Privacy notice.

Who we are

• Provider and data controller: [TODO: legal name of the person or company that runs Guide Me], trading as Guide Me
• Address: [TODO: registered address]
• Tax number (NIF/NIPC): [TODO: NIF / NIPC]
• Registration: [TODO: commercial registry and number (or say if not applicable)]
• Email: hello@guidemevisits.com
• Phone: [TODO: phone number, or remove this line]

We are responsible (the “controller”) for the personal data described here. We have not appointed a data protection officer. For anything about this notice or your data, write to hello@guidemevisits.com.

This notice covers this website and the audio guides we host, which open from a QR code or a private link. When we run a guide for a venue, the venue’s own privacy notice may also apply.

On this website

• Enquiry form. Your name, organisation, email address, type of venue, an optional visitor estimate and your message. We use them to reply and to discuss a possible pilot. Legal basis: steps you ask us to take before a possible contract, and our legitimate interest in answering business enquiries. The tick box confirms that you want us to reply. We need your name, email and message to answer you.
• Emails you send us. We keep them to reply and to keep a record of our conversation, on the same legal basis.
• Technical data. Like any website, each request sends your IP address, the page asked for, the time and your browser type to our hosting provider, which keeps short-lived logs to run and protect the service. Legal basis: our legitimate interest in a secure, working website.

In our audio guides

• No account. You do not give us your name or email to use a guide.
• Location, if you turn it on. Your phone works out where you are. The guide uses this only on the phone, to show you on the map, give directions and start a stop when you arrive. It is not sent to us and we do not store it.
• Map pictures. The street map is loaded from OpenFreeMap, a free map service. As with any web request, this shows them your IP address and which part of the map is on screen, which is the area around you when the map follows your position. OpenFreeMap says its normal access logs do not record IP addresses.
• Camera. Used only to read a QR code. The picture is read on the phone and is not recorded or sent.
• Ticket codes (only in guides that use them). When you enter a code, our server checks it and sets a cookie in your browser that holds when your access started and ends, an ID for the code, a random device ID and a link to the guide. To keep each code to its agreed number of devices and to stop code guessing, the server records when a code was first used and counts attempts per IP address for 10 minutes. The code you type is not logged. Legal basis: our legitimate interest in giving access only to people with a valid ticket, as agreed with the venue.
• Rating and comments (only if you send them). Your star rating, your comment, the guide language, the last stop you opened, how long your visit lasted, the guide version and the time. We do not store your IP address or a device ID with it. It is kept in our hosting logs and sent to us by email. We use it to improve the guide. Legal basis: our legitimate interest in improving our guides. Please do not write personal details in the comment.
• Device voice. If recorded narration is not ready in your language, your phone’s own text-to-speech reads the text aloud. Some phones use an online voice service from the phone or browser maker for this; that is controlled by your device settings, not by us.
• Settings saved on your phone. Your language, text size, favourites, playback position and offline copies are kept in your browser and are not sent to us. See the cookie notice.

Who else receives data

These service providers process data for us under data processing terms. They may not use it for their own purposes.

• Vercel Inc. (United States): hosts the website and guides and keeps the request and server logs.
• Resend (Plus Five Five, Inc., United States): delivers enquiry-form messages and guide feedback to us by email.
• Upstash, Inc. (United States), only for guides that use ticket codes: stores code activations and the short-lived attempt counters. Data region: [TODO: Upstash database region].
• Our email provider for hello@guidemevisits.com: [TODO: mailbox provider and country].

OpenFreeMap supplies the map pictures as an independent service; see its own privacy policy. We do not sell personal data, and we do not share it for advertising.

Transfers outside the European Economic Area. Vercel, Resend and Upstash are US companies. Transfers rely on the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses in their data processing terms. You can ask us for details.

How long we keep it

• Enquiries and emails: up to [TODO: retention period, e.g. 24 months] after our last contact. If we go on to work together, contract and invoice records are kept for as long as Portuguese tax and accounting law requires.
• Copies of emails at our email-delivery provider: 30 days.
• Hosting request and server logs, including feedback records: [TODO: log retention on our Vercel plan].
• Ticket-code cookie: until your access period ends, plus 30 days so the guide can tell you that access has ended. Code activation records: until the code’s access period ends. Attempt counters: 10 minutes.

Your rights

You can ask to see the personal data we hold about you, to correct it or delete it, to restrict its use, and to receive a copy in a portable format where that applies. You can object at any time to our use of your data based on legitimate interest. Write to hello@guidemevisits.com; we reply within one month.

You can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, www.cnpd.pt, or to the authority in the EU country where you live or work.

Other points

• We make no automated decisions about you and do no profiling.
• This website has no advertising or analytics, and does not track you across other sites.
• If we change this notice, we will update the date at the top of this page.