Privacy Policy

issebya.homes is operated by Sviatlana Buben, NIF 330791745, Rua do Lagarto 5, 2705-044, Almoçageme, Portugal (Alojamento Local registration 168673/AL). For any question about this policy or your data, contact help@issebya.com.

Booking form: name, email, phone number, number of guests, and your chosen dates, when you book a room on our website.

WhatsApp messages: if you message us, we keep the content of that conversation and your phone number, so we can respond and assist you, including across future stays.

Identity documents: Portuguese law requires us to register foreign guests with the immigration authorities (AIMA/SIBA). This is done by checking your ID or passport in person at check-in. We do not photograph, scan, or store identity documents digitally.

Payment: handled entirely by Stripe. We never see or store your card details.

Processing your booking and stay: to fulfil our contract with you.

Registering foreign guests with AIMA/SIBA: to comply with a legal obligation.

Keeping booking and invoice records: to comply with Portuguese tax law, which requires these records to be kept for 10 years.

Responding to you on WhatsApp: to fulfil our contract with you and answer your questions, including through our AI assistant (see below).

Sending you updates or promotions on WhatsApp: only with your consent, given by opting in at booking. You can withdraw this at any time by telling us on WhatsApp or emailing help@issebya.com.

When you message us on WhatsApp, your conversation may be handled in part by an AI assistant, which can answer questions about the property and help prepare a booking for you. A human host reviews and approves any booking link before it is sent to you, and no booking or payment is ever completed automatically. You can always ask to speak with a human host directly.

Supabase (database hosting) stores our data in the EU, in Ireland.

Stripe (payment processing), Twilio (WhatsApp delivery), Resend (booking confirmation emails), and Sentry (error monitoring) are based in the United States and are certified under the EU-U.S. Data Privacy Framework.

Telegram(internal notifications to our team) and the infrastructure that runs our AI assistant and lets us monitor its performance are based outside the EU/EEA. For these, we rely on the European Commission's Standard Contractual Clauses or equivalent safeguards.

You can ask us for more information about any of these safeguards at any time.

Booking and invoice records: kept for 10 years, as required by Portuguese tax law.

WhatsApp conversation history and guest preferences: kept to help us provide better service, including on future stays. You can ask us to delete this data at any time.

Under the GDPR, you have the right to access, correct, delete, or restrict the personal data we hold about you, to receive a copy of it in a portable format, to object to our use of it, and to withdraw consent at any time. To exercise any of these, contact help@issebya.com. We will respond within one month, as required by law.

You also have the right to lodge a complaint with Portugal's data protection authority, the CNPD (Comissão Nacional de Proteção de Dados).

We use reasonable technical and organisational measures to protect your data, including handling all payments through Stripe rather than storing card details ourselves, and encrypted connections between your browser or WhatsApp and our systems.

We may update this policy from time to time. Last updated: August 2026.