Privacy Policy
Last updated: September 2026
1. Who we are
ScandiXplore Porto is operated by Romualdo Valokuvaus (trading as ScandiXplore), registered in Finland. Our business address is Ratakatu 10, Rovaniemi, Finland. We offer private tour experiences in Porto, Portugal.
Contact: info@scandixplore.com
2. What data we collect
We collect personal data in the following situations:
When you submit an enquiry form: your name, email address, phone number, travel dates, group size, and the content of your message.
When you register for an account: your name, email address, and password (stored securely via Supabase). If you register using Google Sign-In, we receive your name, email address, and profile picture from Google.
When you apply to become a guide: your name, email address, phone number, city, languages spoken, specialism, and motivation statement.
When you subscribe to our newsletter: your name and email address.
Automatically when you visit our website: IP address, browser type, pages visited, and time spent on pages via Cloudflare analytics.
3. How we use your data
We use the data we collect to:
— Respond to tour enquiries and confirm bookings
— Match guests with the right local guide
— Send booking confirmations and tour information
— Send newsletters and travel tips to subscribers who have opted in
— Review and respond to guide applications
— Improve our website and services
— Comply with legal obligations
4. Google user data
If you choose to sign in with Google, we receive your name, email address, and profile picture from Google. We use this information solely to create and manage your account on our platform. We do not share Google user data with third parties except as necessary to provide our services. We do not use Google user data for advertising purposes. You can revoke our access to your Google account at any time via your Google account settings.
5. Legal basis for processing (GDPR)
We process your personal data on the following legal bases:
Contractual necessity: processing required to fulfil a booking or service agreement.
Legitimate interests: responding to enquiries, improving our services.
Consent: newsletter subscriptions and marketing communications.
6. Data storage and security
Your data is stored securely using Supabase (hosted in the EU), Brevo (email marketing), and Cloudflare (website infrastructure). All data transfers are encrypted via HTTPS. We retain personal data for as long as necessary to provide our services or as required by law.
7. Third parties
We share data with the following third-party services to operate our business:
— Supabase — database and authentication (EU hosted)
— Brevo — email marketing
— Cloudflare — website hosting and analytics
— Web3Forms — form submission processing
— Google — authentication via Google Sign-In
We do not sell your personal data to any third party.
8. Your rights
Under GDPR you have the right to:
— Access the personal data we hold about you
— Correct inaccurate data
— Request deletion of your data
— Object to processing of your data
— Withdraw consent at any time
— Lodge a complaint with a supervisory authority
To exercise any of these rights contact us at info@scandixplore.com.
9. Cookies
We use essential cookies only. See our Cookie Policy for details.
10. Changes to this policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. Continued use of our services after changes constitutes acceptance of the updated policy.
11. Contact
For any privacy-related questions contact us at info@scandixplore.com.