Privacy Policy & GDPR Compliance

As a data subject under GDPR, you have the following rights:

• •
  Right to Access: You can request a copy of the personal data we hold about you.
• •
  Right to Rectification: You can request correction of inaccurate or incomplete personal data.
• •
  Right to Erasure: You can request deletion of your personal data ("right to be forgotten").
• •
  Right to Data Portability: You can request your data in a portable format to transfer to another service.
• •
  Right to Restrict Processing: You can request limitation of processing in certain circumstances.
• •
  Right to Object: You can object to processing of your personal data for certain purposes.
• •
  Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

We collect the following types of personal data:

We process your personal data based on the following legal grounds:

• •
  Consent: For marketing communications, cookies, and optional data collection
• •
  Contract: To provide services you've requested and process bookings
• •
  Legal Obligation: To comply with laws, including age verification requirements
• •
  Legitimate Interests: For security, fraud prevention, and improving our services

We use your personal data for:

• Processing and managing bookings
• Communicating with you about services
• Verifying age and identity where required
• Improving website functionality and user experience
• Sending marketing communications (with consent)
• Preventing fraud and ensuring security
• Complying with legal obligations
• Analytics to understand website usage patterns

Retention Periods:

• Booking data: 2 years after last activity
• Account information: Until account deletion request
• Marketing preferences: Until consent withdrawn
• Security logs: 6 months
• Legal compliance data: As required by law

Security Measures:

• SSL/TLS encryption for all data transmissions
• Encrypted storage of sensitive information
• Regular security audits and updates
• Access controls and authentication
• Employee training on data protection

We may share your data with:

• Service Providers: Email services (Gmail API), cloud storage (Google Cloud), hosting providers
• Payment Processors: Secure payment gateways (we never store payment card details)
• Legal Authorities: When required by law or court order

All third-party processors are vetted for GDPR compliance and bound by data processing agreements.

Your data may be transferred outside the European Economic Area (EEA). We ensure appropriate safeguards through:

• Standard Contractual Clauses approved by the EU Commission
• Adequacy decisions for certain countries
• Your explicit consent where required

We use cookies for:

• Essential website functionality
• Remembering your preferences
• Analytics and performance monitoring
• Security and fraud prevention

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

If you have concerns about our data processing, you have the right to lodge a complaint with a supervisory authority.

We encourage you to contact us first to resolve any concerns.

For all data protection inquiries:

When contacting us, please include your name and email address for verification.

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Significant changes will be communicated via email or website notice.

Please review this policy periodically. Continued use of our services after changes indicates acceptance of the updated policy.