Privacy Policy

Lost Rabbit Off-Road (“we”, “us”) is a family-run 4×4 tour company based in Madeira, Portugal. This page explains what personal data we collect when you use this website, why, and what rights you have. We keep it short, and we do nothing with your data beyond arranging the tours.

Who is responsible

Lost Rabbit Off-Road, Madeira, Portugal.
Email: lostrabbitoffroad@gmail.com
Phone / WhatsApp: +351 966 454 696

What we collect

When you send a booking request or a message through this site, we collect:

• your name
• your email address
• your phone number
• the date, start time, experience and number of guests you chose
• where we should pick you up (your hotel or address)
• anything you write in the “special requests” box
• a record that you agreed to this policy

The details marked as required in the form are needed to arrange the tour — without them we cannot take the booking. Special requests are optional.

If you also write to us by email or WhatsApp, we keep that conversation so we can reply and organise your tour.

To keep the form from being abused by bots, our server also records:

• a shortened version of your IP address, with the final part removed so it cannot single out one device
• your browser’s identification string (user agent)

We use no analytics, no advertising cookies, no tracking pixels, and no social-media trackers. There is no third-party tracking on this site.

Cookies and local storage

• This website sets no cookies. It saves your chosen language in your browser’s local storage so the site remembers it next time. You can clear this any time in your browser settings.
• The site loads its fonts from Google Fonts, so Google’s servers receive your IP address, and the usual technical details your browser sends (such as its type), when a page loads. We send Google nothing else, and we do not use this to track you.

Why we use your data

• To handle your booking and keep you informed (confirmation, changes or cancellation, by email) — necessary to take steps at your request before a contract, and to carry out that contract once the tour is confirmed.
• To protect the form from abuse — our legitimate interest. The data used for this (shortened IP, user agent) cannot identify you on its own.
• Your consent — you tick the box before sending the form. You can withdraw it by emailing us, though we then cannot process your booking.

Who we share it with

We do not sell your data and we do not use it for marketing. We share it only with the providers we need to run this site and handle your booking: our email provider and the company that hosts this website.

How long we keep it

• Bookings and messages are kept for up to 24 months after the tour date (or after the request, if no tour took place), and then deleted.

Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, or restrict or object to how we use it, and to receive it in a portable format. We do not use automated decision-making or profiling.

Children

The tours are family-friendly and children come along, but the booking is always made by an adult. We do not knowingly collect data directly from children.

Changes

If we change this policy, we will update the date at the top of this page.