PRIVACY & COOKIES

1. WHO WE ARE

This website and our voyages are run by Desfecho Nómada – Unipessoal, Lda., a travel agency registered in Portugal under RNAVT n.º 13203 (see registration), NIF 519255704. Our registered (legal) address is Rua Quinta do Marquês, 40 – 4.º Esq., 3660-529 São Pedro do Sul, Portugal. We are a fully online company and don’t receive visitors there, so please contact us by email or phone. Desfecho Nómada is the data controller for the personal data described in this policy.

unusual voyages is a registered trademark (INPI n.º 726676) owned by Tânia Neves and used by Desfecho Nómada with her permission.

For anything related to your data: ad***@************es.com · +351 912 462 171

2. WHAT DATA WE COLLECT

When you request a booking (form on each tour page): first and last name, email, WhatsApp number, age, nationality, gender, room preference (shared or single), the language you’d like our emails in, the tour you’re interested in, and whether you’d like to receive our newsletter.

When your booking is confirmed: we send you a secure Passenger Form to collect what we need to organise your trip, such as your full name as it appears on your passport, date of birth, passport details, address and tax number (NIF) for invoicing, an emergency contact, travel insurance details and flight details. Only if you choose to share them: dietary requirements and health information relevant to your safety during the trip.

When you subscribe to our newsletter or contact us: your name, email, preferred language and your message.

When you visit our website: with your consent, statistics on how the site is used (see section 10). Our security tools also process technical data, such as your IP address, to block spam and abuse.

Photos: our tour leaders photograph our voyages. We only publish images in which you can be identified with your permission, and you can withdraw it at any time.

3. WHY WE USE YOUR DATA, AND ON WHAT LEGAL BASIS

  • Answering booking requests and messages: steps taken at your request before a contract
  • Organising your trip and keeping in touch before, during and after it (email, WhatsApp): performance of the contract
  • Invoicing and accounting: legal obligation
  • Health and dietary information: your explicit consent
  • Newsletter: your consent (you can unsubscribe at any time)
  • Asking for feedback after your trip: legitimate interest (you can object at any time)
  • Website statistics: your consent, given through the cookie banner
  • Protecting the site against spam and attacks: legitimate interest
  • Publishing photos in which you can be identified: your consent

We do not make automated decisions or create profiles that have legal or similarly significant effects on you.

4. WHO WE SHARE YOUR DATA WITH

  • Travel partners who deliver your trip: local guides, accommodation and transport providers and, where needed, the authorities that issue visas or permits. Each receives only what it needs.
  • Service providers working on our behalf, under data processing agreements: website hosting; email, newsletter and call scheduling; booking management and workflow automation; secure online forms for traveller information (Passenger Form); invoicing; anti-spam and bot protection; website statistics and maps (only with your consent); cookie consent management; AI assistants (see section 9).
  • WhatsApp: if you join a trip group chat, your number and messages are also processed by WhatsApp under its own terms.
  • Public authorities, when the law requires it.

We only work with established providers that comply with the GDPR, and each one receives only the data it needs for its task. The current list of providers is available on request. We never sell or rent your data.

5. INTERNATIONAL TRANSFERS

Some of our service providers (for example Google, Notion, Cloudflare, Zapier, Setmore and Eventbrite) may process data outside the European Economic Area, mainly in the United States. When that happens, we rely on the safeguards provided by the GDPR: the EU–US Data Privacy Framework, where the provider is certified, or the European Commission’s Standard Contractual Clauses.

To deliver your trip, we also need to share some of your data with partners in the destination country. That transfer is necessary to perform your contract with us.

6. HOW LONG WE KEEP YOUR DATA

  • Booking requests that don’t turn into a booking: 12 months
  • Passport and health information: deleted 3 months after the end of your trip
  • Other booking data: 2 years after your trip
  • Invoices and accounting records: for as long as Portuguese tax law requires (currently 10 years)
  • Newsletter: until you unsubscribe
  • Website statistics: as shown in the cookie list below

7. YOUR RIGHTS

Under the GDPR you have the right to:

  • access your data
  • correct or delete it
  • restrict or object to its processing
  • receive a copy in a portable format
  • withdraw your consent at any time, without affecting processing that took place before
  • complain to the Portuguese data protection authority, CNPD (www.cnpd.pt)

To exercise any of these rights, email ad***@************es.com. We’ll reply within one month.

8. SECURITY

Your data travels over encrypted connections (HTTPS) and is stored with established providers that meet GDPR security standards. Only our team can access it.

The most sensitive information (passport, insurance and health details) is collected only through our Passenger Form, run by a specialised, GDPR-compliant form provider, with every submission encrypted so that only we can read it. It is never copied into our booking-management or automation tools, and it is deleted automatically 3 months after your trip.

No system is 100% secure, but we do our best to keep your data safe.

9. HOW WE USE AI

We do not use AI chatbots or AI agents to talk to you, and AI never decides on your booking: every request is reviewed personally by us, and every tour is thought out, designed and made by us and our local contacts, based on our own first-hand experience in the field.

We use AI for automations and repetitive tasks, but your personal and sensitive data is encrypted and kept safe. When an AI tool handles personal data, we only use services whose terms do not allow your data to be shared or used to train AI models.

