Privacy Policy

Last updated: 12 July 2026

I keep this simple, because the data I work with is simple: I'm a one-person tour business, and I only process the personal data I need to answer your inquiry and run your tour.

1. Who is responsible for your data

The data controller is:

Filip Huta – Blue Fox Tours
Registered address: TODO_ADDRESS
IČO (Business ID): TODO_ICO
Email: info@bluefoxtours.cz
Phone: +420 773 537 656

2. What data I collect and why

Booking requests and inquiries (via the contact form, email, or WhatsApp): your name, email address, preferred date, group size, chosen tour, and anything you write in your message. I use this to reply to you, confirm availability, and arrange your tour. Legal basis: performance of a contract, or steps taken at your request before entering into one (Art. 6(1)(b) GDPR).

Tour-related details you volunteer: things like mobility considerations or children's ages, which help me tailor the tour. Legal basis: performance of a contract.

Allergy and dietary information (Prague with Children Tour): because this tour includes snacks, I ask parents about allergies and dietary restrictions. This is health-related data, so I process it only with your explicit consent (Art. 9(2)(a) GDPR), use it solely to choose safe snacks for your tour, and delete it after the tour takes place. You can withdraw consent at any time before the tour; in that case, no snacks will be offered.

Payment data: card payments are processed by SumUp. I never see or store your card details — I receive only a confirmation that payment was made. Cash payments involve no data processing at all.

Invoicing and accounting records: name and billing details on receipts and invoices. Legal basis: legal obligation (Art. 6(1)(c) GDPR) under Czech accounting and tax law.

I do not use your data for marketing, I do not send newsletters, and I never sell or share your data for advertising.

3. Who else touches the data

I use a small number of service providers (processors) to run this website and business:

• Formspree, Inc. (USA) — delivers contact-form submissions to my email. Transfers to the USA are covered by the EU–US Data Privacy Framework and/or Standard Contractual Clauses.
• TODO_HOSTING_PROVIDER — hosts this website.
• TODO_EMAIL_PROVIDER — my email service.
• SumUp Limited (Ireland) — card payment processing.

If you book my tours through third-party platforms (such as Viator or GetYourGuide), those platforms are independent data controllers, and their own privacy policies apply to the data you give them.

4. How long I keep it

Inquiries that don't lead to a booking: deleted no later than one year after our last contact. Booking correspondence: kept up to three years after your tour (the limitation period for potential claims). Accounting and tax records: retained for the period required by Czech law. Children's allergy information: deleted after the tour.

5. Cookies

This website sets no tracking or analytics cookies and uses no advertising technology. There is nothing to consent to, which is why you don't see a cookie banner.

6. Your rights

Under the GDPR you have the right to access your data, correct it, have it erased, restrict its processing, object to processing, receive it in a portable format, and withdraw any consent you've given. To exercise any of these, just email me at info@bluefoxtours.cz — I'm the only person who will handle your request, and I'll respond within one month.

You also have the right to lodge a complaint with the Czech supervisory authority: Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz.

7. Changes

If I change how I handle personal data (for example, by adding analytics or a newsletter), I will update this policy and the date above before the change takes effect.