BOOK YOUR CHAUFFEUR
BOOK NOW

IBERIAN PRESTIGE CHAUFFEURS

PRIVACY POLICY

Last updated: 10 October 2026

1. Introduction

Iberian Prestige Chauffeurs (“we”, “us” or “our”) respects your privacy and is committed to protecting personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Portuguese law.

This Privacy Policy explains how personal data may be collected and processed when you visit https://iberianprestigechauffeurs.com/, contact us, request a quotation or make a booking for chauffeur-driven transportation or related services.

This document describes our intended data-handling practices based on the information currently available. Certain technical details, including the website’s active cookies, analytics tools and service providers, must be verified before publication. We do not claim to use any specific analytics or advertising tool unless it has been confirmed.

2. Data Controller and Contact Details

The controller responsible for personal data processed for the purposes described in this Privacy Policy is:

Business name: Iberian Prestige Chauffeurs
Tax Identification Number (NIF): 517666421
Address: Rua do Sol, No. 12, Ground Floor B, Areais de São João, Albufeira, Portugal
Email: bookings@iberianprestigechauffeurs.com
Telephone: +351 928 230 712
Website: https://iberianprestigechauffeurs.com/

For any questions about this Privacy Policy or to exercise your data protection rights, please contact us using the email address above.

A Data Protection Officer has not been identified in the information provided for this document. If one is legally required or appointed, the relevant contact details should be added here.

3. Personal Data We May Collect

Depending on how you use our website and services, we may process the following categories of personal data:

  • Contact and identification details, such as your name, email address and telephone number.
  • Booking details, such as the requested service, date and time, pick-up and destination addresses, passenger numbers, luggage or service preferences, and booking reference.
  • Journey and flight information, where relevant to a booking, such as airline, flight number and scheduled arrival details.
  • Messages and information you choose to provide through our contact form or when communicating with us.
  • Transaction and payment-related information, such as payment status, amount, transaction reference and billing details made available to us by the payment process. Full card details are generally handled by the relevant payment provider rather than being intentionally collected by us; the actual configuration must be verified.
  • Technical information that may be generated when visiting the website, such as IP address, device or browser information, server logs and cookie identifiers, depending on the website configuration and the tools enabled.

Please do not provide personal data that is not necessary for your enquiry or booking.

4. How We Collect Personal Data

We may collect personal data directly from you when you:

  • Make or attempt to make a booking through our website.
  • Complete a contact form or send us an email.
  • Contact us by telephone or another communication channel.
  • Provide information needed to arrange or deliver a requested service.

Some technical data may be collected automatically by the website, its hosting environment or enabled tools. The precise cookies, logs and technical tools active on the website must be checked before this section is finalised.

5. Purposes and Legal Bases for Processing

We process personal data only where an applicable legal basis permits us to do so. Depending on the circumstances, purposes and legal bases may include:

  1. Managing enquiries and bookings
    Purpose: responding to enquiries, preparing quotations, confirming reservations, coordinating journeys and providing chauffeur services.
    Legal basis: steps taken at your request before entering into a contract and performance of a contract with you (GDPR Article 6(1)(b)).
  2. Payments, accounting and legal obligations
    Purpose: recording payments, issuing or managing invoices, maintaining accounting records and complying with applicable tax, accounting or other legal obligations.
    Legal basis: compliance with a legal obligation (Article 6(1)(c)) and, where relevant, performance of a contract (Article 6(1)(b)).
  3. Customer support, complaints and service security
    Purpose: responding to service issues, maintaining booking records, preventing misuse and establishing, exercising or defending legal claims.
    Legal basis: performance of a contract, compliance with legal obligations or our legitimate interests (Article 6(1)(f)), where those interests are not overridden by your rights and freedoms.
  4. Website operation and security
    Purpose: maintaining website functionality, diagnosing technical problems, protecting the website and preventing fraud or abuse.
    Legal basis: our legitimate interests (Article 6(1)(f)), where appropriate and after considering your rights.
  5. Cookies, analytics and similar technologies
    Non-essential analytics or marketing cookies, if used, will only be activated where the required consent has been obtained. The tools and cookies currently active on this website have not yet been confirmed. The website owner must verify the configuration and provide a compliant consent mechanism where required.

We do not currently intend to use your personal data for promotional email or SMS marketing. If this changes, we will provide the required information and obtain consent where required by law.

