Last updated: 3 June 2026
At PortoTown, we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use and protect personal information when you visit our website, contact us, book a tour, request a private transfer, request direct stay information or interact with our services.
By using this website, you agree to the terms described in this Privacy Policy.
1. Who we are
This website is operated by PortoTown, a local touristic services brand based in Porto, Portugal.
Website: portotown.com
Email: tours@portotown.com
Phone / WhatsApp: +351 933 300 714
For any questions about this Privacy Policy or how your data is processed, you can contact us by email.
2. Personal data we may collect
Depending on how you use our website, we may collect the following personal data:
- Name
- Email address
- Phone or WhatsApp number
- Booking details
- Number of guests
- Preferred tour, transfer or stay request
- Check-in and check-out dates for direct stay requests
- Pick-up and drop-off details for transfer requests
- Payment status and transaction reference
- Messages sent through forms, WhatsApp or email
- Technical information such as browser type, device, IP address and website usage data
We only collect the personal data necessary to respond to your request, manage bookings, provide services and improve the website experience.
3. How we collect your data
We may collect personal data when you:
- Submit a contact form
- Request a direct stay booking
- Request private transfer availability
- Book a tour through the website
- Complete a payment through SumUp
- Contact us by WhatsApp, email or phone
- Interact with website cookies or analytics tools
- Click external links such as Airbnb or partner websites
4. Why we use your data
We may use your personal data for the following purposes:
- To reply to your questions or requests
- To process tour bookings
- To confirm payment and booking details
- To send booking confirmations and relevant service information
- To check availability for direct stay or transfer requests
- To communicate with you before or after your experience
- To improve our website and services
- To comply with legal, tax or administrative obligations
- To prevent fraud, abuse or technical issues
We do not sell your personal data.
5. Legal basis for processing personal data
We process personal data based on one or more of the following legal grounds:
- Contractual necessity: when data is needed to provide a booked service
- Consent: when you submit a form, accept cookies or contact us voluntarily
- Legitimate interest: to respond to enquiries, manage bookings and improve services
- Legal obligation: when we need to comply with applicable laws or accounting requirements
6. Bookings and payments
Tour bookings may be managed through booking tools integrated into our website.
Payments may be processed securely through SumUp or other payment providers. PortoTown does not store full card details on its website. Payment information is handled by the payment provider according to its own security and privacy standards.
We may store payment status, transaction reference and booking confirmation information in order to manage your reservation.
7. Direct stay requests
The recommended stay promoted on our website may link to an external Airbnb listing and may also allow direct availability requests through our website, email or WhatsApp.
When you send a direct stay request, the information provided is used only to check availability, reply to your enquiry and provide booking details.
A direct stay request is not an automatic booking confirmation. Availability and final booking details must be confirmed by the host.
8. Private transfer requests
When you request a private transfer, we may collect route details, date, time, number of passengers and contact information.
This information is used to check availability, calculate or confirm pricing and communicate with you about the requested journey.
A private transfer request is not an automatic booking confirmation. Availability and price depend on route, distance and driver availability.
9. WhatsApp communication
If you contact us through WhatsApp, your message, phone number and any information you provide will be processed by WhatsApp according to its own privacy policy.
We use WhatsApp only to reply to your enquiries and communicate about requested services.
10. External links
Our website may contain links to third-party websites, including Airbnb, Porto river cruise partners, payment providers or other external services.
We are not responsible for the privacy practices, content or data processing of external websites. We recommend reading their privacy policies before submitting personal data.
11. Cookies
Cookies are small files stored on your device when you visit a website.
Our website may use cookies for:
- Essential website functionality
- Booking and form functionality
- Security and spam prevention
- Analytics and website performance
- User experience improvements
- Embedded third-party tools
Some cookies are necessary for the website to work properly. Others, such as analytics or marketing cookies, may depend on your consent where required.
You can manage or delete cookies through your browser settings. Please note that disabling some cookies may affect website functionality.
12. Types of cookies we may use
Essential cookies
These cookies are needed for the website to function correctly, including navigation, forms, security and booking processes.
Analytics cookies
These cookies help us understand how visitors use the website, which pages are visited and how we can improve the user experience.
Third-party cookies
Some third-party tools, such as payment providers, embedded maps, booking tools, WhatsApp links or external platforms, may use their own cookies or tracking technologies.
13. How long we keep your data
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.
Booking, payment and communication records may be kept for the period required to manage services, comply with legal obligations or resolve disputes.
General contact enquiries may be deleted when they are no longer necessary.
14. Who may have access to your data
Your personal data may be accessed by:
- PortoTown team members responsible for bookings and customer communication
- Website, hosting or technical support providers
- Booking and payment service providers
- Email and form service providers
- Legal, accounting or administrative entities when required by law
We only share data when necessary to provide the service, operate the website or comply with legal obligations.
15. International data transfers
Some tools or third-party services used on this website may process data outside Portugal or the European Economic Area.
When this happens, we aim to use service providers that apply appropriate safeguards for personal data protection.
16. Your rights
Under applicable data protection laws, you may have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Object to certain types of processing
- Request restriction of processing
- Request data portability
- Withdraw consent where processing is based on consent
- Lodge a complaint with a supervisory authority
To exercise your rights, contact us at:
We may need to verify your identity before processing your request.
17. Supervisory authority
In Portugal, the supervisory authority for data protection is the Comissão Nacional de Proteção de Dados — CNPD.
You have the right to contact the CNPD if you believe your personal data has not been handled correctly.
18. Data security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
However, no online transmission or storage system is completely secure. We encourage users to avoid sending sensitive information through forms, email or WhatsApp unless necessary.
19. Children’s privacy
Our services are intended for adults and travellers making booking decisions. We do not knowingly collect personal data from children without appropriate consent from a parent or legal guardian.
20. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, website tools, legal requirements or privacy practices.
The updated version will be published on this page with a new “Last updated” date.
21. Contact
For privacy questions, data requests or cookie-related questions, please contact:
PortoTown
Email: tours@portotown.com
Phone / WhatsApp: +351 933 300 714
