Privacy

What we collect when you book

Only what it takes to run your day and to reach you if something changes.

• Your name.
• Your phone number — this is the one we actually use.
• Your email address, if you give one. It is optional.
• The tour, the date, and how many of you there are.
• Your pickup address, if you have asked to be collected.
• Anything you write in the note field.

What we collect when you leave a review

The name you sign with, your rating, your text and which tour it was about. All of it is written to be published, and it is published only after somebody here has read it.

What we never collect

No card numbers, no bank details, no payment information of any kind — you pay in person, on the day, and that transaction does not touch this website. There is no visitor account and no password to lose.

IP addresses

The booking form and the review form store a one-way hash of your IP address, never the address itself, and use it for one thing: noticing when the same source floods the form. A hash cannot be turned back into an address.

Analytics

This site uses Google Analytics to count visits and see which pages are read — pages viewed, device type, and roughly which country you are in. It is not used to identify you, but it does set cookies in your browser.

You can block them: most browsers can refuse third-party cookies, and Google publishes an opt-out add-on. Nothing on this site stops working if you do.

Who else sees your booking

Our hosting provider and the company that hosts our database, both of whom store the data on our behalf; Cloudflare, which serves the photographs on this site; and Google, for the analytics above.

Our database is hosted in the United States, so a booking made in Europe is stored outside the EEA. Nobody is sent your details for marketing purposes, and we neither buy nor sell contact lists.

How long we keep it

Bookings are kept as business records, because a trip that happened is something we may need to account for. Reviews are kept for as long as they are published. Ask us to delete either and we will, unless the law requires us to keep it.

Your rights

You can ask what we hold about you, ask us to correct it, or ask us to delete it. Albanian data protection law gives you those rights, and so does the GDPR if you are writing from the EU.

Message us on WhatsApp or write to the address below. We will answer within a month, and there is nothing to pay for asking.