6. Whether You Must Provide Personal Data

Some personal data is necessary to respond to an enquiry, provide a quotation, process a booking, arrange a pick-up or fulfil legal obligations. If you do not provide the information necessary for a requested service, we may be unable to provide that service or complete your booking.

Where information is optional, we will endeavour to make this clear at the point of collection.

7. Sharing Personal Data

We do not sell personal data.

Where necessary for the purposes described in this Policy, personal data may be disclosed to or processed by the following categories of recipients:

  • Website, hosting and technical service providers supporting the WordPress/WooCommerce website.
  • Payment service providers involved in processing the payment method selected at checkout, which may include card payments, PayPal, Multibanco or MB WAY, depending on the active configuration.
  • Chauffeurs, drivers or operational partners who need relevant booking details to provide the service.
  • Accounting, invoicing or professional advisers where necessary.
  • Email or communications providers used to receive and respond to enquiries and booking messages.
  • Public authorities, courts, regulators, tax authorities or law-enforcement bodies where disclosure is required by applicable law or a valid legal request.

The specific hosting company, plugins, email provider, payment gateway operators and any other processors have not been confirmed for this document. They should be identified in our internal records and, where appropriate, named in an updated version of this Policy.

We only intend to disclose information that is reasonably necessary for the relevant purpose and expect service providers processing data on our behalf to be subject to appropriate confidentiality and data protection obligations.

8. International Transfers

Some service providers may process personal data outside the European Economic Area (EEA). We have not yet confirmed whether any of the providers configured on this website make such transfers.

Before publication, the website owner should verify the location of the hosting environment, payment and email providers, and any active plugins or analytics services. Where personal data is transferred outside the EEA, we will ensure that an applicable transfer mechanism and appropriate safeguards are in place as required by the GDPR, such as an adequacy decision or suitable contractual safeguards.

9. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, taking account of legal, accounting, tax, contractual and dispute-related requirements.

Retention periods depend on the type of data and the reason for processing. In general:

  • Enquiries that do not result in a booking will be retained only for as long as reasonably necessary to respond, manage follow-up and maintain appropriate records.
  • Booking and transaction records may be retained for the period required by applicable accounting, tax and other legal obligations.
  • Information needed to handle complaints or establish, exercise or defend legal claims may be retained for the relevant limitation period.
  • Technical logs and cookie data, if collected, should be retained according to the relevant security need, cookie duration and tool configuration.

Exact retention periods and the applicable statutory record-keeping periods must be confirmed with the company’s accountant and technical providers and reflected in internal retention procedures. Data will be deleted or anonymised when it is no longer required, unless continued retention is legally justified.

10. Cookies and Similar Technologies

The website may use cookies or similar technologies necessary for its operation, security, booking functionality and payment process.

Non-essential cookies, including analytics or advertising cookies if present, require consent where required by applicable law. Where consent is required, visitors should be able to accept or reject non-essential cookies and change their preferences later. Access to the website should not be made conditional on consent to cookies that are not necessary for the service requested.

At the time this document was prepared, the website’s active cookies, analytics tools and consent-management configuration had not been verified. Therefore, this Policy does not assert that Google Analytics, Meta Pixel or any other specific tracking tool is installed.

Before this Policy is published, the website administrator should audit WordPress, WooCommerce, the theme, plugins, embedded content and any tag-management tools; prepare an accurate cookie list; and ensure that the cookie banner and settings reflect the actual configuration.

11. Payment Processing

The website may offer card payments, PayPal, Multibanco and MB WAY, subject to the payment methods enabled at checkout and the relevant provider’s conditions.

When you choose a payment method, information necessary to initiate, validate or reconcile the transaction may be processed by the relevant payment provider. That provider may process personal data under its own privacy notice and may act as an independent controller for some processing activities.

We may receive information such as payment status, transaction reference, amount and billing information needed to manage the booking and fulfil legal obligations. The exact payment gateways and their respective roles must be confirmed against the live WooCommerce configuration.

Customers should consult the privacy information provided by the payment provider they choose. Do not send full card details by email or through the contact form.

12. Data Security

We take reasonable technical and organisational measures appropriate to the nature of the data and the risks involved to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.

