Privacy Policy

Last updated: 20 June 2026

1. Who we are

Sabrina Kalea Media, Unipessoal Lda. ("we", "us", "our") operates the website sabrinakalea.com, an independent publication of boutique and luxury hotel reviews. We are the data controller responsible for your personal data. Our registered office is Rua Garrett 12, 1200-203 Lisboa, Portugal, and you can reach our privacy team at privacy@sabrinakalea.com.

2. Data we collect

We collect only what we need to run the site and respond to you:

• Contact form data. When you write to us, we receive the name, email address, subject and message you submit.
• Newsletter data. If you subscribe to our monthly letter, we store the email address you provide and the date you subscribed.
• Analytics data. With your consent, we collect anonymised usage data such as pages viewed, approximate region, device type and referring site. This does not identify you personally.
• Technical data. Our hosting provider automatically logs standard information such as IP address, browser type and timestamps for security and to keep the service running.

We do not knowingly collect data from anyone under 16, and we do not collect special categories of data (such as health or political opinions).

3. Why we use it

We use your personal data to:

• reply to enquiries and recommendation requests you send us;
• send our monthly newsletter, where you have asked to receive it;
• understand which reviews are read so we can improve our content;
• keep the website secure, prevent abuse and diagnose technical problems;
• comply with our legal and accounting obligations.

We never sell your personal data, and we do not use it for automated decision-making or profiling.

4. Legal bases for processing

Under the EU General Data Protection Regulation (GDPR) we rely on the following legal bases:

• Consent — for analytics cookies and for sending the newsletter. You can withdraw consent at any time.
• Legitimate interests — for responding to your enquiries, securing the site and preventing abuse, balanced against your rights.
• Legal obligation — where we must retain records to meet tax or regulatory requirements.

5. Who we share your data with

We share data only with service providers who help us operate, and only as far as needed:

• Hosting provider — stores the website and server logs.
• Email & form processor — delivers contact-form messages and the newsletter to us.
• Analytics provider (Google Analytics) — processes anonymised usage data, only after you consent.

Each provider is bound by a data-processing agreement and may use your data only on our instructions. We may also disclose data where required by law or to protect our legal rights.

6. How long we keep it

We keep contact-form messages for up to 24 months after our last exchange, newsletter data until you unsubscribe, and server logs for up to 12 months. Analytics data is retained for 14 months and then deleted or anonymised. Where the law requires longer retention (for example, accounting records), we keep only what is necessary.

7. Your rights under the GDPR

If you are in the European Economic Area or the United Kingdom, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased ("right to be forgotten");
• restrict or object to how we process it;
• receive your data in a portable format;
• withdraw consent at any time without affecting prior processing.

To exercise any of these rights, email privacy@sabrinakalea.com. We respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority — in Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD).

8. Your rights under the CCPA (California)

If you are a California resident, the California Consumer Privacy Act gives you the right to know what personal information we collect, to request its deletion, and to opt out of any "sale" of personal information. We do not sell personal information as that term is defined by the CCPA. To make a request, contact privacy@sabrinakalea.com; we will not discriminate against you for exercising these rights.

9. How we protect your data

The site is served over HTTPS with a valid TLS certificate. We apply appropriate technical and organisational measures — access controls, encryption in transit, and minimal data collection — to protect your information. No method of transmission over the internet is completely secure, but we work to keep the risk low.

10. International transfers

Some of our providers process data outside the European Economic Area. Where that happens, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses to ensure your data receives an equivalent level of protection.

11. Changes to this policy

We may update this policy to reflect changes in our practices or the law. When we do, we revise the "last updated" date above. Material changes will be highlighted on this page.

12. Contact us

Questions about this policy or your data? Write to us at privacy@sabrinakalea.com or by post to Sabrina Kalea Media, Unipessoal Lda., Rua Garrett 12, 1200-203 Lisboa, Portugal. See also our Cookie Policy and Terms of Service.