This policy explains how Carry Baby Madeira collects, uses and protects your personal data when you visit carrybabymadeira.pt or rent equipment from us. We follow the EU General Data Protection Regulation (Regulation (EU) 2016/679) and Portuguese data protection law.
1. Who we are
The controller of your personal data is:
- Boulevard of Dreams, Unipessoal, LDA, trading as Carry Baby Madeira
- Tax number (NIF): 514535601
- Registered address: Quinta de Belém, Lote 2, 3510-779 Viseu, Portugal
- Email: carrybabymadeira@gmail.com
2. What data we collect
2.1 When you book with us
Our booking buttons open a conversation in WhatsApp with a pre-written message. When you send it, we receive:
- Your WhatsApp phone number and profile name
- The equipment you want, your arrival and departure dates, and the rental duration
- The delivery and collection address you give us (hotel, apartment, airport)
- Anything else you choose to write to us
WhatsApp is operated by Meta Platforms Ireland Ltd. Your messages travel through Meta's infrastructure and are also subject to WhatsApp's own privacy policy. If you would rather not use WhatsApp, you can email us instead.
2.2 When you email us
We receive your email address, your name if you give it, and the content of your message.
2.3 When you complete a rental
To issue an invoice we need your billing name, address and, where you request one with a tax number, your NIF. We keep invoicing records because Portuguese tax law requires it.
2.4 Automatically, when you browse
If — and only if — you allow it through the cookie banner, we collect technical and usage data: your IP address, browser type and version, device type, the pages you visit, the time and date of your visit, how long you stay, and which site referred you.
If you reject cookies, none of this is collected. The site works exactly the same and you can still book normally.
3. Cookies and tracking
We group cookies into three categories. You choose which ones to allow the first time you visit, and you can change your mind at any time using the Cookie Settings link in the footer of every page. Your choice is stored for six months.
| Category | What it does | Tools used |
|---|---|---|
| Strictly necessary Always on |
Remembers your cookie choice so we do not ask again on every page. Stored in your browser only and never sent to us. | Our own site |
| Analytics Off by default |
Counts visits and shows us which pages are useful, so we can improve the site. We see totals and trends, not individuals. | Google Analytics 4 |
| Marketing Off by default |
Measures whether our ads work and lets us show more relevant ads. | Meta (Facebook) pixel, Google Ads |
3.1 The specific cookies we use
None of these are placed unless you allow the corresponding category. If you reject, your browser is left exactly as it was.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
cbm_consent_v1necessary |
Carry Baby Madeira | Stores your cookie choice. Kept in your browser's local storage; never sent to us or to anyone else. | 6 months |
_gaanalytics |
Distinguishes one visitor from another so visits can be counted. | 2 years | |
_ga_50X2ZVM8KF_ga_HR8ZV979DKanalytics |
Keeps the session state for each of our two Google Analytics properties. | 2 years | |
_gcl_au, _gcl_lsmarketing |
Links a visit to an advertisement click, so we can tell which ads lead to bookings. | 90 days | |
_fbpmarketing |
Meta | Identifies the browser for advertising measurement on Meta platforms. | 90 days |
3.2 Our tracking identifiers
For full transparency, these are the accounts the tools above report to:
- Google Tag Manager container:
GTM-KQ454TNX - Google Analytics 4:
G-50X2ZVM8KFandG-HR8ZV979DK - Google Ads conversion accounts:
AW-17637205351andAW-17637424851 - Meta pixel:
3942207199408561
We use Google Tag Manager to load these tools. Google Tag Manager itself does not set cookies or collect personal data — it is the mechanism that decides which tools are allowed to run, based on the choice you made in the banner. We use Google Consent Mode, which means analytics and advertising storage stay switched off until you actively allow them.
4. Legal bases
- Performance of a contract, or steps before entering one — handling your booking enquiry, arranging delivery and collection, and providing the rental.
- Consent — analytics and marketing cookies. You may withdraw it at any time without affecting the lawfulness of processing carried out before you withdrew it.
- Legal obligation — keeping invoices and accounting records.
- Legitimate interests — keeping our site secure and preventing abuse, and defending legal claims. We balance this against your rights and freedoms.
5. Who we share data with
We do not sell your personal data. We share it only with service providers who process it on our behalf, under contract, and only for the purposes below:
- Meta Platforms Ireland Ltd — WhatsApp, for booking conversations; and the Meta pixel, only if you allow marketing cookies.
- Google Ireland Ltd — Google Tag Manager, which loads the tools below; Google Analytics, only if you allow analytics cookies; and Google Ads conversion measurement, only if you allow marketing cookies.
- Our web hosting provider — stores and serves the website.
- Our accountant — invoicing and tax compliance.
We may also disclose data where we are legally required to, for example to a court or a public authority.
6. International transfers
Some of these providers are based in, or transfer data to, countries outside the European Economic Area — principally the United States. Where that happens, the transfer is covered by the European Commission's adequacy decision for the EU–US Data Privacy Framework, or by Standard Contractual Clauses approved by the European Commission, together with additional safeguards where needed.
7. How long we keep data
- Booking conversations (WhatsApp and email): for the duration of the rental and up to 3 years afterwards, so we can deal with any question or claim.
- Invoices and accounting records: 10 years, as required by Portuguese tax law.
- Your cookie choice: 6 months, stored in your own browser.
- Analytics data: retained according to the settings of each tool, and no longer than 14 months for Google Analytics.
8. Your rights
Under the GDPR you have the right to:
- Ask what data we hold about you and get a copy of it
- Have inaccurate data corrected
- Have your data deleted, where we have no overriding reason to keep it
- Ask us to restrict how we use your data
- Receive your data in a portable format, or have it sent to another provider
- Object to processing based on our legitimate interests
- Withdraw your consent at any time
To exercise any of these, email carrybabymadeira@gmail.com. We will reply within one month. There is no charge.
If you are not satisfied with our response, you can complain to the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt — or to the authority in your own country of residence.
9. Children
Our service is for adults renting equipment for their children. We do not knowingly collect personal data directly from children. We do not need or ask for information about your child beyond what is necessary to supply suitable equipment, such as age or weight range for a car seat.
10. Security
We apply appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS) across the whole site and limiting access to the people who need it. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
11. Changes to this policy
If we change this policy we will update the date at the top of this page. Where the change is significant, we will ask for your cookie consent again.
12. Contact us
For any question about this policy or your personal data:
- Email: carrybabymadeira@gmail.com
- WhatsApp: +351 968 603 211
- Post: Boulevard of Dreams, Unipessoal, LDA — Quinta de Belém, Lote 2, 3510-779 Viseu, Portugal