PRIVACY POLICY

1. Who we are

Last Bad Decision is the trading name of Episódio Inesquecível Unipessoal Lda, responsible for the processing of personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

2. What personal data we collect

We may collect and process the following personal data:

• Name

• Email address

• Phone number

• Information you voluntarily provide via contact forms, email, or messaging services such as WhatsApp

• Any other information you choose to share with us in the context of an enquiry or booking request

We do not knowingly collect data from minors.

3. How we collect personal data

We collect personal data when you:

• Submit a contact or enquiry form on our website

• Contact us by email, phone, or WhatsApp

• Request information about our services

4. Purpose of processing

We process personal data for the following purposes:

• Responding to enquiries and requests

• Providing information about our services

• Preparing proposals, itineraries, or bookings

• Communicating with you in relation to your request or booking

• Complying with legal and contractual obligations

We do not use your data for automated decision-making or profiling.

5. Legal basis for processing

We process personal data based on one or more of the following legal grounds:

• Your consent

• The performance of steps prior to entering into a contract

• Compliance with legal obligations

• Our legitimate interests in responding to enquiries and operating our business

6. Data sharing

We do not sell or rent your personal data.

Where necessary to provide our services, we may share relevant data with trusted third parties such as suppliers or partners involved in the delivery of a requested service. Such data sharing is limited to what is strictly necessary and subject to appropriate safeguards.

7. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements.

8. Data security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration.

9. Your rights

Under applicable data protection laws, you have the right to:

• Access your personal data

• Request rectification of inaccurate or incomplete data

• Request erasure of your data

• Request restriction of processing

• Object to processing

• Request data portability, where applicable

To exercise your rights, please contact us using the details provided on our website.

10. Third-party links and services

Our website may contain links to third-party websites or services, including messaging platforms such as WhatsApp. We are not responsible for the privacy practices of such third parties and encourage you to review their privacy policies.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated revision date.

12. Contact

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details provided on our website.