Privacy Policy

Política de Privacidade / Data Protection Notice

At Nuua Beach, we respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your information when you visit our website or use our services.

1. Data Controller

2. What Personal Data We Collect

2.1 Reservation Data (via UMAI)

When you make a reservation through our UMAI booking system, we collect:

• Name and contact details (phone, email)
• Reservation preferences and special requests
• Party size and date/time preferences
• Payment information (processed securely by UMAI)

2.2 Contact Forms

When you contact us via email or inquiry forms:

• Name and email address
• Message content and any information you choose to share

2.3 Newsletter Subscription (Mailchimp)

If you subscribe to our newsletter:

• Email address
• Name (optional)
• Subscription preferences

2.4 Website Usage Data

When you visit our website, we may automatically collect:

• IP address and browser information
• Pages visited and time spent on site
• Referring website
• Device and operating system information

3. Legal Basis for Processing

We process your personal data based on:

• Contract performance: To fulfill your reservation and provide our services
• Legitimate interests: To improve our services and communicate about our business
• Consent: For newsletter subscriptions and non-essential cookies
• Legal obligations: For tax and accounting purposes

4. How We Use Your Data

We use your personal data to:

• Process and manage your reservations
• Communicate with you about your booking or inquiries
• Send newsletters and promotional content (with your consent)
• Improve our website and services
• Comply with legal and tax obligations

5. Third-Party Services

5.1 UMAI (Reservation System)

Our reservation system is powered by UMAI. When you make a booking, your data is processed by UMAI according to their privacy policy. UMAI acts as a data processor on our behalf.

5.2 Google Services

We use several Google services:

• Google Maps: Embedded map for location information
• Google Fonts: Web fonts loaded from Google's servers
• These services may collect usage data according to Google's privacy policy

5.3 Mailchimp

Our newsletter service is provided by Mailchimp (Intuit). If you subscribe to our newsletter, your email address is processed by Mailchimp according to their privacy policy.

6. Cookies

6.1 Essential Cookies

We use essential cookies that are necessary for the website to function, including:

• Language preference cookies
• Session cookies for the reservation system

6.2 Third-Party Cookies

Third-party services may set their own cookies:

• Google Maps and Google Fonts may use cookies
• UMAI reservation widget may use cookies

6.3 Managing Cookies

You can control cookies through your browser settings. However, disabling essential cookies may affect website functionality.

7. Data Retention

We retain your personal data for as long as necessary:

• Reservation data: 3 years for accounting and tax purposes
• Contact inquiries: 2 years or until resolved
• Newsletter subscriptions: Until you unsubscribe
• Website analytics: 26 months (Google Analytics standard)

8. Your Rights Under GDPR

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal obligations)
• Data portability: Receive your data in a structured format
• Object: Object to processing based on legitimate interests
• Restrict processing: Limit how we use your data
• Withdraw consent: For newsletter subscriptions and optional cookies

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

10. International Data Transfers

Some of our service providers (Google, Mailchimp, UMAI) may transfer your data outside the EU. These transfers are subject to appropriate safeguards such as adequacy decisions or standard contractual clauses.

11. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us.

12. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Portuguese Data Protection Authority:

13. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last modified" date. For significant changes, we may provide additional notice.

14. Contact Us

For any questions about this privacy policy or our data practices, please contact us:

Last updated: April 2026