Privacy Policy

Last Updated: January 2026

1. Introduction

Welcome to Glocal Portugal ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website https://glocalportugal.com and use our travel services platform.

Glocal Portugal operates as an intermediary travel platform, connecting travelers with licensed local service providers across Portugal for car rental, eSIM data plans, travel insurance, flight bookings, and hotel accommodations. We do not directly provide these services but facilitate connections between you and verified third-party providers.

2. Information We Collect

2.1 Personal Information You Provide

When you use our services, we may collect the following types of personal information that you voluntarily provide:

• Contact Information: Name, email address, phone number, mailing address
• Booking Information: Travel dates, pickup and drop-off locations, destination preferences, passenger details
• Payment Information: Credit card details, billing address (processed securely through our payment partners)
• Account Information: Username, password, profile preferences (if you create an account)
• Communication Data: Information you provide when contacting our support team, leaving reviews, or subscribing to our newsletter
• Identity Verification: Driver's license information, passport details (as required by service providers for car rental and other services)

2.2 Information Automatically Collected

When you visit our website, we automatically collect certain technical information:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages viewed, time spent on pages, links clicked, search queries, referring URLs
• Location Data: Approximate geographic location based on IP address
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, and similar technologies (see our Cookie Policy for details)

2.3 Information from Third Parties

We may receive information about you from third-party service providers, including:

• Car rental companies, hotel partners, insurance providers, and other travel service providers
• Payment processors and fraud prevention services
• Marketing and analytics partners
• Social media platforms (if you connect your account or share content)

3. How We Use Your Information

We use the collected information for the following legitimate business purposes:

3.1 Service Delivery and Booking Management

• Processing and managing your bookings with local service providers
• Facilitating communication between you and service providers
• Confirming reservations and sending booking confirmations
• Providing customer support and responding to inquiries
• Managing modifications, cancellations, and refunds

3.2 Platform Operation and Improvement

• Operating, maintaining, and improving our website and services
• Analyzing usage patterns and user behavior to enhance user experience
• Conducting research and development for new features and services
• Troubleshooting technical issues and ensuring platform security
• Personalizing content and recommendations based on your preferences

3.3 Marketing and Communications

• Sending promotional emails about special offers, new services, and travel tips (with your consent)
• Displaying personalized advertisements on our platform and third-party websites
• Conducting surveys and requesting feedback to improve our services
• Sending transactional emails related to your bookings and account

3.4 Legal Compliance and Safety

• Complying with legal obligations, regulations, and government requests
• Preventing, detecting, and investigating fraud and security incidents
• Enforcing our Terms and Conditions and protecting our legal rights
• Resolving disputes and addressing complaints
• Ensuring the safety and security of our users and partners

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), including Portugal, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations when you book services through our platform
• Legitimate Interests: We process data to operate our business, improve services, prevent fraud, and ensure platform security
• Consent: For marketing communications and certain tracking technologies, we obtain your explicit consent
• Legal Obligation: We process data to comply with applicable laws, regulations, and legal processes

5. How We Share Your Information

We share your personal information only in the following circumstances:

5.1 Service Providers and Partners

We share necessary information with local service providers (car rental companies, hotels, insurance providers, airlines) to fulfill your bookings. These providers are contractually obligated to protect your data and use it only for service delivery purposes.

5.2 Business Service Providers

We engage trusted third-party service providers who assist us with:

• Payment processing and fraud prevention
• Website hosting and technical infrastructure
• Email delivery and customer communication
• Marketing and analytics services
• Customer support and call center operations

5.3 Legal Requirements and Protection

We may disclose your information when required by law or to:

• Respond to legal processes, court orders, or government requests
• Enforce our terms, conditions, and policies
• Protect the rights, property, and safety of Glocal Portugal, our users, and the public
• Detect, prevent, or address fraud, security, or technical issues

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity as part of the business transaction. We will notify you of any such change and ensure continued protection of your data.

5.5 With Your Consent

We may share your information with other parties when you provide explicit consent for specific purposes.

6. International Data Transfers

Glocal Portugal is based in Portugal (European Union). However, some of our service providers and partners may be located outside the EEA. When we transfer your personal data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions confirming equivalent data protection standards
• Privacy Shield certification (for transfers to the United States, where applicable)
• Binding Corporate Rules for multinational organizations

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law:

• Booking Data: Retained for up to 7 years for accounting, tax, and legal compliance purposes
• Account Information: Retained until you request account deletion or close your account
• Marketing Data: Retained until you unsubscribe or withdraw consent
• Technical Logs: Typically retained for 12-24 months for security and troubleshooting purposes

After the retention period expires, we securely delete or anonymize your personal data.

8. Your Privacy Rights

Under applicable data protection laws, including the EU General Data Protection Regulation (GDPR), you have the following rights:

8.1 Right to Access

You can request a copy of the personal data we hold about you, including information about how we process it.

8.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.

8.4 Right to Restriction of Processing

You can request that we limit the processing of your personal data in certain circumstances.

8.5 Right to Data Portability

You can request to receive your personal data in a structured, commonly used, and machine-readable format, and have it transferred to another controller.

8.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

8.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing based on consent before withdrawal.

8.8 Right to Lodge a Complaint

You have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados - CNPD) or your local supervisory authority.

How to Exercise Your Rights: To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days as required by law.

9. Security Measures

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

• Encryption: SSL/TLS encryption for data transmission and secure storage protocols
• Access Controls: Restricted access to personal data on a need-to-know basis
• Authentication: Multi-factor authentication for employee and partner access
• Regular Audits: Security assessments and vulnerability testing
• Employee Training: Regular privacy and security training for all staff members
• Incident Response: Established procedures for detecting and responding to data breaches

While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to notifying you promptly in the event of a data breach affecting your personal information.

10. Children's Privacy

Glocal Portugal does not knowingly collect personal information from children under 16 years of age. Our services are intended for adults who are legally able to enter into binding contracts. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will take steps to delete such information.

11. Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content and advertisements. For detailed information about the cookies we use and how to manage your preferences, please review our Cookie Policy.

12. Third-Party Links and Services

Our website may contain links to third-party websites, services, and social media platforms operated by our partners and service providers. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

When you complete a booking through our platform, you will be redirected to our partner providers' websites or booking systems. Those providers have their own privacy policies that govern the collection and use of your information during the booking process and service delivery.

13. Marketing Communications

With your consent, we may send you promotional emails about special offers, travel tips, new destinations, and updates about our services. You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any promotional email
• Updating your communication preferences in your account settings
• Contacting us at [email protected]

Please note that even if you opt out of marketing communications, we will still send you transactional emails related to your bookings, account, and service updates.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email or prominent notice on our website
• Obtain your consent where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

15. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

For complaints or concerns about our data protection practices, you may also contact the Portuguese Data Protection Authority:

16. Your Consent

By using the Glocal Portugal website and services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with our privacy practices, please do not use our services.