Privacy policy

Last Updated: June 2026

This Privacy Policy describes how Madeira Quest collects, uses, stores, and protects the personal data of users who visit the website, make reservations, or participate in experiences promoted by the brand.

This Policy applies to users who visit and make reservations on the website, as well as to the in-person experience.

Madeira Quest is committed to processing personal data transparently and securely, and in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and other legislation regarding personal data protection and privacy.

 Data Controller

The processing of personal data is carried out by the following entity:

Data Controller: Diana Margarida Ribeiro Lima

Tax ID (CPF): 224325450

Address: Estrada Monumental 456B, 9000-250, Funchal, Madeira

Email: dianawdlima@gmail.com

Phone: 932453503

Should a Data Protection Officer (DPO) be appointed, this information will be updated in this Policy.

Personal Data Collected

Madeira Quest may collect various types of personal data, depending on the user's interaction with the brand, including:

The following data may be collected:

a) Data provided directly by the user: name, email, phone number, number of participants, language selected for the experience, information provided during booking, and messages sent via email, contact form, or WhatsApp.

b) Data collected automatically: IP address, device and browser type, language, pages visited, date and time of access, cookies, and similar technologies.

c) Experience photographs: group photos may be taken at the start of or during the experience. The use of these images for promotional purposes (website, social media, or promotional materials) will only occur with the participants' prior, specific, and explicit consent.

Porpuse of Data Use

The personal data collected may be used to:

  • Process and manage bookings;
  • Communicate with participants before, during, and after the experiment;
  • Provide customer support;
  • Send information related to the booking;
  • Manage the operational aspects of the experiments;
  • Improve the website and services;
  • Comply with legal obligations;
  • Prevent fraud or misuse of the services;
  • Send marketing communications, where consent has been given. Users may withdraw their consent to receive marketing communications at any time via the unsubscribe link included in emails or by contacting Madeira Quest directly.

Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

Lega Basis for Processing

Personal data processing is carried out based on:

·      Performance of a contract or pre-contractual measures

·      Compliance with legal obligations

·      Legitimate interest of the responsible entity (e.g., operational security, operational management, fraud prevention)

·      Consent of the data subject, where applicable (e.g., marketing, photographs)

Data Sharing with Third Parties

Madeira Quest may share personal data with service providers essential to its operations, namely:

·      Booking platforms

·      Payment platforms

·      Website hosting services

·      Statistical analysis tools

·      Email and communication services

·      Social media management platforms

·      Shopify (online store hosting and booking management)

These third parties will only have access to the data strictly necessary to provide their respective services and are contractually obligated to ensure data confidentiality and security. Madeira Quest does not sell personal data to third parties.

International Data Transfers

Some service providers, such as Shopify, may process personal data outside the European Economic Area (EEA), specifically in Canada and the United States.

Whenever this occurs, appropriate safeguards will be applied, including:

• Standard Contractual Clauses approved by the European Commission

• Additional protection mechanisms required by the GDPR

These measures ensure a level of protection equivalent to that required in the European Union.

Payments

Payments made through the website are processed by secure external platforms. Madeira Quest does not store complete bank card details.

Cookies

The Madeira Quest website uses cookies and similar technologies to ensure proper functioning, improve the browsing experience, analyze usage statistics, and personalize content. Cookies are small files stored on the user's device when they visit the site.

There are different types of cookies used on the site:

a) Strictly necessary cookies: These cookies are essential for the website's operation and enable basic features such as navigation, security, and making reservations. They cannot be disabled via the cookie management system; they can only be blocked through browser settings. Their use does not require user consent.

b) Performance and statistics cookies (analytics): These cookies allow for the analysis of how visitors use the site, including pages visited, browsing time, and interactions. The information collected is aggregated and anonymous, used exclusively to improve website performance. These cookies are only activated with the user's prior and explicit consent.

c) Functionality cookies: These cookies allow the site to remember user preferences, such as selected language or personalized settings. Although not essential, they enhance the user experience. They can be disabled, but some features may be limited.

d) Marketing and advertising cookies: These cookies are used to display ads relevant to the user and to measure the effectiveness of advertising campaigns. They may be used by external platforms, such as social networks or digital advertising services. These cookies are only activated with the user's explicit consent.

Cookie Management

Upon accessing the site, each user will be informed about the use of cookies via a consent banner and may:

  • accept all cookies
  • reject all non-essential cookies
  • customize their preferences

Users may change or withdraw their consent at any time via the cookie management banner available on the site or through their browser settings.

Disabling essential cookies may affect the site's functionality.

Third-Party Cookies

Some cookies may be set by third parties, such as:

  • Shopify
  • Google Analytics
  • Meta (Facebook/Instagram)
  • Marketing or statistical analysis tools

These third parties may collect data outside of Madeira Quest's direct control. We recommend consulting their respective privacy policies for more information.

Cookie Retention Period

The retention period for cookies varies depending on their nature:

  • Session cookies: automatically deleted when the user closes the browser
  • Persistent cookies: stored on the device until they expire or are deleted by the user

Specific timeframes can be found in the Cookie Policy or the cookie management banner.

Data Retention

Personal data will be retained only for the period necessary to fulfill the purposes for which it was collected, namely:

  • Booking data: up to 5 years (tax and legal obligations)
  • Contact data: up to 2 years after the last interaction
  • Photographs: until consent is withdrawn
  • Technical data (cookies): in accordance with the Cookie Policy

Once no longer needed, the data will be securely deleted.

Data Security

Madeira Quest adopts appropriate technical and organizational measures to protect personal data against:

·      unauthorized access

·      loss

·      destruction

·      alteration

·      improper disclosure

Despite the measures implemented, no data transmission over the Internet can be guaranteed to be completely secure.

 

Data Subject Rights

Under the GDPR, the user has the right to:

·      Access their data

·      Rectification or update

·      Erasure (“right to be forgotten”)

·      Restriction of processing

·      Object to processing

·      Data portability

·      Withdraw consent

·      Lodge a complaint with the National Data Protection Commission (CNPD): https://www.cnpd.pt/

Requests should be sent to:

Email: dianawdlima@gmail.com

Address: Estrada Monumental 456B, 9000-250, Funchal, Madeira

Photographs and Content Captured During the Experience

Photographs may be taken during the experiences for keepsake purposes and brand communication.

The use of identifiable images for publication on social media, the website, or in promotional materials will only occur with the participants' prior and explicit consent.

Participants may request the removal of content in which they are identifiable at any time.

Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

Tracking Devices in the Kits

Some materials may contain tracking devices intended exclusively for the protection and recovery of equipment belonging to Madeira Quest. These devices are not used for monitoring participants or for collecting personal data.

External Links

The website may contain links to external sites or third-party platforms.

Madeira Quest is not responsible for the privacy practices or content of such sites.

Madeira Quest does not intentionally collect personal data from minors without the authorization of their respective legal representatives. Under Portuguese law, minors under the age of 13 may only provide personal data with the consent of their respective legal representatives. Should the inadvertent collection of data from minors be identified, such data will be securely deleted.

Changes to the Privacy Policy

Madeira Quest may update this Privacy Policy whenever necessary. The most recent version will always be available on the website and supersedes previous versions.

We recommend checking this page periodically.

Contact Information

For questions regarding this Privacy Policy or the processing of personal data:

Email: geral@madeiraquest.pt

Website: https://madeiraquest.pt

Data Controller: Diana Margarida Ribeiro Lima

Email: dianawdlima@gmail.com