Privacy Policy

Last updated: 10 September 2026

1. Who we are

Nancy & The Algarve is a brand operated by:

Essência Triunfante – Unipessoal, Lda.
NIF: 519303857
Rua Joaquim Magalhães 5A–11A
8200-112 Albufeira
Portugal

Email: info@nancyandthealgarve.com
Telephone: +351 924 927 961
Website: www.nancyandthealgarve.com

Essência Triunfante – Unipessoal, Lda. is the data controller for the personal data described in this Privacy Policy.

2. Scope of this Privacy Policy

This Privacy Policy explains how we collect, use, store and share personal data when you:

  • visit our website;
  • contact us or submit an enquiry;
  • request information about a holiday home, property management or investment support;
  • make or manage a reservation;
  • stay at a property managed by us;
  • engage us as a property owner, investor, supplier or business partner; or
  • otherwise communicate or do business with us.

3. Personal data we may collect

Depending on your relationship with us, we may collect the following information:

  • identification details, such as your name, date of birth, nationality and identification or passport information where legally required;
  • contact details, such as your address, telephone number and email address;
  • reservation and accommodation details, including selected property, arrival and departure dates, number of guests and special requests;
  • information about other guests included in a reservation where required to provide the accommodation or comply with legal obligations;
  • billing and transaction information, such as billing address, tax number, payment status, invoice details and transaction references;
  • communications sent through our website, email, telephone, messaging services or booking platforms;
  • information provided by property owners and investors relating to their property, agreement, invoices, payments and services;
  • technical information, such as IP address, browser type, device information, pages visited and access dates and times;
  • cookie preferences and information collected through cookies and similar technologies; and
  • any other information you voluntarily provide to us.

Please do not provide sensitive personal information unless it is necessary and we have specifically requested it.

4. How we collect personal data

We may collect personal data:

  • directly from you;
  • from the person making a reservation on your behalf;
  • through our website and contact forms;
  • through booking platforms such as Airbnb;
  • through our property-management, booking, guest-communication and accounting systems;
  • from property owners, authorised representatives and business partners;
  • from payment providers; and
  • automatically through cookies, server logs and similar technologies.

If you provide personal data relating to another person, you are responsible for ensuring that you are authorised to do so and that the person has received the relevant privacy information.

5. Why we use your personal data

We may process personal data for the following purposes:

  • responding to enquiries and communicating with you;
  • providing information about our properties and services;
  • processing and managing reservations;
  • preparing a property and organising check-in, check-out, cleaning, maintenance and guest support;
  • providing property-management, interior-styling and investment-support services;
  • managing relationships with property owners, investors, suppliers and business partners;
  • processing payments, security deposits, refunds and invoices;
  • maintaining financial, accounting and tax records;
  • meeting legal registration and guest-reporting obligations;
  • preventing fraud, misuse and security incidents;
  • protecting our properties, guests, owners and legal rights;
  • improving the operation, security and performance of our website and services;
  • analysing website use where you have consented to analytics cookies; and
  • sending marketing communications where you have consented or where otherwise permitted by law.

6. Legal grounds for processing

We process personal data only where we have a valid legal basis. Depending on the circumstances, we rely on:

  • Contract: processing is necessary to take steps at your request or to perform a reservation, accommodation, property-management or other service agreement.
  • Legal obligation: processing is necessary to comply with applicable tax, accounting, tourism, guest-registration, public-authority and other legal requirements.
  • Legitimate interests: processing is necessary for our legitimate business interests, including responding to enquiries, managing our operations, protecting properties, preventing fraud, maintaining security and improving our services, provided that your rights and interests do not override those interests.
  • Consent: where required, we ask for your consent before using non-essential cookies, sending certain marketing communications or processing information for another purpose requiring consent. You may withdraw your consent at any time.
  • Legal claims and vital interests: where necessary, we may process information to establish, exercise or defend legal claims or to protect someone’s health or safety.

7. Reservations and guest information

When you make a reservation, we use your information to administer the booking, collect or confirm payment, communicate before and during the stay, provide access and guest support, and meet our legal obligations.

We may need identification and accommodation information for all guests where reporting to the Portuguese authorities is legally required. Failure to provide mandatory information may prevent us from completing a reservation or providing accommodation.

If you book through a third-party platform, that platform also processes your personal data under its own privacy policy.

8. Payments

Payments may be processed by external banks, payment-service providers or booking platforms. These providers may collect payment-card, bank-account or verification information directly from you.

We do not normally receive or store complete payment-card details. Payment providers process such information in accordance with their own privacy policies and security requirements.

