Privacy Policy
Last updated: 26-10-2026
This is a courtesy translation. If there is any difference, the Portuguese version prevails.
1. Who is responsible for your data
The data controller is Goncalo and Ivone Vieira, tax ID (NIF) 212034391, with registered office at Estrada Nova da Lombada 438, Ponta do Sol, Madeira, who operate Lombada Lodges.
For any question about your data, write to lombadalodges@gmail.com.
2. What data we collect
- Booking: first and last name, email, phone, country of residence, address (if provided), number of people, dates of stay, expected arrival time and any notes you write.
- Stay: guest details required for accommodation registration (identification, date and place of birth, place of residence and nationality), as required by the law applicable to accommodation.
- Payment: the data needed to process the payment. Card data is handled directly by the payment provider and is not stored by us.
- Communications: the messages you exchange with us by email or WhatsApp.
- Browsing: technical access data such as IP address, browser type and pages visited, processed by the services that host and protect the website.
3. Why we use the data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Receiving, confirming, managing and charging for the booking and stay | Performance of a contract (or pre-contractual steps) |
| Complying with legal obligations, such as guest registration and tax and accounting obligations | Compliance with a legal obligation |
| Answering requests and questions, and handling complaints | Performance of a contract and legitimate interest |
| Website security and fraud prevention | Legitimate interest |
4. Who we share data with
We only share data when necessary, with:
- Smoobu, the provider of the booking and property management system, which processes data on our behalf.
- Payment providers: Stripe and Banco Montepio, depending on the payment method chosen.
- Cloudflare, which hosts and protects the website.
- Competent authorities, where required by law (for example registration of foreign guests and tax obligations).
- Accountant and cleaning service, only with the data needed for the service.
We do not sell your data.
Some of these providers may process data outside the European Economic Area. In such cases we require appropriate safeguards, such as the European Commission's standard contractual clauses.
5. How long we keep the data
- Booking and invoicing data: for as long as tax and accounting law requires.
- Messages and enquiries without a booking: 12 months.
6. Cookies
This website only uses cookies and technologies that are strictly necessary for it to work and for security, including those of the booking form and the website protection service. We do not use advertising or analytics cookies. If we start using them, we will ask for your consent first.
7. Your rights
You may, at any time, ask for:
- access to your data and a copy of it;
- correction of inaccurate data;
- erasure of the data, where the law allows;
- restriction of processing or objection, in certain cases;
- portability of the data you provided to us.
To exercise these rights, write to lombadalodges@gmail.com. We may ask you to confirm your identity. You also have the right to lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (www.cnpd.pt).
8. Security
We adopt reasonable technical and organisational measures to protect the data, such as encrypted connections (HTTPS) and restricted access to systems. No system is completely secure, but we will act quickly in the event of any incident.
9. Changes to this policy
We may update this policy. The version in force is always the one published on this page, with the date of the last update.
See also our Booking Terms and Conditions.