Kayaktor

Privacy Policy

Last updated: January 2026

1. Introduction

Naturebox LDA ("Kayaktor," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

2. Information We Collect

Personal Information

We may collect personally identifiable information, including but not limited to:

  • Name and contact details (email, phone number)
  • Account credentials
  • Payment information (processed by Stripe/PayPal)
  • Travel preferences and booking history
  • Communications with us or suppliers

Automatically Collected Information

When you access our website, we automatically collect:

  • Device information (browser type, operating system)
  • IP address and location data
  • Cookies and usage data
  • Referring URLs and pages visited

3. How We Use Your Information

We use the collected information to:

  • Process and manage your bookings
  • Communicate with you about your trips
  • Provide customer support
  • Send marketing communications (with your consent)
  • Improve our services and user experience
  • Comply with legal obligations
  • Detect and prevent fraud

4. Information Sharing

We may share your information with:

  • Operators: To fulfill your bookings
  • Payment Processors: Stripe and PayPal for secure transactions
  • Service Providers: Third parties who assist in operating our platform
  • Legal Requirements: When required by law or to protect our rights

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • SSL encryption for data transmission
  • Secure payment processing through certified providers
  • Regular security assessments
  • Access controls for employee access to data

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data ("right to be forgotten")
  • Restrict processing of your data
  • Data portability
  • Object to processing
  • Withdraw consent at any time

To exercise these rights, contact us at [email protected].

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Booking records are typically retained for 7 years for tax and legal compliance.

8. International Transfers

Your information may be transferred to and processed in countries outside the European Economic Area. We ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

9. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by posting the new policy on our website.

11. Contact Us

For privacy-related inquiries:

Data Protection Officer

Email: [email protected]

Address: Lisbon, Portugal