Privacy notice

Who we are. Wonderstay operates short-term rentals (Alojamento Local) in Lisbon, Portugal. The data controller is the host named on your booking confirmation. Contact: reply to any booking email.

What we collect and why

• Booking data (name, email, phone, stay dates, guest count, price, payment status): to perform the contract with you. Kept for 10 years as required by Portuguese tax law.
• Payment data: processed by Stripe. We never see your full card number. Stripe may keep a payment method on file to place the refundable damage deposit before check-in. See Stripe's privacy policy.
• Identification data (name, nationality, date of birth, document type and number, country of residence): required by Portuguese law (Lei n.º 23/2007) to report foreign guests to the immigration authority via SIBA within 3 working days of arrival. Deleted automatically 12 months after check-out.
• Tax ID and billing address: only if you ask for an invoice with your tax number.
• Analytics: with your consent (the banner on your first visit) we use Google Analytics 4 with IP anonymisation to see which pages lead to bookings. It sets first-party cookies (_ga, _ga_*) for up to 2 years. Declining keeps analytics off; you can change your choice by clearing the site's storage. No advertising cookies are used. Legal basis: consent (Art. 6(1)(a) GDPR; Lei 41/2004).
• Technical data: a session cookie for the host login area and a language preference cookie.

Who receives data

Stripe (payments), Google (analytics, only with consent), Resend (transactional email), Supabase (database hosting, EU region), Cloudflare (web hosting), the Portuguese immigration authority (SIBA, legal obligation), and Câmara Municipal de Lisboa (tourist tax declarations, aggregate only). Booking platforms you booked through receive only what you gave them.

Your rights

You can request access, correction, deletion (where no legal retention applies), portability, or object to processing, and complain to the Comissão Nacional de Proteção de Dados (cnpd.pt). Email us from the address on your booking and we respond within 30 days.

Last updated 25 October 2026.