Last updated: April 12, 2025

This Privacy Policy explains how RPlusTransfers (“we”, “our”, “us”) collects, uses, and protects your personal data when you visit or use our website https://rplustransfers.com and our services. We are committed to complying with the EU General Data Protection Regulation (GDPR).

1. Legal Basis for Processing

• Contractual necessity: for booking and payment processing.
• Consent: for marketing emails and optional cookies.
• Legal obligation: for tax and regulatory compliance.
• Legitimate interest: for service improvement and fraud prevention.

2. Information We Collect

• Identification: name, date of birth, tax ID, passport number.
• Contact: email address, phone number, address.
• Payment: IBAN, SWIFT/BIC, card data (PCI-DSS compliant).
• Usage: IP address, browser, device type, geolocation.
• Transaction: bookings, receipts, invoices.
• Biometric: only if used for payment verification.

3. Data Security

• TLS/SSL encryption
• Tokenization of payment data
• Two-factor authentication
• Intrusion detection systems
• Annual security audits

4. Data Sharing

We may share data with:

• Payment processors: Stripe, PayPal
• Fraud detection tools: Riskified, Sift
• Legal authorities (Portuguese Law 58/2019)
• Technical support teams (EU-based)

5. International Transfers

Your data may be transferred to:

• Google Analytics (USA – Standard Contractual Clauses)
• Stripe (USA – Privacy Shield)
• PayPal (USA – GDPR compliant)

6. Your Rights

You may request to:

• Access your personal data
• Rectify incorrect data
• Request deletion (“right to be forgotten”)
• Restrict or object to processing
• Withdraw consent (marketing/cookies)
• Receive data in CSV or JSON (portability)
• Request human review for automated decisions

Send requests to: [email protected] (with identity verification).

7. Data Retention

• Booking records: 10 years
• Analytics: 25 months
• Marketing data: until consent withdrawn
• Fraud-related data: 7 years

8. Minors

Our services are only available to users 18+. If we discover data from a minor, it will be deleted immediately.

9. Automated Decision-Making

We use AI-driven fraud detection systems. You may request manual review of any denied transaction.

10. Contact

Data Protection Officer
Email: [email protected]
Address: São Lourenço, 8135-027 Almancil, Portugal

Supervisory Authority:
National Data Protection Commission (CNPD)
Av. D. Carlos I, 134 – 1.º, 1200-651 Lisboa, Portugal