Privacy Policy

Last updated: 16/05/2026

1. Data controller

LUXFARE ("we", "our") is the controller of personal data collected through the website luxfare.eu and related services. Contact: info@luxfare.eu.

2. Personal data we collect

We collect: name, email, phone, pickup and drop-off addresses, travel dates and times, number of passengers, vehicle type chosen, optional notes, and payment data (processed directly by Stripe, never stored on our servers). We also collect technical browsing data (IP address, browser, OS) via cookies.

3. Purposes

Your data is processed to: (a) perform the transport contract; (b) issue invoices and comply with tax obligations; (c) communicate with you about your booking; (d) prevent fraud; (e) continuously improve our services; (f) marketing, only with your express consent.

4. Legal basis

Processing is based on: (a) contract performance (Art. 6(1)(b) GDPR); (b) compliance with legal obligations (c); (c) legitimate interest in fraud prevention and security (f); (d) consent where applicable (a).

5. Recipients and transfers

Your data may be shared with: the partner operator handling your transport, Stripe (payment processing), InvoiceXpress (certified invoicing), Resend (transactional email), Supabase (data storage), Google Maps (route calculation). We do not sell your data. Some transfers may occur outside the EEA, always with appropriate safeguards (Standard Contractual Clauses).

6. Retention

Booking data is kept for 10 years to comply with tax obligations. Marketing data is kept until consent withdrawal. Technical logs are kept for 6 months.

7. Your rights

You have the right to access, rectify, erase, restrict or object to the processing of your data, and the right to portability. You may exercise these rights by emailing info@luxfare.eu. You may also lodge a complaint with the Portuguese Data Protection Authority (cnpd.pt).

8. Security

We implement technical and organisational measures to protect your data (encryption in transit and at rest, access controls, audit logs). However, no system is 100% secure and we cannot guarantee absolute security.

9. Changes to this policy

This policy may be updated. The last-updated date is shown at the top. Periodic review is recommended.