Privacy Policy

1. Introduction

Wander Where Trips (“Company”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, https://www.wanderwheretrips.com/ (the “Website”), or interact with us through email, text, or other electronic communications.

We process your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation.

By using our Website, you acknowledge that your personal data will be handled as described in this policy.

2. Data Controller

The data controller responsible for your personal data is:

Wander Where Trips
Email: info@wanderwheretrips.com

3. Personal Data We Collect

We may collect and process the following types of personal data:

a) Information you provide directly

Name
Email address
Phone number
Billing and transaction details
Information submitted through forms, bookings, or inquiries
Communications with us

b) Automatically collected data

IP address
Browser type and device information
Time zone and location (approximate)
Website usage data (pages visited, time spent, interactions)

c) Cookies and tracking technologies

We use cookies and similar technologies to enhance your experience and analyze Website usage (see Section 9).

4. How We Use Your Data

We use your personal data to:

Provide and manage our services
Process bookings and transactions
Communicate with you inquiries, updates, or support
Send marketing communications (where permitted)
Improve our Website and user experience
Ensure security and prevent fraud
Comply with legal obligations

5. Legal Basis for Processing

Under GDPR, we rely on the following legal bases:

Contractual necessity – to provide services you request
Consent – for marketing communications and non-essential cookies
Legal obligation – to comply with applicable laws (e.g., tax requirements)
Legitimate interests – to improve our services, prevent fraud, and operate our business

6. Sharing Your Personal Data

We may share your data with:

Service providers (e.g., payment processors, hosting providers, email platforms)
Business partners necessary to deliver your bookings
Authorities, where required by law
Third parties in connection with a business transfer (e.g., merger or sale)

All third parties are required to handle your data securely and in accordance with the law.

7. International Data Transfers

Your personal data may be transferred outside the European Economic Area (EEA).

Where this occurs, we ensure appropriate safeguards are in place, such as:

Standard Contractual Clauses approved by the European Commission
Transfers to countries with an adequacy decision

8. Data Retention

We retain your personal data only for as long as necessary to:

Fulfill the purposes described in this policy
Comply with legal, tax, or accounting obligations
Resolve disputes and enforce agreements

When no longer required, your data will be securely deleted or anonymized.

9. Cookies and Tracking Technologies

We use cookies to:

Ensure the Website functions properly
Analyze traffic and user behavior
Personalize your experience

Types of cookies we use:

Essential cookies – necessary for the Website to function
Analytics cookies – help us understand usage
Marketing cookies – used for advertising and tracking

Where required, we will obtain your consent before placing non-essential cookies.

You can manage your cookie preferences through your browser settings or our cookie banner.

10. Your Rights

Under GDPR, you have the following rights:

Right to access your personal data
Right to correct inaccurate data
Right to request deletion (“right to be forgotten”)
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time

You also have the right to lodge a complaint with the Portuguese supervisory authority:

Comissão Nacional de Proteção de Dados

11. Marketing Communications

You may opt out of receiving marketing emails at any time by:

Clicking the “unsubscribe” link in our emails, or
Contacting us directly

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data.

However, no online system is completely secure, and we cannot guarantee absolute security.

13. Children’s Privacy

Our Website is not intended for children under the age of 16, and we do not knowingly collect personal data from children.

14. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for their privacy practices, and we encourage you to review their policies.