Legal
Privacy Policy
Effective date: May 27, 2026
This Privacy Policy explains how Travel-Luck collects, uses, stores, and protects personal data when you visit https://travel-luck.com, contact us, book a welcome call, or request Portugal travel planning support.
1. Who We Are
The data controller for this website is Julia Tulska, operating publicly as Travel-Luck. We are based in Lisbon, Portugal and provide private Portugal travel planning, tours, and travel support services.
For privacy questions or requests, contact us at info@travel-luck.com.
2. Personal Data We Collect
We collect only the information needed to answer inquiries, schedule calls, provide travel services, maintain the website, and respect your cookie choices. Depending on how you use the site, this may include:
- Contact details you choose to provide, such as your name, email address, phone number, WhatsApp handle, and message content.
- Trip-planning details you send to us, such as travel dates, group size, interests, preferred pace, accessibility needs, and booking questions.
- Booking information submitted through the welcome-call scheduler, which is provided by Cal.com.
- Newsletter signup details, if you submit your email address for travel updates.
- Cookie choice data stored in the first-party travel_luck_cookie_consent cookie.
- Basic technical data that may be processed by hosting and security systems, such as IP address, browser type, device information, pages requested, timestamps, and error logs.
We do not intentionally collect date or place of birth, passport details, payment card numbers, or other sensitive information through this website unless you provide it voluntarily in a direct message for a specific travel-planning purpose.
3. Why We Use Personal Data
We process personal data for the following purposes and legal bases under the GDPR:
| Purpose | Legal basis |
|---|---|
| Responding to questions, WhatsApp messages, emails, and trip requests | Legitimate interests and pre-contractual steps |
| Scheduling and managing welcome calls through Cal.com | Pre-contractual steps and legitimate interests |
| Planning, arranging, and supporting requested travel services | Contract performance or pre-contractual steps |
| Sending newsletters or marketing updates | Your consent, where required |
| Storing cookie preferences and keeping the site secure | Legal obligations and legitimate interests |
| Optional analytics or marketing cookies, if enabled | Your consent |
4. Third-Party Services
Some parts of the site rely on trusted service providers. The welcome-call booking iframe is provided by Cal.com. If you contact us through WhatsApp, Instagram, Facebook, TikTok, YouTube, or other social platforms, those platforms process data under their own privacy policies. Embedded or linked media may also be processed by the relevant platform, such as YouTube or Instagram.
Hosting, security, email, scheduling, and operational providers may process limited personal data on our behalf where needed to run the website and respond to your requests.
5. Cookies
We use an essential first-party cookie to remember your cookie choice for 180 days. Optional analytics and marketing cookies are used only if you choose to accept them in the cookie banner or settings panel. You can reopen Cookie Settings from the footer at any time and update your choice.
6. Sharing, Retention, and Security
We do not sell personal data. We share data only when needed to provide requested services, operate the website, communicate with you, comply with law, or protect our rights. We keep personal data only for as long as needed for the purpose it was collected, unless a longer period is required by law, accounting, dispute resolution, or legitimate business records.
We use reasonable organizational and technical measures to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure.
7. International Transfers
Some providers may process data outside Portugal or the European Economic Area. Where this happens, we rely on appropriate safeguards, such as adequacy decisions, standard contractual clauses, provider data processing terms, or another lawful transfer mechanism.
8. Your Rights
Subject to legal limits, you may:
- request access to the personal data we hold about you;
- ask us to correct incomplete or inaccurate data;
- ask us to delete data when we no longer need it or when consent is withdrawn;
- ask us to restrict or object to certain processing;
- request a portable copy of data you provided to us, where applicable;
- withdraw consent for marketing or optional cookies at any time;
- lodge a complaint with the Portuguese data protection authority, CNPD.
To exercise your rights, email info@travel-luck.com. We may need to verify your identity before completing a request.
9. Updates
We may update this Privacy Policy when our services, legal requirements, or data practices change. The current version will always be available at https://travel-luck.com/privacy-policy.