PRIVACY POLICY

Last updated: 18 August 2026

1. Who we are

This Privacy Policy explains how AMAZONIA EVERYWHERE, UNI. LDA., trading as Lisbon Bike Rentals, collects, uses, stores and protects personal data.

Data controller:
AMAZONIA EVERYWHERE, UNI. LDA.
Portuguese tax number: 515522562
Trading name: Lisbon Bike Rentals
Customer service address: Av. 24 de Julho 4A, 1200-109 Lisbon, Portugal
Email: [email protected]
Telephone: +351 300 501 929

This Policy applies to personal data collected through:

www.lisbonbikerentals.com;
booking.lisbonbikerentals.com;
our online booking and checkout system;
email, telephone and customer support communications;
security-deposit pre-authorizations;
equipment pickup and return; and
rental agreements, incidents, complaints and claims.

2. Personal data we collect

Depending on how customers use our services, we may collect the following categories of personal data.

Identification and contact information

name;
email address;
telephone number;
country of residence;
billing address;
government-issued identification details where necessary; and
age or confirmation that the customer is legally able to enter into the rental agreement.

We normally verify identification documents at pickup without retaining a copy. A copy will only be retained where legally permitted, necessary for a stated purpose and subject to appropriate safeguards.

Booking and rental information

booking dates and times;
bicycle and equipment selected;
rider height, bicycle size and equipment preferences;
additional services requested;
booking history;
voucher information;
pickup and return records; and
acceptance of our Terms and Conditions.

Payment and security-deposit information

amount paid;
payment status;
transaction reference;
security-deposit amount;
pre-authorization status;
refund and voucher information; and
limited payment-method information supplied by our payment provider.

Payment card details are processed by authorized payment service providers. Lisbon Bike Rentals does not normally receive or store the complete payment card number or security code.

Equipment and incident information

equipment inspection records;
photographs or videos of rented equipment at pickup and return;
information about damage, theft, loss, accidents or mechanical problems;
police report or incident reference numbers;
communications concerning an incident;
repair estimates and invoices; and
information necessary to establish, exercise or defend legal claims.

Website and device information

Subject to applicable consent requirements, we may collect:

IP address;
browser and device type;
operating system;
pages visited;
date and time of access;
referral source;
booking and website interactions;
cookie identifiers;
advertising interaction information; and
Google Click Identifier information, including GCLID, where applicable.

Communications and preferences

emails and messages sent to us;
customer-service requests;
complaints and feedback;
cookie preferences;
marketing consent; and
unsubscribe requests.

3. Why we use personal data

We process personal data for the following purposes and legal bases.

To manage bookings and provide rental services

We use personal data to:

process and confirm bookings;
receive payments;
prepare bicycles and equipment;
communicate pickup and return information;
manage changes, cancellations, refunds and vouchers;
provide customer support; and
perform the rental contract.

The legal basis is the performance of a contract or taking steps requested by the customer before entering into a contract.

To manage security deposits

We use personal data to:

request and verify a security-deposit pre-authorization;
release the deposit following inspection;
document damage, loss, theft or missing equipment; and
process justified amounts in accordance with the rental agreement.

The legal basis is performance of the rental contract and our legitimate interest in protecting rental equipment and establishing or defending legal claims.

To comply with legal obligations

We may process and retain information where required for:

accounting and invoicing;
tax compliance;
consumer protection;
responding to lawful requests from authorities;
handling complaints; and
other legal or regulatory obligations.

The legal basis is compliance with a legal obligation.

To protect customers, equipment and the business

We may use information to:

prevent fraud;
maintain website and payment security;
investigate incidents;
recover missing equipment;
protect legal rights; and
establish, exercise or defend legal claims.

The legal basis is our legitimate interest in operating a safe and secure rental service, provided that this interest is not overridden by the customer’s rights and freedoms.

Analytics and advertising

Where the customer has provided consent, we may use analytics and advertising technologies to:

understand how visitors use our websites;
measure advertising performance;
record Google Ads conversions;
improve website and booking performance;
create or use advertising audiences; and
personalize advertising on Google or other platforms, where separately authorized.

The legal basis is consent. Refusing or withdrawing consent for analytics or advertising cookies does not prevent customers from making a booking.

4. Cookies and similar technologies

Our websites use cookies and similar technologies.

Strictly necessary cookies

These cookies are necessary for functions such as:

maintaining the website and checkout session;
remembering privacy choices;
processing bookings;
preventing fraud; and
providing website security.

Where these cookies are strictly necessary to provide a service requested by the user, they may be used without consent.

Performance and analytics cookies

These cookies help us understand how visitors use the website and identify technical or performance problems.

They will only be activated where the visitor has provided the required consent.

Advertising and marketing cookies

Subject to consent, advertising cookies and technologies may be used by Google Ads and other disclosed advertising providers to:

measure conversions;
attribute bookings to advertising campaigns;
limit advertising frequency;
build advertising audiences; and
personalize advertisements.

Non-essential analytics and advertising technologies must remain disabled until the visitor provides consent.

Visitors can accept, reject or change their cookie preferences through the website’s cookie-preference panel. Withdrawing consent does not affect processing that occurred lawfully before withdrawal.

Further details about individual cookies, providers, purposes and durations should be displayed in the website’s cookie-preference panel or Cookie Policy.

5. Google Ads

Where advertising consent has been provided, our booking website may use the Google tag associated with our Google Ads account to measure bookings and other selected conversion events.

Google may process information such as:

cookie and device identifiers;
IP address;
browser information;
pages visited;
advertising interactions;
GCLID information; and
conversion-event information.

