Love Miles Travel
Privacy policy
In force since 13 October 2026 · Version 1
People who write to us are planning a holiday, not handing over their lives. We collect what it takes to put a proposal together and make a booking, and nothing else. This page says exactly what, why, with whom, for how long, and what you can do about it.
1. Who is responsible for your data
Love Miles Travel, a travel consultancy brand, decides what happens to the data collected through this site. That makes us the data controller under the GDPR.
| Love Miles Travel · Travel by Andy |
| reservas@lovemilestravel.pt |
| +351 926 781 901, WhatsApp included |
| lovemilestravel.pt |
⚠️ To be completed before launch: full legal name, tax number, registered address and RNAVT registration number of the responsible entity. Without these, this policy is incomplete under the GDPR.
2. What we collect, and when
Nothing is ever collected unless you type it or press something. We do not buy lists, we do not pull your details from anywhere else, and we do not follow you around the internet.
When you ask for a quote
The form asks for: your name, email and mobile; the kind of trip; the destination; dates, exact or approximate; how many adults and children, and the age each child will be on the return date; departure airport; board basis; the pace you like; budget per person; and a free field for anything else.
We ask for children's ages because the price depends on them, and a child who turns twelve halfway through the trip stops paying a child fare. That information is given by the person with parental responsibility, who is the person filling in the form.
When you talk to us
By WhatsApp, email or phone, we keep what you write or say, and your contact details. If the conversation happens on WhatsApp, the content passes through Meta's infrastructure under WhatsApp's own privacy terms, which are not ours to control.
When you use the site assistant
The chat bubble in the corner answers from a written script that runs entirely in your browser. What you type there is not sent to any server, ours or anyone else's, and it disappears when you close the tab. If that ever changes, this page changes first.
When the site is served to you
Like any website, ours receives requests that include your IP address, browser type and the page you asked for. Cloudflare, which hosts the site, handles that in order to deliver the page and to protect it from attacks. These are technical logs, not a profile of you.
If you allow measurement
Only then, and only then, do we load Google Analytics and keep a note in your browser of which campaign or link brought you here. Details in section 8.
3. What we use it for, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Preparing and sending you a travel proposal | Steps taken at your request before entering into a contract (art. 6(1)(b) GDPR) |
| Booking flights, hotels and services with operators and suppliers | Performance of the travel contract |
| Answering messages and looking after you during the trip | Performance of the contract, or our legitimate interest in replying to people who contact us |
| Invoicing, tax and accounting duties | Legal obligation |
| Knowing how many people visit the site and where they came from | Your consent, which you can withdraw at any time |
We do not run automated marketing. Asking for a quote does not sign you up to a newsletter. If a mailing list ever exists, it will be opt-in, with a way out in every message.
4. Who we share it with
We share the minimum, and only with those who need it for the trip to happen or for the site to work.
- Tour operators, airlines, hotels, insurers and other suppliers involved in your trip. Without this there is no booking. They receive what the booking requires, including names and identity documents where that is the case.
- Cloudflare, which hosts the site, the enquiry database and our email forwarding.
- Brevo, which handles our outgoing email.
- Google, only if you allow measurement, and only for that.
- Accountants and public authorities, where the law requires it.
We do not sell data to anyone, under any circumstances.
5. Data that leaves the European Union
This happens in two situations.
The first is the technology providers above, which may process data outside the European Economic Area. They do so under the safeguards set out in the GDPR, normally the European Commission's standard contractual clauses and, for certified US companies, the Data Privacy Framework.
The second is the trip itself. If you are going to the Maldives, the hotel in the Maldives needs your name. That transfer is necessary to perform the contract you are asking us for, under article 49 of the GDPR.
6. How long we keep it
| What | For how long |
|---|---|
| A quote request that did not become a booking | 24 months from the last contact, because people who ask today tend to come back next season |
| Client data where a booking was made | 10 years, the period set by Portuguese tax and accounting rules |
| Email and WhatsApp conversations | For as long as they are useful to the relationship, then deleted |
| Technical site logs | The short retention period Cloudflare applies for security |
| Measurement, if allowed | 14 months in Google Analytics |
7. Your rights
At any time, you can:
- Ask what data we hold and what we do with it.
- Correct anything wrong or out of date.
- Have it deleted, where it is no longer needed and no law obliges us to keep it.
- Restrict or object to particular uses.
- Take it with you, in a readable file.
- Withdraw consent for measurement, without affecting what was done before.
Write to reservas@lovemilestravel.pt. We answer within one month, and we charge nothing for it.
If you think we have handled your data badly, tell us first, it is quicker for everyone. But you always have the right to complain to the supervisory authority. In Portugal that is the Comissão Nacional de Protecção de Dados, at cnpd.pt.
8. Cookies and what is stored in your browser
This site needs no cookies to work, and sets none of its own. There is no banner pretending otherwise. What does exist is in this table.
| What | What it does | Needs consent |
|---|---|---|
| Your answer about measurement | So we do not ask again. It stays in your browser and goes nowhere | No. It is what records your own choice |
| The assistant conversation | So it survives you leaving the tab and coming back. Cleared when you close it | No. It is necessary for what you asked for |
| Where you came from | So we know which campaign or link produced an enquiry. We keep the domain, never what you searched for | Yes |
| Google Analytics | Counts visits and pages. Google's script is not even downloaded until you say yes | Yes |
You can change your mind at any time, in either direction, through the Cookies link at the bottom of any page. If your browser sends the Global Privacy Control signal, we treat that as a no and do not ask at all.
9. Security
Enquiries sent through the site travel encrypted and sit in a database only Love Miles can reach, behind a password. The management area is not linked from anywhere on the public site. No system is perfect, but we treat this the way we treat the rest: carefully, and without shortcuts.
10. Changes to this policy
If what we do with data changes, this page changes first, with a new date at the top. If the change matters to existing clients, we tell them directly.
Love Miles Travel · Travel by Andy Back to the site Cookie preferences Versão portuguesa