explain.