Privacy & Cookies Policy
Effective 2 November 2026 · Version 2026-11-02.1
Scope and contact
Intercontinental Transatlantic uses personal data to operate this website, accounts and Mail Club subscriptions. For privacy requests and questions, contact corporation@intercontinentaltransatlantic.com.
No advertising data sales or sharing
We never sell personal data or share it with third parties for advertising, remarketing or advertising profiles. We do not make account registration conditional on consent to advertising.
Information we use
Your postal destination is entered by you and used for sending your Mail Club correspondence and handling related delivery issues, not advertising. Depending on your use of the service, we process account name and email, passkey public credentials, sessions and security events, records of terms acceptance, subscription and payment references, postal information and correspondence delivery records. Payment card entry is hosted by Stripe; these website forms do not collect your full card details. Visitor identity-card examples are fictional and do not create a personal identity record.
Purposes and legal bases
We use data necessary to provide accounts, process subscriptions and fulfil digital and physical correspondence on the basis of contractual steps and performance. Relevant records may also be retained for legal obligations. Proportionate security and fraud-prevention processing may rely on legitimate interests, subject to applicable rights. Audience statistics are a separate processing purpose from account registration. Acknowledging this policy is not a general authorisation for unrelated processing.
Service providers and lawful disclosures
Operating the service involves limited disclosures to providers such as Stripe for payments, hosting and database services, email and delivery providers, and postal carriers. Data is disclosed only as needed for the relevant purpose or a legal obligation. These operational disclosures are separate from advertising sharing, which we do not permit.
International processing
Some providers may process data outside your country, including outside the European Economic Area. Where required, transfers must rely on an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses. You may contact us for information about the safeguards relevant to your data.
Passkeys and security
We store public credential information and authentication records. Your authenticator handles biometric or device-PIN verification; the WebAuthn flow does not send us your fingerprint, facial image or device PIN. Use Account security to review passkeys and sessions. No system can promise absolute security.
Email and correspondence records
Account, payment and episode messages are service communications. Delivery records may distinguish submission acceptance, provider delivery evidence and detected opening signals. Email opening may be detected through a small image request; that signal is not proof that a person read a message. Contact us about relevant privacy requests or delivery issues.
Cookies and optional statistics
Essential session and security cookies support sign-in and account protection. We currently use Google Analytics for audience and service measurement without displaying a statistics-choice prompt. This may involve cookies and the processing of device, network and site-usage information by Google. Account names, email addresses, postal destinations and private account records are excluded from our analytics event payloads. Advertising storage, advertising personalisation and Google signals are disabled. This measurement configuration is separate from acceptance of the account terms. Essential session and security functions remain distinct from statistics.
Retention
We keep account and service records while needed to operate the account and fulfil the relationship, and retain relevant billing, acceptance and security records where necessary for legal obligations, dispute handling or proportionate security purposes. We assess deletion requests against those purposes rather than promising that closing an account immediately erases every record. A limited history shown on screen does not establish a storage-deletion deadline.
Your rights
Subject to applicable conditions, you may request access, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interests. You may withdraw optional consent without changing the lawfulness of earlier processing. Contact corporation@intercontinentaltransatlantic.com. You may also complain to the Portuguese data protection authority, CNPD, or another competent supervisory authority.
Policy updates
The version and effective date are shown on this page. We will communicate material changes as required. We do not treat continued browsing or a policy acknowledgement as consent to a new optional purpose.
