Your information

Privacy policy

Last updated: 23 October 2026

This policy explains how we handle personal information when you visit the NatSens website, complete our journey form or our Your Madeira Match form, or contact us about an experience in Madeira.

Who is responsible

The data controller is Katherine Nicol Vera Arancibia, operating under the name NatSens, based in Madeira, Portugal. NatSens currently operates as an individual-led project, rather than an incorporated company.

Information you give us

Depending on your answers and how you contact us, we collect:

• Your name, age, where you are travelling from, and email address or WhatsApp number if you ask us to contact you.
• Your intended travel dates, length of stay, whether you are travelling alone or with others, previous solo travel experience and accommodation plans.
• Your interests, travel motivations, preferred experiences, social preferences, planning and support needs, and budget range.
• How you found NatSens, any additional information you choose to write, and our correspondence with you.
• Your marketing preference and a record of consent, if you separately opt in to offers.
• In Your Madeira Match: the stays and experiences suggested to you, which of their links or buttons you click, and the source that brought you to the form (for example, Instagram), when the link includes it.
• Anonymous usage counts in Your Madeira Match: which question of the form was reached, linked only to a random number created for that visit. It uses no cookies, is not stored on your device and is not linked to your name or email. We use it to see where the form can be made easier (legitimate interest, Article 6(1)(f)).

Please do not include medical details, diagnoses, allergies, identification documents or other sensitive information in the open-text fields. If a particular experience requires health-related information later, we will explain the specific purpose, recipient and appropriate legal basis before requesting it.

You choose whether to send the form. Required fields are indicated in the form; without the relevant trip and contact information we may be unable to prepare or discuss a personalised proposal. Optional marketing consent is never required to request an experience.

Why we use your information

• Your Madeira Match: to calculate your suggested stays and experiences, show them to you and email you a copy. The legal basis is taking steps at your request (Article 6(1)(b)). We record which suggestions you click, relying on our legitimate interest in learning which suggestions are useful and improving them (Article 6(1)(f)). You may object to this use.
• Journey enquiries and planning: to respond, understand your preferences and prepare or arrange an experience you request. The legal basis is taking steps at your request before entering into a contract, or performing that contract (GDPR Article 6(1)(b)).
• General questions and feedback: to manage correspondence and understand interest in our services, relying on our legitimate interest in responding to enquiries and improving our offering (Article 6(1)(f)). You may object to this use.
• Optional offers: only with your separate consent (Article 6(1)(a)), through the channel you selected. You can withdraw consent at any time by emailing us or using the opt-out method in the message. Withdrawal does not affect earlier lawful processing or your journey enquiry.
• Legal requirements: where applicable, to retain records required by law (Article 6(1)(c)).

Asking us to design an experience is not consent to receive future promotional messages. We do not make decisions with legal or similarly significant effects about you solely through automated processing. Your Madeira Match uses simple fixed rules to compare your answers with our list of places and experiences; its suggestions are recommendations only.

Where your information goes

Our journey form is provided by Tally. Responses are also transferred to Google Sheets so the NatSens team can organise enquiries. Team access should be limited to the people who need the information to handle your request.

Your Madeira Match sends your answers to a Google Apps Script connected to our Google Sheet, and the email with your match is sent from our Gmail account.

Some links in your match may be affiliate links: if you book through them, NatSens may earn a commission at no extra cost to you. We do not send your answers to accommodation or booking websites; when you open one of their links, you share information directly with them under their own privacy policies.

We currently use Google Sheets, Google Apps Script and Gmail through a free personal Google account. Google's handling of information through this service is described in its Privacy Policy.

If we communicate by email or WhatsApp, the relevant communications provider also processes information needed to deliver those messages. If arranging an experience requires sharing information with an accommodation or activity provider, we will explain that sharing before it takes place and limit it to what is needed.

Tally states that form responses are stored in Europe. Google and some service providers may process information outside the European Economic Area, including in the United States. Google describes its use of adequacy decisions, including the EU–US Data Privacy Framework for covered transfers, and standard contractual clauses where required, in its data transfer information. See also Tally's data protection and service-provider information. Contact us for information about the safeguards relevant to your data.

How long we keep it

• Enquiries that do not become bookings: up to 12 months from our last contact, after which we delete or anonymise the enquiry in Tally, Google Sheets and working copies.
• Bookings: for the time needed to arrange and complete the experience. Afterwards, only records necessary for applicable legal obligations or the establishment, exercise or defence of legal claims are retained for the relevant statutory period.
• Optional offers: contact details and marketing preferences until you withdraw consent. We may retain a minimal opt-out record to respect your choice and evidence of consent where necessary to address legal claims; this does not justify retaining your full journey answers.

Deletion from provider backups follows their retention procedures. Tally states that deleted responses are removed from backups within 90 days.

Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent. Email nat.sens.co@gmail.com. We normally respond within one month; if a permitted extension is needed, we will explain it within that month. We may ask for proportionate information to verify your identity.

You may also complain to Portugal's supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), or the supervisory authority where you live or work or where an alleged infringement occurred.

Website services and external links

Serving this website and its embedded form involves technical information such as your IP address and browser details being sent to the relevant hosting and form providers. Pages that load Google Fonts also connect to Google to display their typefaces. External social-media and WhatsApp links take you to services with their own privacy policies.

This policy describes personal-data use; it does not itself grant consent to optional tracking or promotional messages.

Changes to this policy

We will update this page when our practices change, including if a company takes over responsibility for NatSens. Where required, we will notify you before using your information for a new purpose.