Privacy & Cookie Policy

This Privacy & Cookie Policy explains how Neptuneology LDA, trading as The Kitesurf Lodge (“we”, “us”, “our”), collects, uses and protects your personal data when you visit thekitesurflodge.com or book with us. We are the data controller under the EU General Data Protection Regulation (GDPR).

1. Information we collect

• Booking & contact details — name, email, phone, and the details you provide when you enquire or book (camp, lesson, dates, party size).
• Payment information — processed securely by our payment providers; we do not store full card numbers.
• Newsletter sign-ups — the email address you give via our website pop-ups or forms.
• Website usage — pages visited, device and browser data, collected through cookies and analytics (see section 5).

2. How we use your information

• To process and manage your booking, lessons and stay.
• To communicate with you (confirmations, changes, practical information) by email, WhatsApp or phone.
• To send newsletters and offers — only with your consent, which you can withdraw at any time.
• To improve our website and services through analytics.
• To meet our legal, accounting and tax obligations.

3. Legal basis for processing

We process your data on the basis of: performance of a contract (managing your booking), your consent (marketing emails and non-essential cookies), our legitimate interests (improving and securing our site) and legal obligations (accounting and tax records).

4. Email marketing

Our newsletters are sent through Brevo, our email service provider. You can unsubscribe at any time using the link in every email, or by contacting us. We never sell your email address.

5. Cookies

Cookies are small files stored on your device that help the site work and let us understand how it is used. You can manage your preferences through our cookie banner, or disable cookies in your browser settings (this may affect some features). We use:

• Necessary cookies — required for the site and forms to function.
• Analytics cookies — Google Analytics (via Google Tag Manager), to measure traffic and improve content.
• Marketing cookies — the Meta (Facebook) Pixel, to measure and improve our advertising.

6. Who we share your data with

We share data only with the service providers that help us run our business, acting on our behalf: our email platform (Brevo), analytics and advertising platforms (Google, Meta), our payment provider, and our website host. We do not sell your personal data to third parties.

7. Data retention

We keep your personal data only as long as necessary for the purposes above, or as required by law (for example, accounting records). Newsletter data is kept until you unsubscribe.

8. International transfers

Some of our providers (e.g. Google, Meta, Brevo) may process data outside the European Economic Area. Where they do, appropriate safeguards such as the European Commission's Standard Contractual Clauses are in place.

9. Your rights

Under the GDPR you have the right to access, correct, delete or restrict your data, to object to processing, to data portability, and to withdraw consent at any time. To exercise any of these, email us at info@thekitesurflodge.com.

10. Data security

We take reasonable technical and organisational measures to protect your data against loss, misuse or unauthorised access. No method of transmission over the internet is completely secure, but we work to keep your information safe.

11. Children

We do not accept bookings from, or knowingly collect data about, persons under 18 years of age. Bookings involving minors must be made by a legal guardian.

12. Changes & contact

We may update this policy from time to time; the latest version will always be on this page. For any privacy question or complaint, contact info@thekitesurflodge.com. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD, cnpd.pt).