top of page

PRIVACY POLICY

At Joyride Algarve, we are committed to providing a fun and safe experience and we are serious about your data and it's privacy. Below you will find the cookies policy you need to read and agree to browse our website.​

​Last updated: 29.03.2026

​1. Who We Are

​

Joyride Algarve is a trading name of Sassy Adventure Lda, a company registered in Portugal.

​

​

Sassy Adventure Lda is the data controller responsible for your personal data collected through this website and our services.

​

​2. What data we collect

​

We collect the following types of personal data:

​

  • Identity data: name

  • Contact data: email address, phone number

  • Booking data: tour selected, date, number of participants, special requests

  • Technical data: IP address, browser type, pages visited, time spent on site

  • Marketing data: your preferences for receiving communications from us

​

We do not collect sensitive personal data (such as health information) unless you voluntarily share it with us for safety or accessibility reasons, in which case we handle it with the highest level of care.

​

​3. Legal basis for processing
 

Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:

​

  • Contract: to process your booking and deliver the service you have requested

  • Legitimate interests: to improve our website and services, and to prevent fraud

  • Consent: to send you marketing communications and to use non-essential cookies (you may withdraw consent at any time)

  • Legal obligation: to retain certain records as required by Portuguese law (e.g. financial and tax records)

​

4. How we use your data
 

We use your personal data to:

​

  • Process and manage your tour bookings

  • Communicate with you about your booking, including confirmations and reminders

  • Respond to your enquiries and provide customer support

  • Send you marketing communications, newsletters, and promotional offers (only with your consent)

  • Improve our website and services through analytics

  • Comply with legal and regulatory obligations

​

​5. How long do we keep your data

​

We retain your personal data only for as long as necessary:

​​

  • Booking and contact data: 3 years from the date of your last booking or enquiry

  • Financial and invoice records: 10 years, as required by Portuguese tax law

  • Marketing data: until you unsubscribe or withdraw consent

  • Technical/analytics data: 26 months

​

After these periods, your data is securely deleted or anonymised.

​

​6. Third-party services
 

We use the following third-party services that may collect or process your data:

 

​

These providers act as data processors on our behalf and are contractually required to handle your data securely and in accordance with GDPR.

​

​7. International Data Transfers
 

Some of our third-party service providers (including Meta and Google) may transfer and process your data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

​

8. Cookies​

​

We use cookies and similar technologies on our website. Cookies are small text files stored on your device that help us provide and improve our services.

​

We use:

​

  • Essential cookies: necessary for the website to function (no consent required)

  • Analytics cookies: to understand how visitors use our website (requires consent)

  • Marketing cookies: to deliver relevant advertising, including via Facebook Pixel (requires consent)

​

You can manage your cookie preferences through the cookie banner on our website or through your browser settings. Please note that disabling certain cookies may affect the functionality of the website.

​

9. Your Rights under GDPR

​

As a data subject under GDPR, you have the following rights:

​

  • Right of access: to request a copy of the personal data we hold about you

  • Right to rectification: to request correction of inaccurate or incomplete data

  • Right to erasure: to request deletion of your personal data ("right to be forgotten")

  • Right to restriction: to request that we limit how we use your data

  • Right to data portability: to receive your data in a structured, machine-readable format

  • Right to object: to object to processing based on legitimate interests or for direct marketing

  • Right to withdraw consent: to withdraw consent at any time where processing is based on consent

​

To exercise any of these rights, please contact us at kinga@joyridealgarve.com. We will respond within 30 days.

​

You also have the right to lodge a complaint with the Portuguese data protection authority:

CNPD — Comissão Nacional de Proteção de Dados
Website: cnpd.pt
Address: Rua de São Bento, 148-3º, 1200-821 Lisboa, Portugal

​

10. Children's privacy

​

On occasion, we accept minor riders (aged 16 and above) where a parent or legal guardian books on their behalf and provides written consent. In these cases:

​

  • The booking is made by the parent or legal guardian, who provides only the minor's name and their own personal details (name, email address, phone number). We do not collect personal data directly from minors.

  • The parent or legal guardian signs a parental consent form prior to the tour, confirming they authorise the minor's participation and accept the associated risks on their behalf.

  • The signed consent form is retained by Sassy Adventure Lda for 3 years from the date of the tour for liability and insurance purposes.

  • The parent or legal guardian is the data subject for the purposes of this policy and holds all associated rights under GDPR (access, rectification, erasure, etc.).

  • We do not knowingly collect personal data from individuals under the age of 16. If you believe a minor under 16 has been registered without proper parental authorisation, please contact us immediately at kinga@joyridealgarve.com, and we will take appropriate action.

​

11. Data Security

​

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include secure data storage, access controls, and the use of HTTPS encryption on our website. In the event of a data breach that poses a risk to your rights, we will notify the CNPD within 72 hours and inform affected individuals without undue delay.

​

12. Changes to the policy

​

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you by email (if we hold your contact details) and by posting a notice on our website. The date at the top of this page indicates when the policy was last updated.

​

13. Contact us

​

For any questions, requests, or concerns about this Privacy Policy or how we handle your personal data, please contact:

​

Sassy Adventure Lda (trading as Joyride Algarve)
Herdade do Funchal, 8600-310 Lagos

kinga@joyridealgarve.com
+351937039300

bottom of page