Privacy Policy

We collect as little data as possible and we never sell it. This page explains what we do collect, why, and what you can do about it. Bovilla Lake Tours is the data controller for everything described below.

What we collect

• Enquiries: the name, email address, and message you submit via the enquiry form. Optionally a phone number if you give us one.
• Bookings: the above, plus the date of the tour, group size, and any access or dietary information you choose to share.
• Payments: handled by our payment provider (Stripe). We do not store your card details on our servers. We receive only the confirmation of a successful transaction.
• Website analytics: we use Google Analytics 4 (measurement ID G-8VNMKTZEB4) to understand which pages people visit and how they arrived. Analytics cookies are only set after you click "Accept All" on our cookie banner — if you decline, no analytics cookies are stored and no data is sent to Google.

Why we use it

• To reply to your enquiry and run your tour.
• To send you the booking confirmation, pickup details, and any urgent changes (weather etc).
• To meet our legal obligations (tax records, consumer-rights compliance).
• If you opt in: to send you occasional updates about new tours. You can unsubscribe with one click.

How long we keep it

Enquiry messages are deleted after 12 months. Booking and payment records are kept for the period required by Albanian tax law (currently 5 years). Marketing list entries are kept until you unsubscribe.

Who we share it with

We share data only with the providers we need to run the tour: our email host, our payment processor (Stripe), our analytics tool, and — only if relevant — the guide assigned to your day. We do not sell or rent personal data to anyone, for any purpose, ever.

Your rights

• Ask for a copy of the data we hold about you.
• Ask us to correct anything that is wrong.
• Ask us to delete your data (subject to legal record-keeping obligations).
• Withdraw consent to marketing emails at any time.

To exercise any of these rights, write to hello@lakebovilla.com. We will reply within 30 days. If you are unhappy with our response, you have the right to complain to the Albanian Information and Data Protection Commissioner (idp.al).

Cookies

On your first visit we show a cookie banner with two options:

• Accept All: we load Google Analytics 4 (measurement ID G-8VNMKTZEB4), which sets a small number of cookies so we can see aggregated, anonymised statistics about how people use the site (pages viewed, referring source, country, device type). We never use this data to identify you personally.
• Decline: no analytics scripts are loaded, no analytics cookies are set, and no data is sent to Google. The site works exactly the same.

Your choice is stored locally in your browser so you are not asked again. To change it, clear your site data for lakebovilla.com and reload — the banner will reappear.

We do not set marketing, advertising, or social-tracking cookies of any kind.

Contact

Questions about this policy: hello@lakebovilla.com.

Note — this is a working draft aligned with GDPR principles and Albanian Law No. 9887. Have your lawyer confirm the wording matches the actual data-handling practices you implement (analytics tool, email host, payment processor) before launch.