Privacy Policy

Booking information: when you make a reservation, we collect your full name, contact details and payment information (payments are handled securely by our processor, Stripe). To meet Portuguese legal requirements we also collect a passport or ID for each guest at check-in.

Contact and newsletter information: if you use our contact form or subscribe to our newsletter, we collect details such as your name, email and phone number.

Technical and usage information: like most websites, we automatically receive some non-identifying information from your device — such as browser and device type, language preference, IP address and how you move through the site — to keep it working well and understand what's useful.

We receive this information directly from you when you book, enquire or subscribe, from your use of the site, and from trusted providers such as analytics services.

To manage your booking — confirming and preparing your stay and any extras, taking payment, handling refunds or disputes, and complying with legal obligations such as guest registration.

To support you — answering enquiries, sending essential service messages about your booking, and providing technical help.

With your consent, to keep you in the loop — occasional emails about offers, news and things we think you'll enjoy. You can unsubscribe at any time; we'll still send essential (non-marketing) service messages such as a booking confirmation.

To understand and improve how our website is used, through statistics and analytics.

We never rent or sell your personal information. We share it only where it's needed to run our service, and only with parties bound to protect it:

Service providers who help us operate — for example our booking and channel systems and our payment processor, Stripe — who may use your data only for the service they provide to us.

Legal or regulatory authorities, where the law requires it or to protect our rights, our guests or others.

In a business transition — if all or part of the company is sold, merged or transferred, your data may move as part of that change, under the same protections.

Some providers may process data outside the EU/EEA; where they do, we rely on appropriate safeguards as required by GDPR.

We keep your personal information only as long as we need it — to provide our service, meet our legal, accounting and dispute-resolution obligations, and enforce our agreements — then delete or anonymise it.

We use industry-standard measures to keep your data safe and to prevent unauthorised access, and we require the partners we work with to do the same. Payments are handled by Stripe — we never store your full card number. No system is ever perfectly secure, but we take real care to protect your information.

Under GDPR you can ask us to: confirm what data we hold about you and access it; receive a copy in a portable format; correct anything inaccurate; delete your data; and object to or restrict how we use it. You also have the right to lodge a complaint with a supervisory authority — in Portugal, the CNPD (Comissão Nacional de Proteção de Dados).

To exercise any of these rights, just email lisbon@cheese-wine.com and we'll take it from there. Some rights have limits where the law or our legitimate interests require us to keep certain records.

We may update this policy from time to time; the current version always lives on this page, with the last-updated date shown, and material changes take effect when published here.

Any general questions about the site or how we handle your information? Write to us at lisbon@cheese-wine.com.