Privacy Policy

1. Who We Are

Casa da Fé ("we", "our", "us") is a luxury boutique retreat located in Lagoa, Algarve, Portugal. We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable Portuguese law.

For any privacy-related enquiries, you may contact us at: hello@casadafe.com

2. What Data We Collect

We may collect and process the following categories of personal data:

• Identity & Contact Data: your name, email address, phone number, and nationality when you make a booking enquiry or contact us directly.
• Booking & Transaction Data: details about the dates, services, and preferences associated with your stay or boutique order.
• Communication Data: the content of messages you send us via our contact forms, email, or WhatsApp.
• Technical Data: your IP address, browser type, device information, and pages visited, collected automatically via cookies and analytics tools.

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to booking enquiries and manage your reservation.
• To process boutique orders and arrange shipping.
• To communicate with you about your stay, experiences, or products.
• To improve our website and understand how visitors use it.
• To comply with our legal obligations.

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual necessity: to fulfil your booking or order.
• Legitimate interests: to maintain and improve our services and communicate with guests.
• Legal obligation: where required by Portuguese or EU law.
• Consent: for marketing communications, where you have opted in.

5. Cookies

Our website uses cookies to enhance your browsing experience and collect analytics data. These include essential cookies (required for the site to function) and analytics cookies (which help us understand visitor behaviour). You may manage your cookie preferences via your browser settings. By continuing to use our site, you consent to our use of cookies in accordance with this policy.

6. Third-Party Services

We use a small number of trusted third-party tools to operate our website and services, including Webflow (website hosting and CMS), Google Analytics (visitor analytics), and email service providers for direct communications. These parties are contractually obligated to handle your data securely and only as instructed by us.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy. Booking and transaction data is typically retained for seven years to comply with Portuguese tax and accounting regulations. You may request deletion of your data at any time, subject to our legal obligations.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — to request a copy of the data we hold about you.
• Right to rectification — to request correction of inaccurate data.
• Right to erasure — to request deletion of your data ("right to be forgotten").
• Right to restrict processing — to ask us to limit how we use your data.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests.

To exercise any of these rights, please contact us at hello@casadafe.com. We will respond within 30 days.

9. Data Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. Our website is hosted on Webflow, which maintains enterprise-grade security infrastructure.

10. International Transfers

Some of our third-party service providers may be based outside the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on this page, with the effective date noted at the top. We encourage you to review this page periodically.

12. Contact & Complaints

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at hello@casadafe.com.

If you believe your data has been handled unlawfully, you have the right to lodge a complaint with the Portuguese data protection authority, the CNPD (Comissão Nacional de Proteção de Dados): www.cnpd.pt