Privacy policy & terms

1. Data controller

The data controller responsible for processing your personal data is ECKERT & SPALL - INVESTIMENTOS, LDA, Rua Tranqueirao, no. 100, 2500-274 Caldas da Rainha, Portugal, NIF: 518 833 224, caldasnuara@gmail.com.

2. Data we collect

• Account data such as email address, login status, and authentication identifiers.
• Profile data such as first name, optional last name, country, city, occupation, bio, languages, profile photo, social links, and personal question answers.
• Invoice and legal data such as billing address, postal code, country, optional tax identification number, booking details, invoice amount, invoice status, and recipient email.
• Application and booking data such as selected experience, dates, number of people, requested sleeping option, discount code, message to Nuara, booking status, cancellation/revoke information, and confirmation date.
• Verification data such as linked Instagram, LinkedIn, website, verification status, and any identifying document you voluntarily upload.
• Community visibility data, including whether you choose to show your profile in the public community area.
• Notification and email data, including messages sent inside the app and operational emails about applications, confirmations, cancellations, invoices, or account access.
• Technical data such as IP address, browser type, access times, cookies, logs, and security events collected automatically for website security, authentication, and performance.

3. Purpose of processing

• To create and manage your Nuara account.
• To let you apply for offer, request sleeping options, manage your applications, and receive booking updates.
• To let the Nuara team review, accept, reject, cancel, or administer applications and bookings.
• To generate and provide invoices after confirmed bookings.
• To display public experience information, availability, and, where enabled, community participant information.
• To let you create a profile and, if you opt in, appear in the Nuara community overview.
• To support profile verification through linked accounts or voluntarily uploaded identification documents.
• To send transactional emails and in-app notifications related to login, applications, bookings, confirmations, cancellations, invoices, and admin decisions.
• To comply with legal obligations under EU and Portuguese law.
• To improve, protect, and secure the website.

4. Legal basis

• Art. 6(1)(a) GDPR - your consent for optional community profile visibility, optional verification uploads, optional social links, and newsletter subscription where offered.
• Art. 6(1)(b) GDPR - processing needed to provide requested Nuara services, including accounts, applications, bookings, sleeping-option requests, and user profile features.
• Art. 6(1)(c) GDPR - compliance with legal obligations, especially invoicing, accounting, tax, and business record obligations.
• Art. 6(1)(f) GDPR - legitimate interests in website security, fraud prevention, service administration, internal records, communication about your requests, and basic functionality.

5. Storage and retention

• Account, profile, application, and booking data is retained while your account is active or while it is needed to provide Nuara services.
• Invoice, tax, accounting, and legally relevant booking records may be retained for the periods required by Portuguese and EU law.
• Verification documents are used only for review and should not be kept longer than necessary for verification and safety purposes, unless a legal reason requires longer retention.
• Optional public community information is shown only while you keep community visibility enabled or until the profile is removed.
• Technical logs and security data are stored temporarily for system maintenance, troubleshooting, and abuse prevention.
• Newsletter email addresses, where collected, are retained until you unsubscribe.

6. Service providers and data sharing

We do not sell or rent your data. Data may be shared with trusted service providers that help us operate Nuara, including hosting, database, storage, authentication, and email delivery providers. Nuara uses a self-hosted application, database, authentication service, and file storage, with a configured email delivery service for transactional emails. Providers process data only as needed to deliver their services and under GDPR-compliant arrangements where required.

7. Public community and participant visibility

Nuara is community-driven, but public visibility is optional. If you choose to show your profile in the community area, selected profile information such as first name, profile photo, country, city, occupation, bio, languages, social links, and public personal question answers may be visible to visitors or other users. Last name, full billing address, tax ID, invoices, and verification documents are not intended to be shown publicly.

For bookings, participant sections may show limited participant information such as first name, profile photo, and number of booked people, depending on your profile visibility settings and booking status.

8. Verification documents

Uploading an identifying document is optional and used only to help the Nuara team assess profile trust and verification. Verification may also be supported by linked social or professional accounts. Verification does not guarantee acceptance into an experience, but it can help the team review applications with more confidence.

9. Your rights

• Access your personal data (Art. 15 GDPR).
• Rectify incorrect data (Art. 16 GDPR).
• Request erasure of your data (Art. 17 GDPR).
• Restrict processing (Art. 18 GDPR).
• Request data portability (Art. 20 GDPR).
• Withdraw consent at any time (Art. 7(3) GDPR).
• Lodge a complaint with a supervisory authority (Art. 77 GDPR).

10. Email communication

We may send transactional emails related to your account, email verification, password setup and reset, applications, booking decisions, cancellations, invoices, and other requested Nuara services. If a newsletter is offered, by entering your email and ticking the checkbox, you consent to receiving it. You may unsubscribe from newsletters at any time by clicking the "unsubscribe" link in each newsletter email. Before the first newsletter, you can unsubscribe by sending an email to caldasnuara@gmail.com.

11. Cookies and tracking

Our website may use cookies and similar technologies for authentication, session handling, security, performance, and basic functionality. We currently aim to keep tracking minimal and use cookies primarily where they are needed for the website and account features to work. Embedded Google Maps content is loaded only after you choose to show it on the Location page.

12. Changes to this policy

We may update this policy occasionally. The current version will always be available on this website.