How I handle your details.

This site is run by Tiago Monteiro, a self-employed licensed tuk tuk tour operator in Albufeira, Faro, Portugal (NIF 245955330 · [[ Licence no. ]]). For anything about your data, email ola@borawithtiago.com or message +351963915521. That reaches Tiago directly — it's a one-man business, so there's no data protection department to hide behind.

If you ask for the week plan or the discount code: your email address, and optionally your first name and roughly when you're arriving. The arrival month is the whole point — it lets me send things that are useful the week you're actually here, instead of a newsletter into the void.

I also record which page you arrived on, where you came from, and any campaign tag in the link. That's so I can tell which of my listings actually bring people in and stop paying for the ones that don't.

If you message on WhatsApp, that conversation lives in WhatsApp under Meta's own terms, not mine.

I email you because you ticked the box asking me to — that's consent under UK and EU GDPR, and under PECR for the marketing emails. The consent wording you agreed to is stored alongside your address with the date and time, so there's a record of exactly what you said yes to.

Recording how you found the site is done on legitimate interests: knowing which channels work is necessary to run the business, and it doesn't tell me anything personal about you.

Three suppliers, all acting on my instructions under data processing agreements: Neon (database hosting, EU region), Resend (sends the emails) and Vercel (hosts the site). Stripe handles card payments once booking goes live — I never see or store your card details.

That's it. I don't sell your details, I don't share them with hotels or other operators, and I don't hand them to advertisers.

Until you unsubscribe, or three years after we last spoke — whichever comes first. Then it's deleted. If you unsubscribe I keep your email on a suppression list, because that's the only way to be sure I never email you again by accident.

You can ask for a copy of what I hold, ask me to correct it, or ask me to delete it — and I'll do it within a month, free. Unsubscribing takes one click from the bottom of any email, and you can withdraw consent at any time without giving a reason.

If you think I've handled your data badly, tell me first and I'll fix it. If that doesn't satisfy you, you can complain to the Comissão Nacional de Protecção de Dados in Portugal, or to your own country's regulator — the ICO if you're in the UK.

The site sets no advertising or analytics cookies. It stores one flag in your browser so the sign-up box doesn't reappear once you've closed it — that never leaves your device and identifies nobody. If measurement or advertising tags are added later, you'll be asked first.