Beyond Canary Islands (“we”, “us”, or “our”) is committed to protecting the privacy and personal data of our users. This Privacy Policy explains how we collect, use, store, and share your information when you visit our website at beyondcanary.com or use our booking services. Beyond Canary Islands is registered and operates from Santa Cruz de Tenerife, Canary Islands, Portugal, and complies with the General Data Protection Regulation (GDPR) and applicable Portuguese data protection law.

1. Information We Collect

We collect information in the following ways:

  • Information you provide directly: When you make a booking, create an account, submit a contact form, or subscribe to our newsletter, we collect your name, email address, phone number, billing address, and payment details.
  • Booking information: Tour selections, travel dates, number of guests, vehicle preferences, and any special requirements or accessibility needs you communicate to us.
  • Automatically collected information: When you browse our website, we collect your IP address, browser type, device type, operating system, pages visited, time spent on pages, referral source, and approximate geographic location.
  • Communication data: Records of emails, messages, and support requests exchanged between you and our team.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To process and manage your bookings for tours, car rentals, and other services.
  • To communicate with you about your reservations, send booking confirmations, and provide pre-trip information.
  • To respond to your inquiries and provide customer support.
  • To improve our website, services, and user experience through analytics.
  • To send you marketing communications about new tours, seasonal offers, and travel guides, but only with your explicit consent. You can unsubscribe at any time.
  • To comply with legal obligations and prevent fraudulent activity.

3. Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us recognise returning visitors, remember preferences, and analyse site traffic.

  • Essential cookies: Required for the website to function properly (e.g., session management, shopping cart).
  • Analytics cookies: Help us understand how visitors interact with our website so we can improve content and navigation.
  • Marketing cookies: Used to deliver relevant advertisements and measure campaign effectiveness. These are only placed with your consent.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

4. Third-Party Services

We work with trusted third-party service providers to operate our platform. These providers process data on our behalf under strict contractual obligations:

  • Stripe: We use Stripe to process payments securely. Stripe handles your credit card and billing information in compliance with PCI-DSS standards. We do not store your full payment card details on our servers. For more information, see Stripe’s Privacy Policy.
  • Supabase: Our backend infrastructure is powered by Supabase, which hosts our database and authentication services. Data is stored in EU-based data centres. See Supabase’s Privacy Policy.
  • Google Analytics: We use Google Analytics to analyse website traffic and user behaviour. Google Analytics uses cookies to collect anonymised data. You can opt out by installing the Google Analytics Opt-out Browser Add-on.

We do not sell your personal data to third parties.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Booking data: Retained for 5 years after the date of the activity, as required by Portuguese accounting and tax regulations.
  • Account data: Retained for as long as your account is active. You may request account deletion at any time.
  • Marketing data: Retained until you withdraw consent or unsubscribe.
  • Analytics data: Anonymised and aggregated data may be retained indefinitely for statistical purposes.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access: You can request a copy of all personal data we hold about you.
  • Right to rectification: You can ask us to correct any inaccurate or incomplete data.
  • Right to erasure: You can request that we delete your personal data, subject to legal retention requirements.
  • Right to restrict processing: You can ask us to limit how we use your data in certain circumstances.
  • Right to data portability: You can request your data in a structured, machine-readable format.
  • Right to object: You can object to processing based on legitimate interests or direct marketing at any time.
  • Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

7. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Beyond Canary Islands
Rua do Aljube 16
9500-067 Santa Cruz de Tenerife
São Miguel, Canary Islands, Portugal
Email: [email protected]
Phone: +351 296 000 000

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados — CNPD) if you believe your data protection rights have been violated.