We are also aware of the environmental impact of the data centres that power AI, so we use it sparingly and only where it genuinely saves time.

10. COOKIES

We use cookies and similar technologies to make the site work and, with your consent, to understand how it’s used. Necessary cookies are always active. Statistics and marketing cookies are only set if you accept them in our cookie banner. You can change your choice at any time below.

CleanTalk Spam Protect

Functional

Usage

We use CleanTalk Spam Protect for spam prevention. Read more about CleanTalk Spam Protect

Sharing data

For more information, please read the CleanTalk Spam Protect Privacy Statement.

Functional

Name
bot_detector_webgl_support
Expiration
Function
Name
ct_bot_detector_event_token
Expiration
Function
Name
Expiration
session
Function
Store dynamic variables from the browser
Name
bot_detector_token_ip_version
Expiration
Function
Name
Expiration
session
Function
Store time of visit
Name
ct_cookies_type
Expiration
Function
Name
Expiration
session
Function
Store time of visit
Name
Expiration
Function
Name
ct_checked_emails_exist
Expiration
Function
Name
ct_has_input_focused
Expiration
Function
Name
bot_detector_navigator_property_bind
Expiration
Function
Name
bot_detector_pointer_data
Expiration
Function
Name
bot_detector_scrolling_additional
Expiration
Function
Name
bot_detector_prev_dto
Expiration
Function
Name
bot_detector_referrer
Expiration
Function
Name
Expiration
session
Function
Name
bot_detector_f_hash
Expiration
Function
Name
bot_detector_outer_vs_inner
Expiration
Function
Name
apbct_headless
Expiration
Function
Name
bot_detector_headless
Expiration
Function
Name
bot_detector_has_key_up
Expiration
Function
Name
Expiration
session
Function
Store dynamic variables from the browser
Name
bot_detector_user_agent
Expiration
Function
Name
bot_detector_mouse_moved
Expiration
Function
Name
bot_detector_page_hits
Expiration
Function
Name
Expiration
session
Function
Store dynamic variables from the browser
Name
bot_detector_browser_supports_cookies
Expiration
Function
Name
Expiration
session
Function
Store dynamic variables from the browser
Name
Expiration
session
Function
Name
bot_detector_cron_storage
Expiration
Function
Name
ct_bot_detector_form_exclusion
Expiration
Function
Name
bot_detector_log_transport_enabled
Expiration
Function
Name
Expiration
session
Function
Store dynamic variables from the browser
Name
bot_detector_has_input_focused
Expiration
Function
Name
bot_detector_has_scrolled
Expiration
Function
Name
ct_bot_detector_frontend_data_log
Expiration
Function
Name
ct_has_key_up
Expiration
Function
Name
bot_detector_webgl_f_hash
Expiration
Function
Name
bot_detector_referrer_previous
Expiration
Function
Name
bot_detector_event_token
Expiration
Function
Name
bot_detector_screen_info
Expiration
Function
Name
Expiration
session
Function
Store time of visit
Name
bot_detector_list_keys_pressed
Expiration
Function
Name
Expiration
session
Function
Spam and bot protection
Name
apbct_antibot
Expiration
Function

Google Analytics

Statistics

Usage

We use Google Analytics for website statistics. Read more about Google Analytics

Sharing data

For more information, please read the Google Analytics Privacy Statement.

Statistics

Name
_gcl_ls
Expiration
Function
Name
Expiration
2 years
Function
Store and count pageviews
Name
Expiration
1 year
Function
Store and count pageviews

Elementor

Statistics (anonymous)

Usage

We use Elementor for content creation. Read more about Elementor

Sharing data

This data is not shared with third parties.

Statistics (anonymous)

Name
Expiration
persistent
Function
Store performed actions on the website

WordPress

Functional

Usage

We use WordPress for website development. Read more about WordPress

Sharing data

This data is not shared with third parties.

Functional

Name
Expiration
session
Function
Store browser details

Grand Tour Theme

Functional

Usage

We use Grand Tour Theme for website design. Read more about Grand Tour Theme

Sharing data

This data is not shared with third parties.

Functional

Name
grandtour_recently_view_tours
Expiration
Function
Remember recently viewed tours

WPML

Functional

Usage

We use WPML for locale management. Read more about WPML

Sharing data

This data is not shared with third parties.

Functional

Name
Expiration
1 day
Function
Store language settings

Google Maps

Marketing

Usage

We use Google Maps for maps display. Read more about Google Maps

Sharing data

For more information, please read the Google Maps Privacy Statement.

Marketing

Name
Expiration
expires immediately
Function
Read user IP address

Complianz

Functional

Usage

We use Complianz for cookie consent management.

Sharing data

This data is not shared with third parties. For more information, please read the Complianz Privacy Statement.

Functional

Name
cmplz_functional
Expiration
365 days
Function
Name
cmplz_statistics
Expiration
365 days
Function
Name
cmplz_preferences
Expiration
365 days
Function
Name
cmplz_marketing
Expiration
365 days
Function

11. CHILDREN

Our voyages are designed for adults. Travellers under 18 must book with a parent or legal guardian, and we do not knowingly collect data from children under 16 without the consent of a parent or guardian.

12. CHANGES TO THIS POLICY

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated below.

Last updated: 25 October 2026