Skip to content
Algarve Circle
Privacy Policy

Privacy Policy

Last updated: 9 June 2026

Your privacy is fundamental to how we operate Algarve Circle. This policy explains what we collect, why, how we use it, and what control you have. We're GDPR-compliant and we mean it.

Quick summary

  • Anonymous analytics by default. We don't track you across sessions until you give explicit consent.
  • No selling data. Ever. Not to advertisers, not to third parties, not anywhere.
  • No third-party tracking pixels beyond GA4 + our own. No Meta Pixel, no LinkedIn tag, no advertising network trackers.
  • You can export everything anytime. Full data export from your dashboard.
  • You can delete everything anytime. One-click account deletion.

1. What we collect

We collect only what we need:

  • Account information, email, display name (optional), preferred language, timezone
  • Business listing data, anything you choose to publish on your listing
  • Subscription data via Stripe, billing information stays at Stripe (PCI-compliant)
  • Anonymous analytics by default, page views aggregated without per-user trail
  • Identified analytics if you consent, full behavioural trail for your own dashboard analytics + AC platform optimisation

2. Why we collect it

  • To run your account + subscription
  • To show your listing to people in the Algarve
  • To send transactional emails (booking inquiries, review notifications, billing)
  • To give you analytics on your own listing performance
  • To improve the platform itself (aggregate, anonymised)

3. Cookies

We use:

  • Essential cookies, for authentication, session, cookie consent (cannot be disabled)
  • Analytics cookies (optional), only with your explicit consent. Used for GA4 + our own tracking.
  • Marketing cookies, none. We don't run a marketing pixel network.

4. Who has access to your data

  • You. Full access to all your data through your dashboard.
  • AC operators (Adam + designated team). Access for support + moderation, governed by RLS policies in our database.
  • Stripe. For payment processing only.
  • Supabase. Our database provider (EU-hosted, GDPR-compliant).
  • Brevo. Our email-sending provider (EU-based).
  • Anthropic. For optional AI features (translation, content moderation), used at point of request only, never with persistent identifiers.
  • Google. For GA4 (with your consent) + Sign in with Google (if you use it).
  • Apple. For Sign in with Apple (if you use it).

That's the whole list.We don't share data with advertisers, data brokers, marketing networks, or anyone else.

5. Your rights (GDPR)

Under GDPR you have rights to:

  • Access, see what we hold about you
  • Rectification, correct anything wrong
  • Erasure, delete your account + data
  • Portability, export everything in a machine-readable format
  • Object to processing, withdraw analytics/marketing consent
  • Lodge a complaint, with the Portuguese CNPD (Comissão Nacional de Proteção de Dados)

All available from your dashboard or by emailing support@algarvecircle.com.

6. Data retention

  • Account data, kept while your account is active; deleted within 30 days of account deletion
  • Anonymous analytics, 24 months, then automatically purged
  • Identified analytics, kept while consent is active; deleted on consent withdrawal
  • Stripe billing records, retained for 10 years per Portuguese tax law

7. Children

You must be at least 13 years old to use AC. It is not intended for children under 13, and if we learn we've collected data from someone under 13, we delete it.

8. International transfers

Your data is processed in the EU. Stripe and some other providers may process in the US under Standard Contractual Clauses (SCCs).

9. Changes to this policy

Material changes are notified by email + dashboard. The current version is always at this URL.

10. Contact

Privacy questions or requests? Email support@algarvecircle.com, we respond within 30 days, usually within 24 hours.