Google’s processing of personal data is subject to Google’s own privacy terms and controls. Customers can find more information at:

Google Privacy Policy

The Google Ads tag and advertising cookies should not be activated before the visitor provides the required advertising consent.

6. Booking platform and service providers

We use third-party providers to operate our websites and rental services.

These providers may include:

Booqable, for booking, checkout and rental management;
payment processors and card issuers;
website hosting and technical-support providers;
email and communications providers;
Google, where analytics or advertising services have been authorized;
accounting and professional advisers;
repair, recovery or insurance providers where relevant; and
legal or public authorities where disclosure is required by law.

Service providers may only process personal data for the relevant services and subject to applicable contractual and legal obligations.

7. International data transfers

Some technology, payment, communications or advertising providers may process personal data outside Portugal or the European Economic Area.

Where personal data is transferred outside the European Economic Area, we will rely on an appropriate legal transfer mechanism, such as:

an adequacy decision adopted by the European Commission;
approved Standard Contractual Clauses;
another legally recognized safeguard; or
a specific lawful exception where applicable.

Customers may contact us for further information about the safeguards relevant to their personal data.

8. How long we retain personal data

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected.

The applicable period is determined according to:

the duration of the booking and rental relationship;
mandatory accounting and tax-retention requirements;
applicable limitation periods;
the time needed to investigate an incident or complaint;
the establishment, exercise or defence of legal claims;
fraud-prevention and security requirements; and
the customer’s consent or withdrawal of consent.

In particular:

booking, rental, invoice and payment records may be retained for legally required accounting and tax periods;
security-deposit information is retained until the deposit is released and any related dispute is concluded;
incident and damage records may be retained until the relevant claim and legal limitation periods have expired;
marketing information is retained until consent is withdrawn or the information is no longer required;
cookie information is retained for the periods identified in the cookie-preference panel; and
identification-document copies, where exceptionally and lawfully retained, will be deleted as soon as they are no longer necessary.

9. Whether personal data is required

Information identified as mandatory during booking is required to:

process the reservation;
enter into the rental agreement;
receive payment;
verify eligibility;
manage the security deposit; or
comply with legal obligations.

If the required information is not provided, Lisbon Bike Rentals may be unable to confirm or perform the rental.

Consent for analytics, advertising or direct marketing is optional and is not required to make a booking.

10. Marketing communications

We will only send promotional emails, SMS messages or similar electronic marketing communications where this is legally permitted.

Where marketing is based on consent, the customer may withdraw that consent at any time by:

using the unsubscribe link included in the communication; or
contacting [email protected].

Transactional messages concerning an existing booking, payment, security deposit or rental are not marketing communications and may still be sent where necessary to provide the service.

11. Photographs, video and equipment inspections

Lisbon Bike Rentals may photograph or video-record equipment before and after a rental for:

documenting its condition;
preventing fraud;
investigating damage, loss or theft; and
establishing or defending legal claims.

These records should focus on the equipment. Customers will not intentionally be photographed or recorded unless this is necessary, lawful and proportionate or the customer has provided appropriate consent.

Customer images will not be used for advertising or social media without separate permission.

12. Minors

The contracting customer must be at least 18 years old.

Where personal data concerning a rider aged 16 or 17 is required, it must be supplied or authorized by their parent or legal guardian.

We do not knowingly collect more personal data about minors than is necessary to manage the rental safely and lawfully.

13. Automated decision-making

Lisbon Bike Rentals does not make decisions producing legal or similarly significant effects based solely on automated processing.

Payment providers, card issuers and fraud-prevention services may use automated systems to approve or decline payments or security-deposit pre-authorizations. Customers should contact the relevant provider or Lisbon Bike Rentals if they require further information about a declined transaction.

14. Data security

We use appropriate technical and organizational measures designed to protect personal data against:

unauthorized access;
accidental loss;
unlawful disclosure;
alteration;
misuse; and
destruction.

Access to personal data is limited to persons and service providers who require it for an authorized purpose.

No internet transmission or storage system can be guaranteed to be completely secure. Customers should contact us immediately if they believe their personal data or booking account has been compromised.

15. Customer rights

Subject to the conditions and exceptions established by applicable law, customers may have the right to:

obtain confirmation that their personal data is being processed;
access their personal data;
correct inaccurate or incomplete information;
request deletion of personal data;
request restriction of processing;
object to processing based on legitimate interests;
receive certain personal data in a portable format;
withdraw consent at any time;
object to direct marketing; and
lodge a complaint with a supervisory authority.

Requests should be sent to:

[email protected]

We may request information reasonably necessary to verify the identity of the person making the request.

We will respond within the period required by applicable data-protection law.

16. Complaints to the supervisory authority

Customers have the right to lodge a complaint with the Portuguese data-protection supervisory authority:

Comissão Nacional de Proteção de Dados — CNPD
Av. D. Carlos I, 134, 1.º
1200-651 Lisbon
Portugal

www.cnpd.pt

Customers are encouraged to contact us first so that we have an opportunity to address the concern, but this does not restrict the right to contact the CNPD.

17. Third-party websites

Our websites may contain links to websites or services operated by third parties.

Lisbon Bike Rentals is not responsible for the privacy practices of independent third-party websites. Visitors should review the privacy information provided by those third parties.

18. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our services, providers or legal obligations.

The updated version will be published on this page with a revised “Last updated” date.

Where a change materially affects how personal data is processed, we will provide additional notice where required by law.

19. Contact us

Questions, requests or complaints concerning privacy and personal data may be sent to:

AMAZONIA EVERYWHERE, UNI. LDA.
Trading as Lisbon Bike Rentals
Portuguese tax number: 515522562
Av. 24 de Julho 4A
1200-109 Lisbon
Portugal

Email: [email protected]
Telephone: +351 300 501 929