Politique de confidentialité

Cette traduction vous est proposée par commodité. Seule la version anglaise fait foi : en cas de différence, c'est l'anglais qui prévaut.

Last updated: 9 November 2026

This policy explains what personal data we collect when you visit our website, book one of our apartments or stay with us, what we use it for, who we share it with, how long we keep it, and the rights you have over it. We handle personal data under the EU General Data Protection Regulation (GDPR) and Portuguese data protection law.

1. Who we are

Algarve Beach Apartments is a trading name of KLT Property Services, Lda (NIPC 517221845), Rua do Chalet, 2, 8.º A, Albufeira, Portugal. We are the controller of the personal data described here.

For anything about your personal data, write to booking@algarvebeachapartments.com.

2. What we collect, and why

Your booking. The lead guest's name, email address, phone number, country and preferred language; the name and age of each person staying, and the nights each one stays; the dates, the apartment and the price. We need these to make your booking, to keep you informed about it, and to prepare the apartment (ages tell us, for example, when a cot is needed). The legal basis is the contract between us.

Your travel. How and when you arrive and leave: flight numbers, times, where you are travelling from and whether you are hiring a car. We use them to arrange your check-in, cleaning and any airport transfer you book. The legal basis is the contract.

Registration with the Portuguese authorities. Portuguese law requires every holiday let to register its foreign guests with AIMA (formerly SEF), through its SIBA system. For each guest we therefore ask for date and place of birth, nationality, country of residence, and the type, number and issuing country of their passport or identity card; or a Portuguese tax number (NIF) instead, where the guest has one. The legal basis is our legal obligation.

Payments. Card and online bank payments are taken on Revolut's secure checkout: we see the amount, the date and the payment's reference, never your card number. When you pay by bank transfer, we see the name and account the money came from. If a security deposit is refunded to you, we ask for the bank details to send it to. The legal basis is the contract, and our legal obligation to keep accounting records.

Extras and requests. The extras you choose, such as a transfer, a cot or a welcome pack. A welcome pack can carry a note about allergies or diet, which may be information about your health: give it only if you wish, and we use it only to prepare the pack. The legal basis for that note is your explicit consent, which you can withdraw by removing it.

Messages and feedback. The emails and WhatsApp messages we exchange with you, and the ratings and comments you leave about your stay. We keep messages to answer you and to know the history of your booking, and we use feedback to improve. We may show your feedback to the apartment's owner. We publish it anywhere else only with your permission, and then with your first name only. The legal basis is the contract and our legitimate interest in running and improving our service.

Visits to our website. Like any website, ours records each request it receives, with the visitor's IP address, browser and the page asked for, to keep the site running and secure. We count visits with Cloudflare Web Analytics, which uses no cookies and does not identify you. The legal basis is our legitimate interest in a working, secure website.

If you booked through Airbnb, Booking.com or Vrbo, that platform gives us your name, the dates and the number of guests, and sometimes a phone number or email address, under its own privacy policy. We do not collect any of the special categories of personal data, other than the optional welcome pack note above.

3. Who we share it with

We never sell personal data. We share it only as far as each of these needs it:

• The apartment's owner, who sees the bookings at their apartment, including the lead guest's name.
• Cleaning and management companies at the complex, who receive the stays at the apartments they look after: the guests' names, number, contact details and arrival and departure times. A complex's administration may receive a list of the month's arrivals.
• Our airport transfer company, when you book a transfer: your name, your flight, the number of passengers and your phone number.
• The authorities: AIMA, through SIBA, as described above; the tax authority and Albufeira's council, for tax and tourist tax; and any authority entitled by law to ask.
• Our accountants, for the company's accounts and tax.
• The service providers who run parts of our business for us, under contracts that oblige them to use the data only on our instructions: Railway (hosting of our website and database), Google (email and backups), Revolut and Wise (payments), WhatsApp (messages), and Cloudflare (website analytics).

Our pages also load their fonts from Google Fonts and their maps from OpenStreetMap, so your browser's IP address reaches those services when you view them.

4. Data outside the European Union

Some of these providers are based in, or store data in, the United States. Where personal data leaves the European Economic Area, it is protected as the GDPR requires: by the EU–US Data Privacy Framework, where the provider is certified under it, or by the European Commission's standard contractual clauses.

5. News from us

If you have stayed with us, we may occasionally email you news about our apartments, as Portuguese law allows for a business's own customers. Every such email has a link to unsubscribe, which stops them at once. We never send marketing to anyone who has not booked with us without asking first.

6. Instagram and Facebook

We post on Instagram and Facebook about our apartments and the Algarve. We post a guest's photo or words only with their permission, and with their first name only. If you write to us or comment there, Meta's own privacy policy also applies. The links in our posts and profiles carry a tag that tells us a visit came from there; it does not identify you.

7. Cookies

Our website uses only the cookies it needs to work: one remembers the language you chose, and others keep you signed in and protect the forms you send. We use no advertising or tracking cookies, so we do not ask for your consent to them.

8. How long we keep it

• Bookings and payments, with the guest details recorded on them: ten years after the stay, as Portuguese tax law requires for the records of a sale.
• Your email address for our news: until you unsubscribe. After that we keep only the record that you unsubscribed, so we never write to you again.
• Backups of our database: up to two years, after which they are deleted.
• Website request records: for a short time, kept by our hosting provider.

9. Your rights

You can ask us for a copy of your personal data, to correct it, to delete it, to limit how we use it, to object to how we use it, and to receive it in a form you can take elsewhere. Where we rely on your consent, you can withdraw it at any time. Some of these rights are limited where the law requires us to keep data, for example for tax or for registration with the authorities. Write to booking@algarvebeachapartments.com; it costs nothing, and we answer within a month.

You also have the right to complain to Portugal's data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

10. Changes to this policy

When what we do with personal data changes, we update this page and the date at the top.