top of page

Privacy Policy – Villas Boas House

Last updated: 20 July 2026

​

This Privacy Policy explains how Vanguardpriority – Unipessoal Lda, owner of the Villas Boas House brand, collects, uses, stores, and protects personal data obtained through this website and in connection with the management of its tourist accommodation properties.

​

1. Data Controller

Vanguardpriority – Unipessoal Lda
Trading name: Villas Boas House
Email: vanguardpriority@gmail.com
Phone: +351 964408024

​

2. Personal Data We Collect

a) Website contact form

When you contact us through the website, we may collect:

  • Name

  • Email address

  • Phone number (if provided)

  • The content of your message

b) Reservation and guest data

Reservations may be made through third-party platforms such as Booking.com, Airbnb, Vrbo, or directly with Villas Boas House via email communication and bank transfer. For operational management of reservations and guest stays, we use the TalkGuest property management system, which may process guest data on our behalf. In this context, we may process:

  • Guest name

  • Email address

  • Phone number

  • Stay dates

  • Number of guests

  • Nationality and country of residence

  • Information required for check-in and legal compliance

  • Payment information related to bank transfers for direct reservations

c) Technical data

The website uses cookies and similar technologies and may collect:

  • IP address

  • Device type

  • Browser type

  • Pages visited

  • Website usage data

​

3. Purposes of Processing

We process personal data for the following purposes:

  • Responding to enquiries and contact requests

  • Managing reservations and guest stays

  • Communicating with guests before, during, and after their stay

  • Complying with legal obligations applicable to tourist accommodation activities

  • Issuing invoices and fulfilling tax obligations

  • Ensuring the security and proper functioning of the website

​

4. Legal Basis for Processing

Personal data is processed on the following legal bases:

  • Performance of a contract – reservation management and accommodation services;

  • Pre-contractual measures – responding to enquiries;

  • Legal obligation – compliance with obligations towards AIMA, the Portuguese Tax Authority, and other competent authorities;

  • Legitimate interest – business management, fraud prevention, and website security;

  • Consent – use of non-essential cookies, where applicable.

  • ​

5. Data Sharing

Personal data may be shared with:

  • Booking.com

  • Airbnb

  • Vrbo

  • TalkGuest

  • Wix (website hosting provider)

  • Portuguese Tax Authority (Autoridade Tributária)

  • AIMA and other legally competent authorities

  • IT and cloud storage service providers

We do not sell personal data to third parties.

​

6. Data Retention

Personal data is retained only for as long as necessary for the purposes described above, namely:

  • Reservation records, communications related to the stay, and commercial documentation: up to 10 years;

  • Accounting and tax documents: 10 years, in accordance with applicable Portuguese law;

  • Website contact requests that do not result in a reservation: up to 12 months;

  • Copies of identification documents: only for the period strictly necessary to comply with applicable legal obligations, after which they are securely deleted.

​

7. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or disclosure, including:

  • Access controls to systems and devices;

  • User authentication mechanisms;

  • Use of cloud services protected by two-factor authentication where applicable;

  • Internal confidentiality and security procedures.

​

8. Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access your personal data;

  • Request rectification of inaccurate data;

  • Request erasure of your data where applicable;

  • Request restriction of processing;

  • Object to processing;

  • Request data portability;

  • Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the email address indicated in Section 1.

​

9. Complaints

You have the right to lodge a complaint with the Portuguese Data Protection Authority:

Comissão Nacional de Proteção de Dados (CNPD)
Website: https://www.cnpd.pt

​

10. Changes to This Policy

We may update this Privacy Policy from time to time. The most recent version will always be available on this website.

bottom of page