Privacy Policy
Last updated: September 2026
Zest Portugal (“Zest”, “we”, “us” or “our”) is a tour operator based in Portugal, operated by Nikola Krickovic, a self-employed professional registered in Portugal, trading under the Zest Portugal brand.
This Privacy Policy explains how we collect, use, and protect personal information when you visit our website, contact us or book an experience with us.
Information we collect
We do not currently use contact forms, newsletters, or customer accounts on this website.
We may receive personal information when you contact us through WhatsApp or otherwise communicate with us. This may include your name, telephone number, preferred tour date, number of travellers, and any other information you choose to provide.
If you make a booking or payment, we may also process information necessary to manage your reservation, provide the experience, communicate with you, and meet our legal and accounting obligations.
Payments may be processed through Stripe. We do not directly receive or store your complete payment card details.
When you visit our website, certain technical information may also be collected through cookies and similar technologies, including information such as your device, browser, IP address, and how you interact with the website. Where required, analytics and advertising technologies are activated only after you provide consent.
How we use your information
We use personal information where necessary to respond to inquiries, arrange and provide our tours, manage bookings and payments, communicate with guests, comply with legal and accounting obligations, maintain and secure our website, and, where you have given the required consent, understand website usage and measure the effectiveness of our advertising.
Depending on the circumstances, our legal basis for processing may include taking steps at your request before entering into a contract, performing a contract with you, complying with a legal obligation, pursuing our legitimate interests where permitted, or obtaining your consent. Consent is only one of the possible legal bases under GDPR; for example, data genuinely necessary to fulfill a booking will generally be processed on a contractual rather than consent basis.
Services we use
Our website is hosted using Wix. We may also use third-party services, including WhatsApp/Meta for communications, Stripe for payment processing, Google Analytics for website analytics, and Meta technologies for advertising measurement.
These providers may process personal information in accordance with their own privacy policies, and, depending on the provider and service, information may be processed outside the European Economic Area using applicable safeguards.
We do not sell your personal information.
How long we keep your information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including providing our services and meeting applicable legal, tax, and accounting requirements.
Information relating to inquiries that do not result in a booking will not be retained longer than reasonably necessary for handling the inquiry and any appropriate follow-up.
Your rights
Under applicable data-protection law, including the GDPR, you may have rights to access your personal data, correct inaccurate information, request deletion or restriction of processing, object to certain processing, request portability of your data, and withdraw consent where processing is based on consent.
To exercise your rights or ask a question about how we use your information, contact:
info@zestportugal.com.
You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD).
Changes to this policy
We may update this Privacy Policy when our services, website, or legal obligations change. The latest version will always be published on this page.