1. Introduction

At Gaia Porto Stays, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, make a booking, or use our services.

We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our services, you consent to the data practices described in this policy.

Note: This Privacy Policy applies to all personal information collected through our website, booking platform, email communications, and during your stay at our hostel. We may update this policy from time to time, and we encourage you to review it periodically.

2. Information We Collect

2.1. Personal Information

We collect personal information that you voluntarily provide to us when you:

  • Make a booking or reservation
  • Create an account on our website
  • Subscribe to our newsletter
  • Contact us with inquiries or feedback
  • Participate in surveys or promotions

This information may include:

  • Full name and contact details (email, phone number, address)
  • Payment information (credit card details, billing address)
  • Passport or ID information (as required by law)
  • Travel preferences and special requirements
  • Demographic information

2.2. Automated Information Collection

When you visit our website, we automatically collect certain information about your device and browsing activities, including:

  • IP address and location data
  • Browser type and version
  • Operating system
  • Pages visited and time spent on our site
  • Referring website addresses
  • Cookies and similar tracking technologies

2.3. Information from Third Parties

We may receive information about you from third-party booking platforms, travel agencies, or partners who you have authorized to share your information with us.

3. How We Use Your Information

We use the information we collect for various purposes, including:

Purpose Legal Basis
Processing your bookings and reservations Contractual necessity
Managing your stay and providing services Contractual necessity
Processing payments and preventing fraud Legal obligation and legitimate interest
Sending booking confirmations and updates Contractual necessity
Personalizing your experience Legitimate interest
Sending marketing communications (with consent) Consent
Improving our services and website Legitimate interest
Complying with legal obligations Legal obligation

4. Data Sharing and Disclosure

We may share your personal information in the following circumstances:

4.1. Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as:

  • Payment processors
  • Email service providers
  • Marketing and analytics partners
  • Customer support platforms
  • IT and hosting services

4.2. Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government agencies).

4.3. Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred to the new entity.

4.4. With Your Consent

We may share your information with third parties when we have your explicit consent to do so.

International Transfers: As we are located in Portugal, your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable law.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of sensitive data
  • Secure socket layer (SSL) technology for online transactions
  • Regular security assessments and updates
  • Access controls and authentication procedures
  • Staff training on data protection

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but we work to maintain commercially acceptable protection for your data.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Our general retention periods are:

  • Booking information: 7 years from your last stay (for tax and legal purposes)
  • Marketing data: Until you unsubscribe or withdraw consent
  • Website analytics: 26 months
  • Customer service communications: 3 years

When we no longer need to retain your personal information, we will securely delete or anonymize it.

7. Your Rights

Under data protection laws, you have certain rights regarding your personal information:

7.1. Access and Portability

You have the right to request access to the personal information we hold about you and to receive a copy of that information in a structured, machine-readable format.

7.2. Correction

You have the right to request correction of any inaccurate or incomplete personal information we hold about you.

7.3. Erasure

You have the right to request the deletion of your personal information in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

7.4. Restriction and Objection

You have the right to request restriction of processing of your personal information or to object to certain types of processing.

7.5. Withdraw Consent

Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the details provided in Section 10. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and personalize content. Cookies are small text files that are stored on your device when you visit our website.

We use the following types of cookies:

  • Essential Cookies: Necessary for the website to function properly
  • Performance Cookies: Help us understand how visitors interact with our website
  • Functionality Cookies: Remember your preferences and settings
  • Marketing Cookies: Used to deliver relevant advertisements

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our website.

For more information, please see our separate Cookies Policy.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children without parental consent.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will take steps to delete that information.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Data Protection Officer
Gaia Porto Stays
5875 Airport Rd, Mississauga, ON L4V 1N1, Canada
Phone: +19056779900
Email:[email protected]

You also have the right to lodge a complaint with the relevant data protection authority in your country.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website with a new effective date.

We encourage you to periodically review this page for the latest information on our privacy practices.

Last Updated: This Privacy Policy was last updated on October 15, 2025.