Privacy Policy

The personal data you provide is processed by Azores Essence, a tour operator based in Ponta Delgada, São Miguel, Azores, Portugal.

Contact: azoresessencetours@gmail.com

When you submit a booking request, we collect:

• Full name
• Email address
• Phone number (optional)
• Tour preference, preferred date and time
• Number of participants
• Additional notes you choose to share

We do not collect payment information on this website.

Your data is collected solely to process your booking request and contact you with a confirmation or alternative proposal. The legal basis is the performance of a pre-contractual relationship (Article 6(1)(b) GDPR).

We do not use your data for marketing purposes without your explicit consent, and we do not sell or share it with third parties except as strictly necessary to fulfil your booking (e.g. payment processors).

Booking data is retained for a maximum of 2 years from the date of the tour, after which it is permanently deleted. If your booking request is declined or cancelled, data is deleted within 90 days.

Under the GDPR you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — limit how we process your data
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interest

To exercise any of these rights, contact us at azoresessencetours@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD) at www.cnpd.pt.

This website uses only strictly necessary cookies — specifically, a session cookie used exclusively by the administrative panel to maintain a secure authenticated session. Regular visitors do not receive any tracking or analytics cookies.

We do not use advertising cookies, third-party analytics, or social media tracking pixels.

All booking data is stored in a secure, encrypted database hosted by Supabase (infrastructure located in the EU). Access to this data is restricted to authorised personnel only through authenticated sessions.

We may update this policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of the website after any changes constitutes acceptance of the updated policy.