Privacy policy

Who is responsible for your data

The data controller is lasertagpt, Portuguese tax number (NIF) 216878365, at R. de Rapijães 2, 4570-338 Laundos, Portugal. A NIF is the registration number every business in Portugal has.

For anything about personal data, write to [email protected] or call +351 960 827 143. We have not appointed a data protection officer, as the size of the business does not require one.

Your rights

At any time you can ask to see the data we hold about you, have it corrected or deleted, limit what we do with it, or get a copy. You can object to a processing and, where processing rests on your consent, withdraw it without affecting what was done before.

An email to [email protected] saying what you want is enough. We answer within one month. If the request is complex we may need longer, and we will tell you.

What we collect and why

Booking form on the site: full name, mobile number, preferred day and the message you write. We use them to answer the request and agree a time for the game, party or event. The legal basis is steps taken at your request before entering into a contract (GDPR article 6(1)(b)).

WhatsApp, phone and email: the number or address you contact us from and the content of the conversation, for the same purpose.

Confirmed bookings: name, contact, day, time, game and number of people. We need these to prepare vests and guns and to manage the arena on busy days.

Invoicing: the details the law requires on an invoice, including a NIF if you give one.

Technical data: the hosting provider logs the IP address and time of each request to the server, for security and to keep the site running. We use no analytics or advertising tools on the site, so there are no tracking cookies and no consent banner.

The form sets one technical cookie called lt_token, with no personal data in it, used only to block automated submissions. It expires after two hours.

How long we keep it

Requests by form, WhatsApp, phone or email that did not turn into a booking: deleted after 6 months.

Confirmed bookings: kept for 12 months after the date of the game, so we can answer questions about that visit.

Invoices and accounting records: 10 years, as Portuguese tax law requires.

Hosting logs: for the period set by the provider, normally a few days.

Who processes data on our behalf

Vercel, Inc. hosts the site and runs the code that receives the form. Your request passes through Vercel's servers only while it is being sent.

Resend, Inc. delivers the email with the form contents to our inbox and keeps delivery logs for a short period.

Google Fonts serves the site's typefaces. When you open a page, your browser requests the font files from Google's servers, which receive your IP address with that request.

WhatsApp (Meta Platforms Ireland Limited), if you choose to contact us that way, under WhatsApp's own terms.

We do not sell data and do not use it for advertising. Some of these providers are outside the European Union; where that is the case the transfer relies on the European Commission's standard contractual clauses or an adequacy decision.

Complaints

If you think we handled your data badly, talk to us first at [email protected]. If that does not resolve it, you can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, www.cnpd.pt.

For consumer questions not about personal data, see the terms page.