In short: this website does not store your booking form and uses no tracking cookies. When you send a request, it goes directly to Leila through WhatsApp or email and is used only to answer you, give you a quote and, if you book, provide the service.
1. Who is responsible for your data
The data controller is [Leila's full legal name], trading as Drive with Leila, tax number (NIF) [000 000 000], with address at [address, postcode, city], Portugal.
Contact for any privacy question: email or WhatsApp +351 963 499 676.
2. What data we collect
Booking requests
When you use the booking form, you choose to send the following to Leila by WhatsApp or email: your name, email address, mobile number, trip type, cities or route, date and time, last day of the journey, number of passengers, pickup place and any notes you add (for example flight number, luggage or child seats).
The form works entirely in your browser: it prepares the message, and you send it yourself from WhatsApp or your email app. The website does not save or transmit this information to any server of its own.
Conversations and bookings
Messages you exchange with Leila, quotes, booking details and, where applicable, billing information needed to issue an invoice.
Technical data
Like any website, the server that delivers these pages receives technical information such as your IP address, browser type and the pages requested. This is processed by our hosting provider for security and to deliver the website.
3. Why we use it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering your request and preparing a quote | Steps taken at your request before a contract — Art. 6(1)(b) |
| Providing the transport service you booked | Performance of a contract — Art. 6(1)(b) |
| Invoicing and accounting | Legal obligation — Art. 6(1)(c) |
| Keeping the website secure and working | Legitimate interest — Art. 6(1)(f) |
We do not use your data for advertising, we do not build profiles and we do not sell or rent personal data. No decisions are made about you by automated means.
4. Who receives your data
- WhatsApp (WhatsApp Ireland Ltd / Meta), if you choose to send your request or talk by WhatsApp. WhatsApp's own privacy policy applies to its service.
- Email providers — yours and Leila's — if you choose email.
- Hosting: Vercel Inc., which delivers this website.
- Accountant, for invoicing, and public authorities when the law requires it.
5. Transfers outside the European Union
Some of these providers may process data outside the European Economic Area, for example in the United States. Where this happens, transfers rely on safeguards recognised by the GDPR, such as the EU–U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.
6. How long we keep it
- Requests that do not become a booking: deleted no later than 12 months after the last contact.
- Booking and invoicing records: kept for the period required by Portuguese tax and accounting law.
- Server logs: kept by the hosting provider for a short, limited period for security purposes.
7. Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Where processing relies on your consent, you can withdraw it at any time.
To exercise any of these rights, contact Leila by email or WhatsApp. You will receive a reply within one month.
You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt.
8. Security
This website is served only over an encrypted connection (HTTPS). Booking information is kept to what is needed and is accessed only by Leila and the providers listed above.
9. Children
This website is intended for adults planning a trip. Information about children travelling as passengers (for example to arrange child seats) should be provided by a parent or guardian.
10. Changes to this policy
If this policy changes, the new version will be published on this page with a new date.