Last updated: 21 February 2026

This Privacy Policy explains how Milton Quintal, Lda (trading name: Beyond Madeira) (“we”, “us”, “our”) collects and uses personal data when you visit our website, contact us, or request/book services through us.

1. Company details (Data Controller)

Legal name: Milton Quintal, Lda
Trading name: Beyond Madeira
NIPC: 518827119
Registered office: Largo da Saúde 1, 9000-221 Funchal, Portugal
Email: info@beyondmadeira.com
Phone/WhatsApp: +351 939 566 415
Tourism licence: Licensed by Turismo de Portugal as a travel agency, RNAVT 13020.

No walk-in office: Our registered office is not open to the public for walk-in service. Support is provided by email/phone/WhatsApp and, when needed, by appointment.

2. What this policy covers

This policy applies when you:

• Browse our website.
• Contact us by email, phone or WhatsApp.
• Submit booking/request forms on our website for activities and/or car rental.
• Request or book services arranged by Beyond Madeira with local partners (such as tours/activities and rent-a-car).

3. What personal data we collect

Depending on your interaction with us, we may collect:

• Contact details: name, email address, phone number/WhatsApp, and message content.
• Booking details: dates, number of people, pick-up/drop-off or meeting point details, preferences and special requests.
• Car rental details (if applicable): information required by the rental partner to issue the rental (for example, driver age and driving licence details).
• Website technical basic technical information (e.g., IP address, browser/device data) and cookie identifiers; analytics/marketing data is collected only with your consent (see Section 11).

4. How we collect your data

• Directly from you: when you fill in forms, email us, message us on WhatsApp, or call us.
• Automatically: through cookies and similar technologies when you use the website (subject to your cookie choices).

5. Why we use your data (purposes)

We process personal data to:

• Reply to enquiries and provide customer support.
• Manage booking requests, confirmations, changes and cancellations.
• Coordinate your booking with the local partner/operator that delivers the service.
• Provide travel assistance and handle issues, complaints or disputes.
• Comply with legal and accounting/tax obligations (including invoicing, where applicable).
• Protect our website and business (security, fraud prevention, abuse detection).

6. Legal bases for processing (GDPR)

We rely on one or more of the following legal bases:

• Contract / pre-contract steps: to handle and manage a booking you request.
• Legal obligation: to meet legal requirements (e.g., accounting/tax compliance when invoicing).
• Legitimate interests: to run and protect our business and website and improve service quality, balanced against your rights.
• Consent: for non-essential cookies and certain marketing/analytics technologies, where required.

7. Who we share your data with

We share data only when necessary, with:

• Local partners/operators: activity providers, car rental companies and other suppliers involved in delivering your booked service.
• Technology and operational providers: hosting, email services, website tools and similar providers that help us operate our business.
• Authorities: when required by law or a valid legal request.

We do not sell your personal data.

8. International transfers

Some technology providers may process data outside the European Economic Area. Where applicable, we use appropriate safeguards recognised by the GDPR for such transfers.

9. How long we keep your data (retention)

• Enquiries: for as long as needed to respond and follow up.
• Bookings: for as long as needed to organise the service, provide assistance, and manage any claims/disputes.
• Invoices and mandatory records: for the period required by applicable law.

10. Your rights

Subject to legal conditions, you may request:

• Access to your personal data.
• Correction (rectification) of inaccurate or incomplete data.
• Erasure (deletion) in certain cases.
• Restriction of processing in certain cases.
• Data portability in certain cases.
• Objection to processing based on legitimate interests in certain cases.
• Withdrawal of consent at any time where processing is based on consent (this does not affect prior processing).

To exercise your rights, contact us at info@beyondmadeira.com.

You also have the right to lodge a complaint with the Portuguese supervisory authority (CNPD).

11. Cookies, analytics and advertising

We use cookies and similar technologies. In particular, we may use:

• Strictly necessary cookies to make the website work.
• Analytics cookies (e.g., Google Analytics) to understand how the website is used and improve it.
• Marketing cookies (e.g., Meta Pixel and Google Ads tags) to measure advertising performance and, where enabled, support remarketing.

Non-essential cookies (analytics and marketing) are used only after you give consent via our cookie banner. You can change your choices at any time in our Cookie Policy / cookie settings (if available), or by adjusting your browser settings.

12. Security

We use appropriate technical and organisational measures to protect personal data. However, no system is completely secure. If you suspect any issue, please contact us immediately.

13. Children

Our website is intended for a general audience. Where a service has age requirements (for example, car rental), we only process the information needed to assess eligibility and arrange the booking with the partner.

14. Changes to this Privacy Policy

We may update this policy from time to time. The latest version will always be published on our website with the “Last updated” date.