Privacy Policy

Cali Po Arcfarms Ltd
11 Mayfair Avenue, Ilford
England, IG1 3DH, United Kingdom
Company No. 13414773
Email: contact@calipotour.com

All data protection inquiries can be directed to the above contact. You have the right to request information about your stored data at any time.

Account data — when you register, we store your email address and optionally a display name. Legal basis: contract performance (Art. 6(1)(b) GDPR).

Reservation & guestlist data — name, email, reservation details. Required to process your request. Legal basis: contract performance (Art. 6(1)(b) GDPR).

Feed interactions — likes and comments are stored linked to your account. Legal basis: contract performance (Art. 6(1)(b) GDPR).

Cookie consent — we log your cookie preference with a timestamp for compliance purposes. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

We do not use analytics, advertising, or tracking cookies of any kind.

We use only essential cookies required for authentication and session management (provided by Supabase). These cookies are strictly necessary for the site to function and do not require your consent under § 25(2) TTDSG.

No third-party tracking or advertising cookies are used.

Supabase Inc. (USA) — database, authentication, and file storage. Data processed under a Data Processing Agreement (DPA) with Standard Contractual Clauses (SCCs). Supabase Privacy Policy

Vercel Inc. (USA) — website hosting and delivery. Data processed under a DPA with SCCs. Vercel Privacy Policy

api.qrserver.com — generates QR codes for reservations. The reservation token is transmitted to generate the QR image. No personal data beyond the token is sent.

Account data is retained for as long as your account exists. Reservation data is retained for 3 years for legal and business purposes. You may request deletion at any time (see Section 6).

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Restrict processing of your data
• Data portability
• Object to processing based on legitimate interest

To exercise any right, email contact@calipotour.com. We will respond within 30 days.

You also have the right to lodge a complaint with the competent supervisory authority. In Berlin: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstr. 219, 10969 Berlin.

You can delete your account at any time from your dashboard settings. This permanently removes your profile, reservations, and guestlist entries.

We may update this policy. Material changes will be communicated via the website. The date at the top of this page reflects the last update.