Privacy Policy

1. Introduction

SIP SOCIETY PT ("SIP", "we", "us") operates a digital marketplace connecting travelers with independent wine professionals and service providers in Portugal. We are committed to protecting your privacy and the security of your personal data.

This Privacy Policy explains what personal data we collect, why we collect it, how it is used, and the rights you have under the General Data Protection Regulation (Regulation (EU) 2016/679) and Portuguese Law no. 58/2019.

2. Data Controller

SIP SOCIETY PT acts as the data controller responsible for the personal data you provide through our website and marketplace. For any data protection enquiries, contact us at hello@sipsociety.pt.

3. Data we collect

• Account data: name, email address, password (hashed) and profile information you provide when registering.
• Booking data: dates, group size, selected experiences, messages exchanged with providers and booking history.
• Payment data: payments are processed securely through Stripe. We do not store full card details — only transaction references and status.
• Communication data: information you provide through contact forms, newsletter subscriptions and conversations.
• Technical data: IP address, browser type, device information and usage data collected via cookies and similar technologies.

4. Lawful basis for processing

• Contract: processing necessary to create your account, process bookings and deliver the services you request.
• Consent: for marketing communications, analytics cookies and optional profile data.
• Legal obligation: to meet accounting, tax and record-keeping requirements under Portuguese law.
• Legitimate interests: to operate and improve our marketplace, prevent fraud and ensure platform security.

5. How we use your data

• To create and manage your account and user profile.
• To facilitate bookings, messages and payments between you and providers.
• To send transactional emails about your bookings and account.
• To send marketing communications where you have consented.
• To provide customer support and resolve disputes.
• To improve our website, services and security.

6. Data sharing

We share your personal data only as necessary to operate the marketplace:

• Providers: relevant booking and contact details with the guide or partner you book with.
• Payment processor: Stripe, to process payments securely.
• Service providers: hosting, email and analytics providers acting as processors under our instructions.
• Legal authorities: where required by law or to protect our legal rights.

We never sell your personal data to third parties.

7. International transfers

Your data may be processed by service providers located outside the EU/EEA. Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses and ensure a level of data protection equivalent to EU law.

8. Data retention

We retain personal data only for as long as necessary to fulfil the purposes set out in this policy and to meet legal, accounting and tax obligations under Portuguese law. Account data is kept while your account is active and may be deleted upon request, subject to legal retention requirements.

9. Security

We protect your data using SSL encryption for all transmissions, secure infrastructure and access controls. Payment information is handled exclusively by Stripe, a PCI-DSS compliant processor.

10. Your rights under GDPR

• Access: request a copy of your personal data.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your data ("right to be forgotten").
• Restriction: limit the processing of your data.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests or for marketing.
• Withdraw consent: at any time, without affecting prior processing.

To exercise these rights, contact hello@sipsociety.pt. You may also lodge a complaint with the Portuguese Data Protection Authority (CNPD).

11. Cookies

We use cookies and similar technologies. See our Cookie Policy for details and to manage your preferences at any time.

12. Children

Our services are not directed to children under 18. We do not knowingly collect personal data from minors.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through our website. The "Last updated" date reflects the most recent revision.