Privacy Policy | Moon Valley Tours

1. Who We Are

Moon Valley Tours ("we", "us", "our") operates the website https://moonvalleytours.com. We are the data controller responsible for your personal data processed through this website.

Contact: info@moonvalleytours.com

2. What Data We Collect

Account data: name, email address, phone number, and password (hashed) when you register.
Booking data: selected activities, dates, number of travelers, meal preferences, and payment reference numbers.
Usage data: pages visited, search queries, click interactions, and device/browser information collected via cookies and analytics tools (Google Analytics 4).
Communications: messages you send us via email or contact forms.

3. How We Use Your Data

To process and manage your bookings.
To create and maintain your account.
To send booking confirmations and service communications.
To improve our website and services through aggregated analytics.
To comply with legal obligations.

4. Legal Basis for Processing

We process your data under the following legal bases (GDPR Article 6):

Contract: processing necessary to fulfil your booking.
Legitimate interest: improving our services and preventing fraud.
Consent: analytics cookies, which you can withdraw at any time via the cookie banner.
Legal obligation: where required by law.

5. Cookies

We use cookies to enhance your browsing experience and analyse site traffic. Essential cookies are always active. Analytics cookies (Google Analytics 4) are only activated after you give consent via the cookie banner. You can change your preferences at any time by clearing your browser cookies and revisiting the site.

6. Data Sharing & Transfers

We do not sell your personal data. We may share data with trusted service providers (hosting, payment processors, analytics) who process data on our behalf under data processing agreements. Some providers may be located outside the EEA; in such cases, we ensure appropriate safeguards (e.g. EU Standard Contractual Clauses) are in place.

7. Data Retention

We retain account and booking data for as long as your account is active and for up to 5 years thereafter for legal and accounting purposes. Analytics data is retained for 14 months in Google Analytics.

8. Your Rights

Under GDPR you have the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete data.
Erase your data ("right to be forgotten") where there is no legal obligation to retain it.
Restrict processing in certain circumstances.
Portability of your data in a machine-readable format.
Object to processing based on legitimate interest.
Withdraw consent at any time (for cookie analytics).

To exercise any of these rights, email us at info@moonvalleytours.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

9. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email or a notice on this page. Continued use of our site after changes constitutes acceptance of the updated policy.