Last updated: April 2026
Privacy Policy
Pony Club Ecotourism ("we", "us", "our") operates at Glyki, Thesprotia, Greece. This policy explains how we collect, use, and protect your personal data when you book activities through our website.
Data We Collect
When you make a booking we collect: your name, email address, and phone number (via Stripe's hosted checkout); payment metadata such as the booking package, date, guest counts, and total amount paid (stored in Stripe and our booking database); and technical data such as your IP address, which is used solely for rate-limiting requests to our checkout endpoint.
How We Use Your Data
We use your data to: process your booking and send you a confirmation email; notify our staff of new reservations; handle refunds or disputes if required; and comply with Greek tax-record retention obligations (7 years). We do not sell your data to third parties or use it for marketing without your explicit consent.
Data Processors
We share your data only with the following sub-processors, each bound by their own privacy policies: Stripe, Inc. (payment processing and PCI-DSS compliance) — stripe.com/privacy; Airtable, Inc. (booking records database) — airtable.com/privacy; Resend, Inc. (transactional email delivery) — resend.com/privacy.
Data Retention
Booking records are retained for 7 years as required by Greek tax law. If you have not made a booking, any enquiry data is deleted within 90 days. You may request deletion of non-legally-required data at any time by contacting us.
Your Rights (GDPR)
Under GDPR you have the right to: access a copy of your personal data; correct inaccurate data; request deletion (subject to legal retention obligations); object to processing; and lodge a complaint with the Hellenic Data Protection Authority (dpa.gr).
Contact
Data controller: Pony Club Ecotourism, Glyki, Thesprotia 46200, Greece. For privacy enquiries email info@ponyclub.gr.