Privacy Policy

1. Who We Are

Ericeira Kit is a rental service based in Ericeira, Portugal. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website or services.

For any privacy-related questions, contact us at hello@ericeirakit.pt.

2. Data We Collect

When you make a booking, we collect:

• Email address — to confirm and manage your booking.
• Booking details — items rented, rental dates, booking reference.

We do not collect payment card data directly; payment processing will be handled by a certified third-party payment provider (e.g. Stripe) subject to their own privacy policy.

We may also collect standard server logs (IP address, browser type, pages visited) for security and performance monitoring. These are not used for marketing.

3. How We Use Your Data

We use your data solely to:

• Confirm, manage, and fulfil your booking.
• Contact you regarding your booking (e.g. changes, issues, or payment).
• Comply with legal obligations.

We do not sell your data. We do not use your data for advertising or profiling. We will not send you marketing emails without your explicit consent.

4. Legal Basis (GDPR)

We process your personal data on the legal basis of contractual necessity: we need your email and booking details to provide the rental service you requested.

5. Data Retention

Booking records (including your email) are retained for 3 years after the rental end date for accounting and dispute resolution purposes, after which they are deleted.

6. Your Rights

Under the GDPR (and applicable Portuguese data protection law), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (where we have no legal obligation to retain it).
• Object to processing or request restriction.
• Portability — receive your data in a structured, machine-readable format.

To exercise any of these rights, email us at hello@ericeirakit.pt. We will respond within 30 days.

You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD).

7. Cookies

We use only technically necessary storage (browser localStorage) to maintain your cart session. We do not use tracking cookies or third-party analytics.

8. Third Parties

We use the following sub-processors:

• Supabase — database and authentication hosting (EU region).

All sub-processors are contractually bound to protect your data and process it only as instructed by us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects when it was last revised.