Privacy Policy

1. Introduction

Acme Tours (“we”, “us”, “our”) is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

We collect the following information when you make a booking:

• Full name, email address, and phone number
• Nationality (optional)
• Booking details (tour, date, number of participants)
• Payment information (processed securely via Stripe — we do not store card details)

We also collect anonymous usage data (page views, device type, referrer) to improve our platform.

3. How We Use Your Data

Your data is used to:

• Process and confirm your booking
• Send booking confirmations and important updates via email
• Respond to customer support inquiries
• Improve our services through anonymised analytics

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-Party Services

We use the following trusted third-party services to operate our platform:

• Stripe — payment processing. Your card details are handled entirely by Stripe and are never stored on our servers.
• Resend — transactional email delivery (booking confirmations).
• Supabase — secure cloud database hosting for booking records.

Each of these providers has their own privacy policy and security standards.

5. Data Retention

We retain your booking data for up to 3 years for legal and accounting purposes. You may request deletion of your data at any time by contacting us, unless retention is required by law.

6. Cookies

Our platform uses minimal, essential cookies to function correctly (e.g., session management). We do not use tracking or advertising cookies. No cookie consent banner is required under our current usage.

7. Your Rights

Under applicable data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing of your data

To exercise any of these rights, please contact us at visar.uruqi@gmail.com. We will respond within 30 days.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the latest version. Continued use of our platform after changes constitutes acceptance of the updated policy.

9. Contact

For any privacy-related questions or requests, please reach us at visar.uruqi@gmail.com.