Privacy Policy

Depending on how you interact with us, we may process:

• identification and contact data, such as name, email, and phone number;
• booking data, such as date, time, experience, participants, and preferences you communicate;
• data required for payment, transaction status, and references. Full card details are processed by the payment provider and are not stored by us;
• content submitted through forms, chat, email, or support requests;
• technical and usage data, such as IP address, device, browser, security logs, and site interactions. Analytics or advertising data is only processed when applicable and in line with your cookie choices.

• Bookings and service delivery: steps before entering into a contract and performance of the contract.
• Payments, billing, and mandatory records: performance of the contract and compliance with legal obligations.
• Enquiries and customer support: steps at your request, performance of the contract, or our legitimate interest in responding and managing customer relationships.
• Security, abuse prevention, and technical diagnostics: our legitimate interest in protecting the website, users, and our systems.
• Non-essential analytics, advertising, and marketing: your consent, which you can refuse or withdraw at any time without affecting earlier lawful processing.

We do not sell your personal data. We may share it only as necessary with the following providers or categories of recipients:

• Vercel — website hosting and delivery;
• Upstash — storage of website enquiries, temporary bookings, and payment states;
• SimplyBook.me — booking management;
• Jotform — assistance through the Maria chat;
• Ifthenpay e SBPay — payment processing and confirmation;
• Google/Gmail — operational communications and, with consent, analytics or advertising services when enabled;
• Cookiebot — management and recording of cookie preferences;
• YouTube e Google Maps — embedded content, subject to your preferences where consent is required;
• public authorities, courts, or professional advisers where required by law or necessary to establish or defend legal rights.

Some providers may process data outside the European Economic Area. In those cases, we require a GDPR-recognised transfer mechanism, such as an adequacy decision or Standard Contractual Clauses, together with supplementary safeguards where needed.

We retain data only for as long as needed for the purpose for which it was collected and to meet legal obligations. Records subject to tax or accounting duties may need to be retained for 10 years. Enquiries are retained for as long as needed to respond and follow up. Consent-based data is processed until consent is withdrawn or it is no longer needed. Technical logs and temporary booking states are deleted or aggregated according to the applicable operational and security periods.

Under the GDPR, you may request access, rectification, erasure, restriction of processing, or portability of your data, and you may object to certain processing. Where processing relies on consent, you may withdraw it at any time.

Send your request to anotherworld.porto@gmail.com. We normally respond within one month. We may request information needed to confirm your identity.

We do not use data collected through this website for solely automated decisions that produce legal or similarly significant effects.

We use necessary cookies to provide the website and, with your permission, preference, statistics, and marketing cookies. You can change or withdraw your choice at any time.