1. Data controller
Alcance Supremo Unipessoal, Lda., tax number 515839833, registered at Rua Álvaro Aurélio do Céu Oliveira 312, 9.º C, 4470-134 Maia. Contact for data protection matters: info@way2go.pt.
2. What we collect
To provide the service:
— Name, email address and mobile number.
— Pick-up and drop-off addresses, date and time of travel.
— Flight number, where given.
— Number of passengers, luggage items, and any special requests you write to us.
If you create an account: your credentials, with the password stored in an irreversible hashed form. We never have access to your password.
From payment we receive only the confirmation and the last four digits of the card. Full card details are handled solely by Stripe or, for payment by link, by SumUp, and never reach our systems.
Technically, we record IP address and browsing data necessary for security and for the site to work.
3. Why we use it, and on what basis
— To carry out the booking and provide the service: performance of the contract.
— To issue invoices and meet tax obligations: legal obligation.
— To send confirmations, reminders and journey information: performance of the contract.
— To pass your name and contact to the assigned chauffeur: performance of the contract.
— To prevent fraud and keep the service secure: legitimate interest.
— To send marketing communications: only with your consent, which you may withdraw at any time.
4. Who we share it with
— Chauffeurs assigned to the service, who receive the name, contact and locations for their assigned journey only.
— Stripe Payments Europe, Ltd., to process payment.
— SumUp Limited, to process payment by link, where that is the method used.
— Infrastructure and communication providers necessary to run the service — hosting, email and messaging — contractually bound to process data only on our instructions.
— Public authorities, where required by law.
We do not sell personal data, nor pass it on for third-party marketing.
5. Transfers outside the European Union
Some providers may process data outside the European Economic Area. Where that happens, the transfer relies on a European Commission adequacy decision or on standard contractual clauses.
6. How long we keep it
— Invoicing data: 10 years, as required by tax law.
— Booking data: 5 years after the journey, for evidence and liability purposes.
— Customer account: while it remains active, and 2 years after last access.
— Technical and security logs: 12 months.
— Consent records: for as long as proof of consent may be needed.
7. Your rights
You may request access to your data, its correction, its erasure, restriction of processing, portability, and object to processing based on legitimate interest.
To exercise any of these, write to info@way2go.pt. We reply within one month.
You also have the right to lodge a complaint with the Portuguese data protection authority, CNPD (www.cnpd.pt).
Erasure may be limited by retention periods imposed by law, particularly in tax matters.
8. Security
Communication with the site is encrypted. Passwords are stored using a slow key derivation function and are not reversible. Access to booking data is limited to those who need it to provide the service.
No system is impenetrable. In the event of a data breach that poses a risk to your rights, we will meet the notification duties set out in law.
9. Changes
This policy may be updated. The version in force is always available on this page, with its date.