Legal
Privacy and cookie policy
We collect only what we need to answer your enquiry and manage your property. We never sell your data. Last updated 6 October 2026.
Who we are
LD Ninja Stays LDA is the data controller for this website, ldninjastays.pt. We manage short-term rental properties in Lisbon on behalf of their owners.
Rua da Misericórdia 14, Lisboa, Portugal ·
Data we collect
Enquiry forms. Your email and, if you give them, your name, phone or WhatsApp number, the area and size of your property, its AL status and any message you write.
Conversations. Emails, WhatsApp messages and call bookings you make with us.
Owner contract data. If you become a client: identification and tax details, address, bank details for payouts, property and AL licence details, and reservation and payment records.
Website usage. Only if you accept analytics cookies: pages visited, approximate location, device and browser type, and how you arrived on the site.
How and why we use it
To answer your enquiry and prepare your revenue projection or property audit. Legal basis: steps you ask us to take before a contract.
To manage your property and pay you, if you become a client. Legal basis: performance of our management contract.
To meet legal obligations, such as tax, accounting and Alojamento Local rules. Legal basis: legal obligation.
To improve the website through anonymous statistics. Legal basis: your consent, which you can withdraw at any time.
To follow up on an enquiry you sent us, a small number of times. Legal basis: our legitimate interest. Reply "stop" and we will not contact you again.
We do not add you to a newsletter or use your data for automated decisions.
How long we keep it
Enquiries that do not lead to a contract: up to 24 months.
Client contracts, payouts and reservation records: for the contract and then 10 years, as Portuguese tax and accounting law requires.
Analytics data: 14 months, then deleted automatically.
International transfers
Some providers, such as Google, Meta and Guesty, may process data outside the European Economic Area. Where they do, the transfer is protected by the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
Your rights
Under the GDPR you can ask us to access, correct or delete your data, restrict or object to how we use it, receive a copy in a portable format, and withdraw consent at any time.
Email us: . We reply within one month, free of charge.
If you are not happy with how we handled your data, you can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), or use the Livro de Reclamações.
Changes to this policy
If we change this policy we will update the date at the top of this page. Significant changes will be shown on the website.