1. Information we collect

We collect only the data needed to run our tours and bookings:

• Identity and contact: name, email, phone and address;
• Payment: details needed to process charges (e.g. card data), handled by the payment gateway;
• Travel: preferences, destinations, dates, booking history and tour communications;
• Documents: passport and visas, only when required for the booking;
• Browsing: language, currency and preferences saved in your browser (local storage), plus anonymous technical usage data;
• Any other information you choose to send us voluntarily.

2. How we use your information

We use your data for these purposes, on the legal bases of consent, contract performance, legal obligation and legitimate interest:

• Processing bookings, payments, confirmations and changes;
• Providing support and answering your messages;
• Sending operational notices about your tours (confirmation, meeting point, rescheduling);
• Personalizing the experience to your preferences and language;
• Meeting legal and tax duties, such as record keeping;
• Improving the website and preventing fraud and abuse.

We never send marketing without your consent, which you may withdraw at any time.

3. Sharing of information

We do not sell or rent your personal data. We share it only when necessary:

• Suppliers involved in your booking (partner drivers/guides, payment and support services);
• Technology providers that help us run the website, under confidentiality contracts;
• Authorities, when required by law or to protect our rights.

4. Cookies, local storage and third-party content

We use only essential browser storage (language, currency and booking draft) — no advertising trackers. Pages may embed third-party content (e.g. YouTube videos and Instagram posts), which follows those providers' privacy policies. You can clear local data anytime in your browser settings.

5. Information security

We apply technical and organizational measures to protect your data against unauthorized access, loss or destruction, including restricted access and encrypted connections. No internet transmission is 100% secure; in case of a relevant incident, we will notify you and the competent authorities as required by law.

6. Data retention

We keep your data only as long as needed for this policy's purposes — e.g. booking records for the applicable tax period — then delete or anonymize it, unless the law requires otherwise.

7. Your rights

You may, at any time and free of charge:

• Confirm whether we process your data and access it;
• Correct incomplete, inaccurate or outdated data;
• Request anonymization, blocking or deletion of unnecessary data;
• Request portability of your data;
• Withdraw consent and opt out of marketing messages;
• Lodge a complaint with the competent data protection authority.

We answer requests within the legal term through the contact channel below, after confirming your identity.

8. Changes to this policy

We may update this policy to reflect service or legal changes. The current version will always be on this page, with its revision date. Material changes will be communicated through our channels before taking effect.