Privacy Policy

Pepes Actividades Hoteleiras, Lda. (Portuguese tax number 504012894), with registered address at Rua João de Deus, n.º 25, 3rd floor, 2400-161 Leiria, Portugal, is the entity responsible for processing your personal data as the operator of the Castle Studios local accommodation (licence n.º 160004/AL).

For any question about your data, contact us at castlestudiospt@gmail.com.

When you make a booking: first name, last name, email and phone number, to process the booking through our property management system and communicate with you about your stay (confirmation, check-in, support).

Payment data: never reaches our servers. Payment is processed directly by Stripe, on Stripe's secure page — we only receive confirmation that the payment was accepted.

If you create a member account: your email, to manage your sign-in code and your personal discount code.

We use the following service providers (data processors), each only receiving the data strictly necessary for its function:

• Smoobu — booking and availability calendar management.
• Stripe — payment processing.
• Supabase — member account authentication.
• Resend — sending sign-in code and booking confirmation emails.

We do not sell or share your data for third-party advertising purposes.

Booking-related data is kept for the period legally required for tax and accounting records in Portugal (10 years). Member account data is kept for as long as the account exists; you can request its closure at any time.

You can, at any time and free of charge, ask us for: access to your data, rectification, erasure, restriction of processing, portability, or to object to processing. Just write to castlestudiospt@gmail.com.

If you're not satisfied with our response, you have the right to lodge a complaint with the CNPD — Comissão Nacional de Proteção de Dados, Portugal's data protection authority (www.cnpd.pt).

This site only uses cookies that are strictly necessary for it to work — for example, to keep you signed in when you log in with your member code. We don't use advertising or third-party cookies to track you on other sites.

We use Vercel Analytics to see how many people visit the site. It's a cookie-free tool that doesn't collect data that identifies you individually (it doesn't record your IP or build a profile about you) — only aggregated, anonymous visit counts.