GO KIDS — Privacy Policy

1. Introduction

This Privacy Policy explains how GO KIDS collects, uses, shares and protects personal data when you use our website and services. GO KIDS processes personal data in line with the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and Portuguese law, including Lei n.º 58/2019.

It applies to families, Vendors, and anyone who visits GO KIDS or contacts us. It is information for you, not a contract you need to accept.

2. Who is responsible for your data

GO KIDS is operated by Enredo Gentil LDA, NIPC 519423097, registered office at Rua da Ribeira dos Bogueiros 45 #1 (DTO), Cascais, 2750-827. Enredo Gentil LDA is the controller of the personal data described in this policy.

For privacy questions or to exercise your rights: info@gokids.pt.

3. Account details

When you create an account, we may process:

• your name;
• your email address;
• your password, stored in protected form by our sign-in provider;
• your preferred language;
• technical identifiers needed to keep you signed in.

We use this data to create and manage your account, sign you in, keep GO KIDS secure, and provide its features.

4. Family profile and children

Creating a family profile is optional. You can use GO KIDS without it, but results may be less tailored. A family profile may include:

• for each child, a first name or nickname;
• age or date of birth (a date of birth is used only to keep the age up to date);
• interests and preferred types of activity;
• your area or town;

GO KIDS does not collect data directly from children. Information about a child is entered and managed by a parent or guardian.

5. Sensitive information

GO KIDS does not ask for health information or other sensitive data. Please do not enter the following in free-text fields, enquiries or reviews:

• health or medical information, diagnoses or disabilities;
• religious or philosophical beliefs;
• racial or ethnic origin;
• identity document numbers;
• any other sensitive information that GO KIDS does not need.

If a Vendor needs medical or dietary information for an activity (for example, allergies), please share it directly with the Vendor. If sensitive information is entered on GO KIDS anyway, we will limit its use to what is strictly necessary.

6. Location

To show activities near you, we may use:

• the area, town or postcode you type in;
• your device's location, only if you allow it in your browser or device.

We use location to show nearby results, approximate distances and maps. You can change location permissions at any time in your device or browser settings.

7. How you use GO KIDS

We may collect information about how GO KIDS is used, including:

• searches and filters;
• listings, events, articles and pages viewed;
• what you click on;
• favourites you save;
• enquiries you send;
• how long pages are viewed and how you move through the site;
• device and browser type.

We use this to run and improve GO KIDS, understand what families are looking for, show more relevant results and content, fix problems and prevent misuse.

8. More relevant content

When you are signed in, GO KIDS may use your children's ages and interests, your area, and your searches, clicks and favourites to suggest activities, events and articles that may suit you better. This never leads to decisions with legal or similarly significant effects. You can object to it at any time by writing to info@gokids.pt; you will still be able to use GO KIDS.

9. Enquiries to Vendors

When you send an enquiry through GO KIDS, we process:

• your name, email address and phone number (if given);
• your message;
• your child's age;
• your child's interests, only if you choose to include them;
• the Vendor contacted and the date.

We send these details to the Vendor you chose so it can reply to you; the form shows what will be sent before you send it. From then on, the Vendor is responsible for that data under its own privacy policy. If you contact a Vendor directly, using the contact details on its listing, GO KIDS does not receive that communication.

10. Reviews

When you post a review, we process your rating, your text, your display name, the Vendor or event reviewed and the date. Reviews are public and show your display name. We may also use these details to detect fake or abusive reviews.

11. Vendor information

When a business registers as a Vendor, we may process:

• business name, NIF or NIPC, address and type of activity;
• the name, email address, phone number and role of the person registering;
• listing content, such as descriptions, photos, events, prices, schedules and the contact details shown on the profile;
• messages exchanged with GO KIDS;
• if you choose a paid plan (Featured or Premium): your plan, the billing name, address and NIF or NIPC, your subscription and payment history, and your invoices. Payment card details are entered directly with our payment provider, Stripe; GO KIDS does not see or store your full card number.

We use this to run the Vendor account, publish listings and events, and support Vendors. If a Vendor takes a paid plan, we also use this data to collect subscription payments, issue invoices and keep the accounting and tax records the law requires.

12. Technical and security data

When you visit GO KIDS, we automatically collect technical data, such as:

• IP address;
• browser and device type;
• operating system and language;
• session information;
• error, performance and security logs.

We use it to keep GO KIDS working and secure, prevent fraud and abuse, and fix errors.

