I Love Madeira is a digital platform that celebrates the island of Madeira and connects travellers with carefully selected local partners, including accommodation providers and tour and activity operators. We promote these experiences through our Website and social media channels. We do not process bookings or payments directly; reservations are made on our partners' own websites and platforms.

We collect information in the following ways:

• Information you provide to us: when you fill in a contact or partnership form, we collect your name, email address, company name (where applicable), and the content of your message.
• Information collected automatically: when you browse the Website, we may collect technical data such as your IP address, browser type, device information, pages visited, and the date and time of your visit, through cookies and similar technologies.

We use the information we collect to:

• Respond to your enquiries, requests, and partnership proposals;
• Provide, operate, and improve our Website and the experiences we feature;
• Understand how visitors use our Website so we can enhance content and performance;
• Communicate with you about our services when you have asked us to;
• Comply with our legal obligations.

Under the GDPR, we process your personal data on the following legal bases: your consent (for example, when you submit a form or accept cookies); the performance of a contract or steps taken at your request; our legitimate interests in operating and improving our Website; and compliance with our legal obligations.

Our Website uses cookies and similar technologies to ensure the site functions correctly, to remember your preferences, and to analyse traffic and usage. You can control or disable cookies through your browser settings, although some parts of the Website may not function properly without them. Where required, we ask for your consent before placing non-essential cookies.

Our Website features links to third-party partners, such as accommodation providers and tour operators, and uses booking tools (for example, FareHarbor) that may redirect you to a partner's platform. When you click through and make a booking, you do so on the partner's own website, and that partner's privacy policy and terms apply. We are not responsible for the privacy practices of third-party websites and encourage you to review their policies. We may receive referral or affiliate information confirming that a booking originated from I Love Madeira.

We do not sell your personal data. We may share your information only with: trusted service providers who help us operate the Website (such as hosting and analytics providers); partners, where you have explicitly asked us to connect you with them; and authorities or third parties where required by law or to protect our legal rights.

We keep your personal data only for as long as necessary to fulfil the purposes described in this policy, to comply with legal obligations, or to resolve disputes. When your data is no longer needed, we securely delete or anonymise it.

If you are located in the European Union, you have the right to access the personal data we hold about you, request correction of inaccurate data, request erasure, restrict or object to certain processing, request portability, and withdraw your consent at any time. To exercise any of these rights, contact us at info@ilovemadeira.pt. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados — CNPD).

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Some of our service providers may process data outside the European Economic Area. Where this happens, we take steps to ensure your data is protected by appropriate safeguards, such as the European Commission's standard contractual clauses.

Our Website is not directed at children under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated effective date.