PRIVACY POLICY — Wheel Wave

At Wheel Wave, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Portuguese legislation.

Data Controller
ÁGUIA CASTIÇA UNIPESSOAL LDA. Trading name: Wheel Wave
Registered office: R. do Infante Dom Henrique 103, 4050‑450 Porto
Email: wheelwave1@gmail.com

What Data We Collect
We may collect: name, surname, email address, telephone number, booking details, information necessary for the provision of requested services, rental agreement information, payment information (where applicable), voluntarily provided information, and website cookie data.

How We Collect Your Data
Data may be provided through website forms, email, WhatsApp, telephone, directly at our stores, during bookings or rentals, or when entering into and performing a service agreement.

How We Use Your Data
Your data may be used to respond to enquiries, manage bookings, prepare and perform rental agreements, contact you via email/telephone/WhatsApp, process payments and confirm bookings, comply with legal/tax/accounting obligations, protect legitimate business interests, and prevent fraud or misuse of services.
Legal grounds: performance of a contract; compliance with legal, tax and accounting obligations; consent (for marketing, where applicable); legitimate interests (security, fraud prevention, protection of rights).

Marketing
Where marketing requires consent, data will only be used after consent is obtained. You may withdraw consent at any time. Withdrawal does not affect prior lawful processing.

Video Surveillance
Our stores may use video surveillance, indicated by appropriate notices. Recordings are used for safety and retained only for the legally permitted period.

Disclosure of Data to Third Parties
We may use external service providers for website hosting/support, email and communication services, cloud storage or data management, and payment services (where applicable). Data is shared only to the extent necessary. We do not sell or rent your personal data.

Data Security and Retention
We apply technical and organisational measures to protect data from unauthorised access, loss, alteration or improper disclosure. Data is retained only as long as necessary for the purposes collected or as required by law.

Your Rights
You may request access, rectification, deletion, restriction, objection, data portability, or withdraw consent (where applicable). Requests may be submitted to wheelwave1@gmail.com. You may also lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD).

Cookies
Our website may use cookies to ensure website operation, improve user experience and analyse usage.

Changes to the Privacy Policy
This Privacy Policy may be updated periodically. The latest version will always be available on our website.