Privacy Policy

Last updated: 30 October 2026

Portugal Unboxed is an English-language magazine about Portugal. We collect as little data as we can. This page explains what we collect, why, how long we keep it and your rights under the EU General Data Protection Regulation (GDPR) and Portuguese Law 58/2019.

What we collect and why

• Visit statistics. We use Koko Analytics, which runs on our own server and does not use cookies. It counts page views and referrers using a temporary, anonymised hash that cannot identify you and is never shared. Legal basis: our legitimate interest in understanding which stories are read (Art. 6(1)(f) GDPR).
• Your cookie choice. When you use the cookie banner we store your choice in a cookie and keep an anonymised consent record so we can show we respected it. Legal basis: legal obligation (Art. 6(1)(c)).
• Newsletter. If you sign up for The Sunday Dispatch we keep your email address to send it, until you unsubscribe. Every email has an unsubscribe link. Legal basis: consent (Art. 6(1)(a)).
• Comments and messages. If you leave a comment or write to us, we keep what you send (name, email, message, and for comments your IP address for spam protection) only for as long as needed to reply or moderate. Legal basis: legitimate interest.
• Server logs. Our hosting keeps short-lived technical logs (IP address, browser, time of request) for security, deleted after at most 30 days.

Cookies

Strictly necessary cookies keep the site working and remember your cookie choice. Optional cookies (for example from embedded maps, videos or social posts) stay off until you allow them. Full details are in our Cookie Policy, and you can change your choice at any time with the cookie button at the bottom-left of every page.

Who else sees data

We do not sell your data and we do not run advertising trackers. The site is delivered through Cloudflare, which processes technical data such as IP addresses to protect and speed up the site. Our server is hosted by OVH in Canada. Where a provider is outside the EU/EEA, transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses. Photos credited to Unsplash or Pexels are hosted on our own server.

Your rights

You can ask to access, correct, delete or export personal data we hold about you, restrict or object to its use, and withdraw consent at any time. Write to [email protected]; we reply within one month. You can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD, cnpd.pt).

Changes

If we change this policy we will update the date at the top of this page.