Last updated: 11 August 2026
This Privacy Policy explains how Bleisured Lda processes personal data when you use our direct booking site at book.bleisured.com to view and book serviced apartments in Lisbon. We process your data in accordance with the GDPR (Regulation (EU) 2016/679) and Portuguese data protection law (Lei n.º 58/2019). Our general Privacy Policy at https://www.bleisured.com/privacy-policy applies in addition to this one.
1. Who is responsible
Bleisured Lda Rua das Mercês 41, 9000-224 Funchal, Portugal NIF 517095130 Email: contact@bleisured.com Phone: +351 927 750 033
Our booking site is operated for us on the Hostaway booking engine. Hostaway acts as our processor.
2. What we process and why
Bookings. To handle a booking we process your name, email address, phone number, stay dates, number and details of guests, and your payment information. Legal basis: Article 6(1)(b) GDPR (performance of a contract). Payment data is processed by our payment provider Stripe; we do not store full card details ourselves.
Enquiries. If you contact us through the booking site, we process the details you provide in order to respond. Legal basis: Article 6(1)(b) and Article 6(1)(f) GDPR (our legitimate interest in answering).
Security and error detection. We use Google reCAPTCHA to protect forms against abuse and Sentry to detect technical errors. These services may process your IP address. Legal basis: Article 6(1)(f) GDPR (legitimate interest in the security and stability of the site).
Log data. Our providers automatically process technical data such as your IP address, browser type and time of access to operate and secure the site. Legal basis: Article 6(1)(f) GDPR.
Records. Booking, invoicing and accounting records are kept to meet our legal obligations. Legal basis: Article 6(1)(c) GDPR.
3. Who receives your data
We share your data only as needed with processors acting on our behalf: Hostaway (booking engine), Stripe Payments Europe, Ltd. (payment processing), Google (reCAPTCHA) and Functional Software, Inc. (Sentry, error monitoring). We do not sell your data.
4. International transfers
Some providers are located in or process data in the United States. Such transfers are based on the EU-US Data Privacy Framework, where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses with additional safeguards. You can request a copy from us at contact@bleisured.com.
5. How long we keep your data
Booking, invoicing and accounting records are kept for the periods required under Portuguese tax and commercial law (generally 10 years). Enquiry data that does not lead to a booking is deleted within 24 months.
6. Your rights
You have the right to access, rectification, erasure, restriction, portability and objection, and to withdraw consent where processing is based on it. Contact us at contact@bleisured.com. You may also lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, geral@cnpd.pt.
7. Children
Our services are directed at adults. We do not knowingly process personal data of children under the age of 13.
8. Changes
We may update this Privacy Policy from time to time. The current version is always available here, with the date of the last update shown above.