Privacy Policy

Last updated: 2 January 2026

This Privacy Policy explains how All Wine Tours (“Platform”, “we”, “us”) collects, uses, and protects personal data when you use our website and services from anywhere in the world.

We are established in Portugal and process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Portuguese law. These standards apply to all users, regardless of location.

1. Data Controller

The data controller responsible for personal data processed through the Platform is:

All Wine Tours Unipessoal LDA
Established in Portugal
Registered address: rua de Anselmo Braancamp 516, Porto, Portugal
Email: info@allwinetours.com

2. Who this policy applies to

This Privacy Policy applies to:

  • website visitors worldwide

  • users submitting booking requests

  • customers located in the EU, UK, US, Canada, and other countries

  • partners (wineries, hotels, restaurants, experience providers)

  • communications via email or contact forms

By using the Platform, you acknowledge that your personal data will be processed under EU data protection standards.

3. Personal data we collect

3.1 Data you provide directly

We may collect:

  • name

  • email address

  • phone number

  • country of residence

  • booking request details (dates, number of guests, preferences, messages)

  • billing details (where applicable)

  • communications sent to us

3.2 Booking and payment data

When you submit a Booking Request:

  • we collect data necessary to process the request and transmit it to the relevant Partner

  • payments are processed securely by third-party payment providers (e.g. Stripe, PayPal)

  • we do not store full credit card details on our servers

3.3 Automatically collected data

When you use the Platform, we may collect:

  • IP address

  • device and browser information

  • pages viewed, referral data, and usage statistics

  • cookies and similar technologies

4. How we use your data

We process personal data to:

  • operate and maintain the Platform

  • process booking requests and collect payments on behalf of Partners

  • share booking details with the relevant Partner

  • communicate with you regarding requests, confirmations, or inquiries

  • improve website functionality and user experience

  • comply with legal, tax, and regulatory obligations

We do not sell personal data.

5. Legal basis for processing

Under the GDPR, personal data is processed based on:

  • performance of a contract or steps prior to entering into a contract (booking requests)

  • legitimate interests (platform operation, fraud prevention, service improvement)

  • legal obligations

  • consent, where required (marketing communications, non-essential cookies)

These legal bases apply to all users, including those outside the EU.

6. Sharing personal data

6.1 Sharing data with Partners (important)

When you submit a Booking Request, we share relevant personal data with the Partner offering the requested service (such as a winery, hotel, restaurant, or experience provider).

This may include:

  • your name and contact details

  • booking dates and number of guests

  • preferences or messages related to the requested service

This data is shared solely for the purpose of responding to and delivering the requested service.

6.2 Partner data protection responsibilities

Partners act as independent data controllers for the personal data they receive in connection with a Booking Request or Booking.

Each Partner is responsible for:

  • processing personal data in accordance with applicable data protection laws

  • using personal data only for purposes related to the requested or booked service

  • implementing appropriate technical and organisational measures to protect personal data

  • providing their own privacy information to users where required

The Platform does not control how Partners process personal data beyond what is necessary to operate the marketplace.

6.3 Platform limitation regarding Partners

The Platform is not responsible for the privacy practices, policies, or data processing activities of Partners.
Users are encouraged to review the Partner’s privacy information where available.

7. Service providers

We may share personal data with trusted third-party service providers that support the operation of the Platform, including:

  • payment processors

  • hosting and cloud providers

  • email and communication tools

  • analytics services

These providers process data only on our instructions and under appropriate contractual and security safeguards.

8. International data transfers

Because the Platform serves users globally, personal data may be transferred outside the European Economic Area (EEA), including to the United States, Canada, and other countries.

Where such transfers occur, we ensure appropriate safeguards, such as:

  • EU Standard Contractual Clauses

  • transfers to countries recognised as providing adequate protection

  • GDPR-compliant service providers

9. Data retention

We retain personal data only for as long as necessary:

  • to provide Platform services

  • to meet legal, accounting, and tax requirements

  • to resolve disputes

Retention periods are determined in accordance with Portuguese and EU law, even for users located outside the EU.

10. Cookies and tracking

We use cookies and similar technologies to:

  • ensure proper website functionality

  • analyse usage and performance

  • improve user experience

Where required by law, we obtain consent before using non-essential cookies.
Further details are available in our Cookie Policy.

11. Your rights

Under the GDPR, you have the right to:

  • access your personal data

  • request correction or deletion

  • restrict or object to processing

  • request data portability

  • withdraw consent at any time (where processing is based on consent)

We extend these rights to all users globally, regardless of location.

To exercise your rights, contact info@allwinetours.com

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) or your local supervisory authority.

12. Data security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration.

No system is completely secure, but we take reasonable steps to minimise risk.

13. Third-party websites

The Platform may contain links to third-party websites.
We are not responsible for the privacy practices or content of those websites.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.
The updated version will be published on the website with a revised “Last updated” date.

Continued use of the Platform after changes constitutes acceptance of the updated Policy.

15. Contact

For privacy-related questions or requests:

All Wine Tours
All Wine Tours Unipessoal LDA
Email: info@allwinetours.com

2026© All Rights Reserved.