Privacy Policy – Villa Epicurea

Last Updated: [1.03.2026]

At Villa Epicurea (Plutoq LDA), we are committed to protecting the privacy and personal data of our guests and website visitors. This Privacy Policy explains how we collect, use, and safeguard your information when you visit www.villaepicurea.com or book a stay with us.

1.⁠ ⁠Data Controller

The entity responsible for processing your personal data is:

Company Name: Plutoq LDA (Villa Epicurea)
Address: Rua do Casalinho 5A, 2970-052 Fetais, Portugal
Email: info@villaepicurea.com
Phone: +351 961719755

2.⁠ ⁠Information We Collect

We collect information that allows us to provide a personalized and seamless experience. This includes:

Identity Data: Name, surname, date of birth, and ID/Passport details (required by Portuguese law for SEF reporting).
Contact Data: Email address, phone number, and home address.
Transaction Data: Payment details (processed securely via our payment gateway), booking history, and services requested.
Preferences & Health Data: Dietary requirements, allergies, or physical conditions relevant to yoga/massages (collected only with your explicit consent).
Technical Data: IP address, browser type, and usage data via cookies when you browse our website.

3.⁠ ⁠How and Why We Use Your Data

We use your data for the following purposes:

Managing Bookings: To process your reservation, send confirmations, and handle payments (Legal basis: Contractual necessity).
Legal Compliance: To report guest information to the Portuguese Immigration and Borders Service (SEF) and for tax/accounting purposes (Legal basis: Legal obligation).
Communication: To respond to inquiries via our contact form or email (Legal basis: Legitimate interest).
Marketing: To send you newsletters or special offers about our retreats, provided you have opted in (Legal basis: Consent).
Improving Our Services: Analyzing website traffic to improve user experience (Legal basis: Legitimate interest).

4.⁠ ⁠Data Sharing and Third Parties

We do not sell your data. We only share information with trusted partners necessary for our operations:

Booking Engines & Channel Managers: To manage your reservation.
Payment Processors: To ensure secure transactions.
Public Authorities: As required by Portuguese law (e.g., SEF, Tax Authority).
Service Providers: Email marketing tools (e.g., Mailchimp) or website analytics (e.g., Google Analytics).

5.⁠ ⁠International Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure it is protected by appropriate safeguards (such as Standard Contractual Clauses) as required by the GDPR.

6.⁠ ⁠Data Retention

We keep your data only as long as necessary:

Booking info: Kept for the duration of your stay plus the statutory period for tax records (usually 10 years in Portugal).
SEF Data: Kept as per the specific legal requirements for hospitality.
Marketing: Until you unsubscribe or withdraw your consent.

7.⁠ ⁠Your Rights

Under the GDPR, you have the right to:

Access: Request a copy of the data we hold about you.
Rectification: Correct inaccurate data.
Erasure ("Right to be Forgotten"): Request deletion of your data (subject to legal retention requirements).
Restriction: Ask us to stop processing your data in certain ways.
Withdraw Consent: At any time for marketing communications.

To exercise these rights, please contact us at info@villaepicurea.com.

8.⁠ ⁠Cookies

Our website uses cookies to enhance your experience. You can manage your cookie preferences through your browser settings or the cookie banner on our site.

9.⁠ ⁠Security

We implement technical and organizational security measures to protect your data against unauthorized access, loss, or destruction.

10.⁠ ⁠Complaints

If you believe your data is being handled incorrectly, you have the right to lodge a complaint with the Portuguese Data Protection Authority:

CNPD – Comissão Nacional de Proteção de Dados (www.cnpd.pt).