Effective Date: April 2026
KidsToGo ("we", "us", or "our") operates a family activities marketplace based in Portugal, helping parents discover and book kids' activities. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what rights you have over your data.
We are committed to protecting your privacy and the privacy of your children. Because our service involves children's data, including sensitive information, we take extra care to be transparent about our data practices.
This policy applies to all users of our website at kidstogo.pt and related services. By creating an account or using our services, you acknowledge that you have read and understood this policy.
When you create an account, we collect:
If you choose to create profiles for your children to receive personalised recommendations, we collect:
This data is provided voluntarily by parents or guardians and is used solely to personalise activity recommendations.
When you make a booking, we collect:
Payments are processed securely by Stripe. We do not store your full card number or payment credentials. We retain only:
When you leave a review, we collect:
We track your consent decisions (privacy policy, terms of service, AI processing, newsletter, analytics) including timestamps, IP address, and user agent at the time consent was given or withdrawn.
We process your personal data for the following purposes, each with a specific legal basis under the GDPR:
| Purpose | Legal Basis |
|---|---|
| Account creation and management | Performance of contract |
| Processing bookings and payments | Performance of contract |
| AI-powered trip planning and personalised recommendations | Explicit consent (opt-in) |
| Website analytics and improvement | Consent (cookie consent) |
| Newsletter and marketing emails | Explicit consent (opt-in) |
| Error tracking and platform stability (Sentry) | Legitimate interest |
| Preventing fraud and ensuring security | Legitimate interest |
| Legal and accounting obligations (e.g., booking records) | Legal obligation |
Important: This section concerns the data of minors.
KidsToGo is a platform designed for parents and guardians to find activities for their children. We take the protection of children's data very seriously.
We collect children's data only through parents or legal guardians. Children do not create accounts or provide data directly. All children's profiles are created, managed, and controlled by the parent's account.
Under Portuguese law (implementing the GDPR), the age of digital consent is 13. For children under 13, parental consent is required for the processing of their personal data. Since all data is provided by the parent through their own account, parental consent is inherent in the process.
Children's profiles may include sensitive information such as special needs, sensory sensitivities, and learning styles. This data is collected voluntarily to improve the relevance of activity recommendations. We process this data with extra care:
Parents can at any time:
KidsToGo offers an AI-powered trip planner that creates personalised family itineraries. This feature uses OpenAI's GPT-4o model. Here is exactly what happens when you use it:
We do not sell your personal data. We share data with the following third-party services, each for a specific purpose:
| Service | Purpose | Data Shared | Condition |
|---|---|---|---|
| OpenAI | AI trip recommendations | Trip preferences, children's profiles, available activities | Only with your explicit consent |
| Stripe | Payment processing | Payment card details, billing information | When you make a payment |
| Google Analytics | Website analytics | Page views, interactions, device info (anonymised) | Only with cookie consent |
| Sentry | Error monitoring | Error logs, browser info, stack traces | Legitimate interest (platform stability) |
| Email service provider | Transactional and newsletter emails | Email address, name | Account emails (contract); newsletters (consent) |
We may also share data when required by law, regulation, or valid legal process.
Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
You can exercise most of these rights directly through your profile settings on our website. For requests that require additional verification or cannot be handled through the interface, please contact us at info@kidstogo.pt. We will respond to your request within 30 days.
We retain your data for as long as necessary for the purposes described in this policy:
Our primary hosting infrastructure is located within the European Union. However, some data may be transferred to countries outside the EU:
For all international transfers, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) and Data Processing Agreements (DPAs) with each provider to ensure an adequate level of data protection.
We implement appropriate technical and organisational measures to protect your personal data:
While we take all reasonable steps to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. If you become aware of any security issue, please contact us immediately.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
We encourage you to review this policy periodically. Continued use of our services after changes take effect constitutes acceptance of the updated policy.
If you have any questions about this Privacy Policy, want to exercise your data rights, or have concerns about how we handle your data, you can reach us at:
KidsToGoYou can also manage most privacy settings directly from your profile settings page after logging in.