9. Contact forms and communications

When you submit a contact form or contact us by email, telephone or another communication channel, we use the information you provide to respond to your request and, where applicable, prepare or perform an agreement with you.

Please do not include unnecessary confidential or sensitive information in a general website enquiry.

10. Cookies and website analytics

Our website uses essential cookies required for security, language selection and correct website operation. With your permission, it may also use analytics or other non-essential cookies to understand how visitors use the website and to improve its performance.

Non-essential cookies should not be activated until you have made a choice through our cookie banner. You can withdraw or change your consent through the cookie settings available on the website.

You can also restrict or delete cookies through your browser settings. Disabling essential cookies may affect the operation of certain website functions.

More detailed information about the cookies currently used, their providers, purposes and duration should be displayed through our cookie banner or separate Cookie Policy.

11. Service providers and recipients

We may share personal data, where necessary, with:

  • property owners and their authorised representatives;
  • booking and distribution platforms;
  • property-management and guest-communication providers;
  • cleaners, maintenance providers and other local service partners;
  • payment providers, banks and financial institutions;
  • accounting, invoicing and professional advisers;
  • website hosting, email, IT security and technical-support providers;
  • analytics providers, where consent has been given;
  • insurers and legal advisers; and
  • tax, tourism, immigration, police, judicial or other public authorities where disclosure is legally required.

These parties receive only the information reasonably necessary for their role. Where a provider processes personal data on our behalf, we require appropriate contractual and security safeguards.

We do not sell personal data.

12. International transfers

Some service providers or booking platforms may process information outside Portugal or the European Economic Area.

Where personal data is transferred to a country without an adequacy decision, we use appropriate safeguards where required, such as European Commission Standard Contractual Clauses, together with supplementary protections where appropriate.

You may contact us for further information about the safeguards applicable to a particular transfer.

13. How long we retain personal data

We retain personal data only for as long as necessary for the purpose for which it was collected and to meet legal, accounting, tax, contractual and dispute-resolution requirements.

In general:

  • general enquiries that do not result in a booking or agreement may be retained for up to 24 months after the last communication;
  • reservation, guest, contract, transaction, invoice and accounting records are retained for the periods required by applicable Portuguese law;
  • owner, investor, supplier and business records are retained for the duration of the relationship and any applicable statutory limitation period;
  • marketing information is retained until you unsubscribe, withdraw consent or the information is no longer required;
  • cookie information is retained according to the duration stated in the relevant cookie information; and
  • technical and security logs are retained only for a limited period unless they are required to investigate an incident or protect legal rights.

We may retain information for longer where necessary for legal proceedings, regulatory enquiries or the establishment, exercise or defence of legal claims.

14. Data security

We use appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, disclosure, access or destruction.

No internet transmission or storage system is completely secure. We therefore cannot guarantee absolute security, but we regularly review the measures used to protect personal information.

15. Your data-protection rights

Subject to the conditions and limitations of applicable law, you may have the right to:

  • request access to your personal data;
  • request correction of inaccurate or incomplete information;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • withdraw consent at any time;
  • request data portability where applicable; and
  • lodge a complaint with a data-protection authority.

You also have the right to object at any time to the use of your personal data for direct marketing.

To exercise your rights, contact us at info@nancyandthealgarve.com. We may request information needed to verify your identity. We will respond within the period required by applicable law.

16. Complaints

If you have concerns about how we process your personal data, please contact us first so that we can try to resolve the matter.

You also have the right to lodge a complaint with the Portuguese supervisory authority:

Comissão Nacional de Proteção de Dados (CNPD)
Avenida D. Carlos I, 134 – 1.º
1200-651 Lisboa
Portugal
Website: www.cnpd.pt

17. Children’s information

Our website and services are not directed at children acting independently. Information about children may be processed when supplied by a parent, guardian or person responsible for a reservation and when necessary to provide accommodation or comply with legal obligations.

18. Third-party websites

Our website may contain links to booking platforms, social-media services and other third-party websites. These organisations are responsible for their own processing of personal data. We recommend reviewing their privacy policies before providing information to them.

19. Automated decision-making

We do not use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects.

20. Changes to this Privacy Policy

We may update this Privacy Policy when our services, systems or legal obligations change. The latest version will always be published on this page, together with the date of the most recent update.

21. Contact us

For questions about this Privacy Policy or the processing of your personal data, please contact:

Essência Triunfante – Unipessoal, Lda.
Email: info@nancyandthealgarve.com
Telephone: +351 924 927 961