Privacy policy
TODO: draft only. This is placeholder structure, not final legal text. A reviewed privacy policy is required before launch.
What we collect
When you book, we collect your name, email, phone (optional), nationality, and the names of participants — the minimum needed to run your tour.
What we do with it
We use it to confirm your booking, send your e-voucher, and contact you about your tour. We never sell your data.
Your rights
You can export your data or delete your account at any time. EU users are protected by the GDPR.
Retention
TODO: data-retention period — to be defined. Deletion requests are honoured within 30 days.