No website, transmission method or storage system can be guaranteed to be completely secure. Customers should use secure devices and avoid sending unnecessary sensitive information through ordinary email or contact forms.

The company should ensure that appropriate access controls, software updates, backups, security measures and data-processing arrangements are maintained for the WordPress/WooCommerce website and connected services.

13. Your Rights Under the GDPR

Subject to the conditions and exceptions in applicable law, you may have the right to:

  • Be informed about how your personal data is used.
  • Request access to your personal data.
  • Request correction of inaccurate or incomplete data.
  • Request erasure of personal data where the legal conditions are met.
  • Request restriction of processing in certain circumstances.
  • Receive certain data in a structured, commonly used and machine-readable format and request its transmission to another controller, where the right to data portability applies.
  • Object to processing based on legitimate interests, on grounds relating to your particular situation.
  • Withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
  • Not be subject to a decision based solely on automated processing, including profiling, where the conditions and protections in the GDPR apply.

These rights are not absolute and may be subject to legal exceptions. For example, we may need to retain certain records to comply with legal obligations or establish, exercise or defend legal claims.

14. How to Exercise Your Rights or Make a Complaint

To exercise your rights or ask a question about personal data, contact us at bookings@iberianprestigechauffeurs.com. Please describe your request clearly. We may need to verify your identity before responding.

We will respond within the time limits required by the GDPR, generally within one month of receiving a request. This period may be extended in legally permitted circumstances, in which case we will inform you as required.

You also have the right to lodge a complaint with the Portuguese supervisory authority:

Comissão Nacional de Proteção de Dados (CNPD)
Website: https://www.cnpd.pt/

You may also seek a judicial remedy where available under applicable law.

15. Children’s Data

Our services and website are not specifically directed at children. Bookings should ordinarily be made by an adult or by a person legally authorised to make the booking. If a booking requires child-related information, such as a request for a child seat, we will use only the information reasonably necessary to arrange the service.

If you believe that personal data relating to a child has been provided to us unnecessarily, please contact us so that we can assess the appropriate action.

16. Third-Party Websites and Services

Our website may contain links to third-party websites or services. If you follow a third-party link, that provider’s own privacy policy and terms will apply to its processing of your personal data.

We are not responsible for the privacy practices of third-party websites that we do not control. Please review their privacy information before providing personal data.

17. Automated Decision-Making

We do not currently intend to make decisions about customers that produce legal or similarly significant effects solely by automated processing or profiling. If this changes, we will update this Policy and provide any information required by applicable law.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our services, website configuration, data-processing practices or legal requirements. The updated version will be published on our website with a revised “Last updated” date.

Where required by law, we will provide additional information or seek consent for new processing activities.

19. Contact Us

For questions about this Privacy Policy or the handling of personal data, contact:

Iberian Prestige Chauffeurs
Rua do Sol, No. 12, Ground Floor B, Areais de São João, Albufeira, Portugal
NIF: 517666421
Email: bookings@iberianprestigechauffeurs.com
Telephone: +351 928 230 712
Website: https://iberianprestigechauffeurs.com/

20. Publication Checklist — Remove Before Publishing

This section is an internal checklist and should NOT be published as part of the public Privacy Policy.

Before publishing, verify and update the following:
1. Confirm the exact legal entity name and address used for invoices and website disclosures.
2. Identify the hosting provider, email provider, WooCommerce plugins and all service providers that receive personal data.
3. Confirm the live payment gateway providers for cards, PayPal, Multibanco and MB WAY, and review their privacy terms.
4. Audit cookies, analytics, advertising pixels, embedded maps, reCAPTCHA, tag managers and other tracking tools. Do not list a tool unless it is actually used.
5. Configure a compliant cookie banner: strictly necessary cookies should be distinguished from non-essential cookies, and consent should be obtained before non-essential cookies are placed where required.
6. Confirm retention periods with the accountant and technical providers, including statutory accounting and tax record retention.
7. Confirm whether a Data Protection Officer is required or appointed.
8. Check whether any providers transfer personal data outside the EEA and document the applicable safeguards.
9. Ensure that website forms link to this Privacy Policy and that marketing messages are not sent unless the appropriate legal requirements are met.
10. Consider review by a Portuguese privacy professional before publication.

This document is a practical draft based on the information supplied. It is not a substitute for verifying the live website configuration or obtaining legal advice where necessary.