Privacy Policy Last updated: 20 May 2026 Who we are Casa Colab is a retreat venue based in Portugal. This privacy policy explains how we collect, use, and protect your personal information when you interact with us — whether through our website (thecasacolab.com), our Google Ads inquiry form, WhatsApp, email, or in person during a booking or stay. For questions about this policy or your data, contact: thecasacolab@gmail.com What information we collect When you contact us or book a stay, we collect: • Identification: your name, email address, and phone number (when you provide them via our inquiry form, WhatsApp, or email) • Booking details: preferred dates, group size, type of retreat or event, and any specific requirements you share with us • Communication history: the content of messages you send us so we can respond and keep context across the booking journey • Payment information: for confirmed bookings, the details necessary to process invoices and deposits (collected and stored by our payment processors, not by us) • Website data: standard analytics from visits to thecasacolab.com (browser type, pages viewed, approximate location) handled by our website host We do not knowingly collect data from children under 16. Why we collect it and our legal basis We process your information to: • Respond to your inquiries — legal basis: your consent and our legitimate interest in running the business • Provide quotes, send agreements, and manage your booking — legal basis: performance of a contract with you • Send booking-related communication like confirmations, payment requests, and check-in details — legal basis: performance of a contract • Improve our service through aggregated, anonymous analytics — legal basis: legitimate interest • Comply with our legal obligations in Portugal, including tax and accounting requirements — legal basis: legal obligation We will never sell your personal information. Who we share it with We share your information only with the service providers we use to run Casa Colab: • Google Workspace (email, calendar) — to receive your messages and schedule your stay • Google Ads — when you submit a lead form from our ad, the form is delivered to us via Google’s systems • Wix — our website and invoicing platform • Notion — our internal booking management system • Payment processors (Revolut, Millennium BCP, PayPal) — for invoices and deposits • Portuguese tax authorities and our accountants — for the specific records required by law All of these processors are bound by their own privacy and security obligations under EU law. How long we keep it • Inquiries that don’t result in a booking: we keep your contact details for up to 2 years in case you reach out again, then delete them • Confirmed bookings: we keep booking records for the period required by Portuguese tax law (currently 10 years) • Marketing analytics: aggregated and anonymous, kept indefinitely Your rights under GDPR If you are in the EU, EEA, or UK, you have the right to: • Access the personal information we hold about you • Correct any inaccurate or incomplete information • Delete your information (subject to our legal obligation to retain certain records) • Restrict or object to our processing of your information • Portability: receive your data in a portable, machine-readable format • Withdraw consent at any time for processing based on consent • Lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados, CNPD) at cnpd.pt To exercise any of these rights, email thecasacolab@gmail.com. We’ll respond within 30 days. Cookies and tracking Our website uses cookies through our hosting platform (Wix) for essential functions, analytics, and to remember preferences. You can manage cookies via your browser settings. If you submit a lead form from a Google ad, Google may also set cookies related to ad performance. International data transfers Some of our service providers (notably Google) may transfer data outside the EU. These transfers are covered by standard contractual clauses or adequacy decisions in line with EU data protection law. Updates to this policy We may update this policy from time to time. The “Last updated” date at the top shows when the current version came into effect. We’ll notify you of significant changes if we have your contact information. Contact For any privacy-related questions or to exercise your rights: Email: thecasacolab@gmail.com Casa Colab, Portugal