13. Why we use data, and on what legal basis

We only process personal data when the law allows it:

• To provide the service you asked for: accounts, family profiles, searches, enquiries, reviews, Vendor accounts, listings and paid Vendor plans.
• Our legitimate interests: keeping GO KIDS secure, preventing fraud and misuse, fixing errors, measuring how GO KIDS is used through cookie-free analytics, improving GO KIDS, showing more relevant content, checking reviews, and protecting children who use services found on GO KIDS. We make sure these interests do not override your rights.
• Your consent: newsletters and marketing emails, and device location. You can withdraw consent at any time; this does not affect what was done before.
• Legal obligations: handling reports of illegal content, responding to lawful requests from authorities, and keeping records the law requires (including accounting and tax records for paid Vendor plans).

14. Newsletters, marketing emails and our blog

With your consent, GO KIDS may send newsletters with news, activity ideas and articles from our blog, which may include content about Vendors. Newsletters may record whether they are opened and which links are clicked, so we can make them more relevant. You can unsubscribe at any time using the link in every email, or by writing to info@gokids.pt. Service emails, such as account or enquiry confirmations, are sent regardless.

Our blog is public and you can read it without giving us any personal data. If blog comments are enabled: when you comment, your display name and comment are published.

15. Who we share data with

GO KIDS does not sell personal data. We may share it:

• with the Vendor you choose to contact, limited to the details on the enquiry form;
• publicly, for reviews (with your display name) and Vendor listings;
• with service providers that help us run GO KIDS, such as hosting and database, sign-in, email, analytics and payment providers, under contracts that require them to protect it. These include, among others, Supabase, Resend, Vercel (including Vercel Web Analytics), Brevo and Stripe;
• with authorities or courts when the law requires it, or when needed to protect a child at risk;
• with a new owner if GO KIDS is sold or merged, who must continue to protect it under this policy.

16. Analytics

GO KIDS uses Vercel Web Analytics, provided by our hosting provider Vercel, to understand how the platform is used. It records the pages visited, the website or campaign link that brought you to GO KIDS, your approximate location (country, region and city, worked out from your IP address), device type, operating system and browser. Vercel Web Analytics does not use cookies and does not store or read any information on your device. Visitors are counted using a temporary code created from the incoming request, which is automatically deleted after 24 hours; it is not used to identify you or to follow you across other websites. We only see aggregated statistics, and we do not record what you type into forms.

GO KIDS does not use advertising cookies or ad-platform tracking tags. We measure our own advertising only through tagged links.

17. Transfers outside the European Economic Area

Some providers, or their subcontractors, may process data outside the European Economic Area. When they do, we rely on a European Commission adequacy decision or the Commission's Standard Contractual Clauses, with additional safeguards where needed. You can ask us for details.

18. How long we keep data

We keep personal data only for as long as needed for the purposes described, or longer where the law requires it or to deal with a dispute. Generally:

• account and family profile: while your account is open, and deleted within 30 days of closure;
• enquiries: 24 months after they are sent;
• reviews: while published;
• Vendor account data: while the account is open, plus 12 months;
• billing and invoice records for paid Vendor plans: 10 years from the end of the financial year they relate to, as Portuguese accounting and tax law requires;
• reports and complaints: 3 years after the case is closed;
• technical and security logs: 6 months, or longer if linked to an incident;
• analytics data: the temporary visitor code is deleted after 24 hours; after that, analytics data is kept only as aggregated statistics that do not identify you;
• marketing: while your consent lasts (we keep a record of your choice so we can respect it).

When data is no longer needed, we delete or anonymise it.

19. Security

GO KIDS uses technical and organisational measures suited to the risk, such as access controls, encrypted connections and limited staff access. No system is completely risk-free. If a breach is likely to put you at high risk, we will tell you.

20. Your rights

You can ask us to:

• give you a copy of your data;
• correct inaccurate or incomplete data;
• delete your data (you can also delete your account yourself in Account Settings);
• limit how we use your data;
• stop using your data where we rely on legitimate interests, and always for marketing;
• give you your data in a machine-readable format;
• withdraw any consent you have given.

Send requests to info@gokids.pt. We reply within one month, which may be extended by two months for complex requests, and may ask you to confirm your identity. Some rights have legal limits.

You can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (cnpd.pt).

21. Cookies

GO KIDS uses cookies and similar technologies that it needs to work, such as keeping you signed in. We do not use analytics or advertising cookies. See our Cookie Policy for details.

22. Children's data

GO KIDS is for adults; children must not create or use accounts. Information about children is entered and managed by a parent or guardian, who confirms they are entitled to share it. We keep it to what is needed, and Vendors do not have access to children's profiles. Photos of children published by Vendors are the Vendor's responsibility, and our Terms for Vendors require parental consent.

23. Changes to this policy

GO KIDS may update this policy to reflect changes in the law or in the platform. The date at the top shows the latest version, and registered users will be told about significant changes by email or on GO KIDS.

24. Contact

For any question about privacy or your data: info@gokids.pt · Enredo Gentil LDA, Rua da Ribeira dos Bogueiros 45 #1 (DTO), Cascais, 2750-827.