Privacy Policy

Last updated: February 4, 2026

This Privacy Policy explains how E'Habitual collects, uses, and protects personal data in accordance with the GDPR and Portuguese law.

1. Controller and contact

The data controller is E'Habitual. Please refer to the Legal Notice for full company details and contacts.

2. Data we collect

We collect only data necessary to provide the service.

  • Account data: name, email, phone number, password (hashed).
  • Booking data: pickup and dropoff addresses, dates, times, vehicle preferences, special requests.
  • Payment data: transaction references and status (card data is handled by Easypay).
  • Technical data: IP address, device and browser information, login timestamps.

3. Purposes and legal basis

We process data to provide the service, manage bookings, process payments, and communicate with you.

Legal bases include contract performance (GDPR Art. 6(1)(b)), legal obligations (Art. 6(1)(c)), and legitimate interests (Art. 6(1)(f)) for security and fraud prevention.

4. Data sharing and processors

We share data only with service providers necessary to operate the platform.

  • Easypay (payment processing).
  • Google Maps (address validation and routing).
  • Assigned chauffeurs and partner operators (to deliver the service).

5. International transfers

If data is transferred outside the EEA (e.g., Google services), we rely on appropriate safeguards such as Standard Contractual Clauses.

6. Data retention

We retain data only for as long as necessary for contractual and legal obligations.

Booking and payment records may be retained up to 10 years in accordance with Portuguese fiscal law.

7. Your rights

You have the right to access, rectify, erase, restrict, or object to processing and to request data portability. You may also withdraw consent at any time.

You can lodge a complaint with the Portuguese supervisory authority (CNPD).

8. Cookies

We use essential and functional cookies for authentication, security, language, and theme preferences. We do not use marketing or profiling cookies.

You can manage cookies in your browser settings. Some features may not work without essential cookies.

9. Security

We use technical and organizational measures to protect data, including TLS encryption and access controls.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated on the website.