Privacy Policy
Effective Date: October 12, 2025
We never sell, share, or trade your personal information with third parties for marketing or any other purposes. All communications remain strictly confidential, and we retain data only as long as necessary for service provision and legal compliance.
1. Controller Information
This website ("we") is the data controller. Contact via the secure contact form on this website.
2. Data We Collect
Contact forms: name, email, phone, message content
Letter signup: email only
Analytics: anonymous usage patterns
3. Legal Basis
Legitimate interests. Contract performance. Consent for letters.
4. Processing
Forms: Resend → ProtonMail. No database.
Drafts: Local storage only.
Photo likes: Local. Anonymous events to PostHog.
Analytics: PostHog (EU), Vercel. No personal data.
5. Sharing
Never sold. Shared only with: essential service providers, technical advisor, authorities when required by law.
6. Retention
Inquiries: max 6 years
Verification docs: processed transiently, retained only as needed for verification and safety, then deleted
Letters: until unsubscribed
Security logs: max 30 days
Photo likes: max 60 days
Analytics: max PostHog 1 year, Vercel 31 days
7. Your Rights
Access, rectification, erasure, portability, restriction, object, withdraw consent. Contact via form. 30-day response.
8. Automated Decisions
None. All bookings human-reviewed.
9. Breach Notification
High-risk breaches notified immediately. Authorities within 72 hours.
10. International Transfers
PostHog: EU. Resend/hCaptcha/Vercel: US with SCCs. ProtonMail: Switzerland.
11. Age Restriction
18+ only. No minors.
12. Complaints
EU: edpb.europa.eu. Switzerland: FDPIC, Bern.
13. Contact
Privacy inquiries via contact form.