Privacy Policy

1. Data controller

The controller of your personal data is Iconic Portugal, based in Portugal. For privacy-related enquiries you can contact us by email at privacidade@iconictravel.pt.

2. What data we collect

• Contact data — name, email, phone and any other elements you provide when requesting information or making a booking.
• Booking data — dates, pickup and destination points, number of passengers, vehicle preferences.
• Browsing data — technical information about your visit (pages visited, time on page, referrer, device type), only when you allow non-essential cookies.

3. Purposes and legal bases

• Booking management and customer service — performance of a contract (art. 6(1)(b) GDPR).
• Commercial communications — only with your explicit consent (art. 6(1)(a) GDPR), which you can withdraw at any time.
• Tax and accounting obligations — compliance with a legal obligation (art. 6(1)(c) GDPR).
• Site improvement and performance analysis — legitimate interest, conditional on your consent to analytics cookies.

4. Cookies

We use cookies to operate the site and, subject to consent, to analyse performance and present personalised communications. We distinguish three categories:

• Essential — required for the site to work (language preference, session, consent choices). Cannot be disabled.
• Analytics — help us understand how the site is used, always in aggregate. Load only with your consent.
• Marketing — allow us to personalise content and measure campaigns. Load only with your consent.

You can manage your choice at any time by clicking Manage cookies or the link in the footer.

5. Who we share with

Your data is not sold. It may be shared only with:

• Operational providers — booking platform (Transfergest), transactional email services, hosting.
• Competent authorities — where required by law.

All subprocessors act under a data processing agreement and only for the purposes described above.

6. Retention periods

• Booking data — for the applicable legal period (typically 10 years for tax purposes).
• Marketing contact data — until you withdraw consent.
• Browsing data — at most 26 months.
• Cookie consent record — 12 months.

7. Your rights

Under GDPR you have the right to:

• Access your personal data and obtain a copy;
• Rectify inaccurate or incomplete data;
• Request erasure of your data ("right to be forgotten");
• Restrict or object to the processing;
• Request portability of your data;
• Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights contact privacidade@iconictravel.pt. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).

8. Security

We apply technical and organisational measures to protect your data against unauthorised access, loss or alteration. Communications through this site are encrypted over HTTPS.

9. Changes to this policy

We may update this policy from time to time. The date at the top indicates when the most recent revision was made. Material changes will be communicated prominently.