This policy explains what personal data we collect when you visit our website, book a tour or contact us, why we use it, who we share it with and what your rights are. We process personal data in line with the EU General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and Portuguese law.
1. Who is responsible for your data
Lisbon Walker® is a brand of Genialout, Lda., a private limited company with tax number (NIF) 507423534, registered as a tourist activities operator in the National Register of Tourist Animation Agents (RNAAT) under no. 49/2005. Registered office: Rua Prof. Delfim Santos, n.º 3-9B, 1600-610 Lisboa, Portugal (registered office only, not open to the public). Email: info@lisbonwalker.com · WhatsApp: +351 963 575 635. Genialout, Lda. is the data controller. For any question about your data, write to info@lisbonwalker.com.
2. What data we collect
- Bookings: name, email, phone number, number of participants, tour and date, and any notes you add (for example, accessibility needs).
- Private tour requests and messages: the details you send us by email, WhatsApp or the contact form.
- Shop purchases: name, email, delivery address (for physical products) and order details. Card details are handled directly by the payment provider; we never see or store them.
- Invoicing: name and, if you ask for it, tax number and billing address.
- Technical data: when you visit the website, the server records basic technical information (such as IP address, browser and pages visited) in security logs.
We do not ask for sensitive data (such as health, religion or political opinions). If you choose to tell us about a health condition or mobility need so that we can adapt a tour, we use it only for that purpose.
3. Why we use your data and on what legal basis
- To manage your booking, run the tour and contact you about it (for example, if a tour changes or is cancelled) – performance of a contract.
- To answer your questions and prepare private tour proposals – steps taken at your request before a contract.
- To issue invoices and meet accounting, tax and insurance obligations – legal obligation.
- To ask for feedback about your tour, and to keep the website secure – legitimate interest.
4. Who we share your data with
We do not sell your data. We only share it with service providers that help us run our business, and only as far as needed:
- Peek (online booking platform) – processes bookings and payments for our tours. Peek privacy policy.
- Stripe (payments for shop products) – Stripe privacy policy.
- WhatsApp / Meta – if you choose to contact us on WhatsApp.
- Our website hosting provider (PTisp, Portugal) – stores the website and messages sent through the contact form.
- Our certified invoicing software provider and accountant – to issue invoices and meet tax obligations.
- Our insurer – only if needed to handle an incident covered by the mandatory insurance for tourist activities.
- Our guides – who receive the participant list for the tour they lead.
We may also have to provide data to public authorities, courts or the police when required by law.
Some of these providers (for example, Peek, Stripe and Meta) may process data outside the European Economic Area. In those cases, transfers are protected by the safeguards required by the GDPR, such as the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework.
5. How long we keep your data
- Booking and purchase data: for as long as needed to provide the service and deal with any questions or complaints, and then for the period required by law for accounting and tax purposes (in Portugal, invoices must be kept for 10 years).
- Messages and proposal requests that do not lead to a booking: up to 2 years.
- Security logs: for a short period, usually no more than a few months.
6. Cookies and third-party content
Our website uses only the cookies it needs to work (for example, to remember your language choice). Our fonts are stored on our own server, so no data is sent to Google Fonts. The Google Maps map of our meeting point only loads if you click “Show map”; when it does, Google may receive your IP address and set its own cookies, under its own privacy policy. Tickets are booked on the website of our booking partner, Peek, which has its own privacy policy. You can block or delete cookies at any time in your browser settings.
We do not use advertising cookies. If we start using analytics or marketing tools, we will update this policy and ask for your consent where required.
7. Your rights
You have the right to access your data, correct it, have it deleted, restrict or object to its use, receive it in a portable format, and withdraw your consent at any time (this does not affect anything done before). To use any of these rights, write to info@lisbonwalker.com. We will answer within one month.
If you are not happy with how we handle your data, you can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD) – www.cnpd.pt – or to the authority in your own country.
8. Children
Our services are booked by adults. Children and teenagers can join our tours with a parent or guardian, who provides any data needed.
9. Security
We use technical and organisational measures to protect your data, including an encrypted (HTTPS) connection on the whole website and restricted, password-protected access to our systems.
10. Changes to this policy
We may update this policy when our services or the law change. The date of the latest version is shown below.
Last updated: September 2026