Privacy Policy

1. Who We Are

Ericeira Kit is a rental service based in Ericeira, Portugal. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website or services.

For any privacy-related questions, contact us at hello@ericeirakit.pt.

2. Data We Collect

When you make a booking, we collect:

• Full name — to identify your booking.
• Email address — to confirm and manage your booking.
• Phone number (optional) — to contact you about your rental if needed.
• Booking details — items rented, rental dates, booking reference.
• Government-issued ID photograph (Passport or National ID) — collected at handover as a security guarantee, if you choose Option A. Stored only for the duration of the rental and deleted upon safe return of the Equipment.

We do not collect payment card data directly; payment processing is handled by Mollie, a certified third-party payment provider, subject to their own privacy policy.

We may also collect standard server logs (IP address, browser type, pages visited) for security and performance monitoring. These are not used for marketing.

3. How We Use Your Data

We use your data solely to:

• Confirm, manage, and fulfil your booking.
• Contact you regarding your booking (e.g. changes, issues, or payment).
• Comply with legal obligations.

We do not sell your data. We do not use your data for advertising or profiling. We will not send you marketing emails without your explicit consent.

4. Legal Basis (GDPR)

We process your personal data on the legal basis of contractual necessity: we need your name, email, and booking details to provide the rental service you requested. Phone number and ID photograph (where provided) are collected on the same basis as part of the security guarantee required at handover.

5. Data Retention

Booking records (including your name, email, and phone) are retained for 3 years after the rental end date for accounting and dispute resolution purposes, after which they are deleted. ID photographs are deleted immediately upon the safe return of the Equipment.

6. Your Rights

Under the GDPR (and applicable Portuguese data protection law), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (where we have no legal obligation to retain it).
• Object to processing or request restriction.
• Portability — receive your data in a structured, machine-readable format.

To exercise any of these rights, email us at hello@ericeirakit.pt. We will respond within 30 days.

You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD).

7. Cookies

We use only technically necessary storage (browser localStorage) to maintain your cart session. We do not use tracking cookies or third-party analytics.

8. Third Parties

We use the following sub-processors:

• Supabase — database and authentication hosting (EU region).

All sub-processors are contractually bound to protect your data and process it only as instructed by us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects when it was last revised.