1. Where your database physically sits. Section 5 states the Supabase region. Open your Supabase project settings and confirm it. If the region is outside the EEA, that is an international transfer and this page must say so.
2. Retention periods. The periods in section 6 are drafts. Montenegrin accounting law sets a minimum for invoices; match it.
The controller of your personal data is , , tax number . Contact for anything in this policy: .
This policy covers the website and the Kotor Concierge booking app.
| Name | To identify the booking and hand over the vehicle to the right person. Required. |
| Phone number | To confirm the booking, reach you on the day, and let you look up your own bookings later. Required — it is how your booking is found. |
| Email address | To send the confirmation. Optional. |
| Dates, times, service, price | To reserve the vehicle or slot and to bill correctly. |
| Free-text note | Flight number, hotel, pick-up address, group size — whatever you write in the notes field. Only what you choose to put there. |
| Driving licence and ID | Checked and recorded at collection for motorised vehicles, because the law requires it. Not collected through the website. |
| Approximate location | Only if you switch it on in the app, and only to sort services by distance. It is used in your browser and never sent to us. |
| Push notification token | Only if you allow notifications, so we can tell you your booking is confirmed or your return is due. |
We do not collect card data. Where card payment is offered, you enter your card on the bank's payment page. The card number, expiry date and CVV never reach our servers and are never stored by us.
We use a small number of processors. Each one gets only what it needs to do its job.
| Supabase | Database where bookings are stored, and nightly backups. |
| Netlify | Hosting and the server functions that write your booking. |
| EmailJS | Sends your confirmation email. Receives your name, email and booking details. |
| Telegram | Internal alert to our own staff that a booking has arrived. Receives the booking details and your phone number. |
| Cloudinary | Delivers the photographs on the site. Receives no personal data. |
| Acquiring bank and payment gateway | Card payments, if you pay by card. They are the controller of your card data, not us. |
| Partner suppliers | Where a boat tour or transfer is operated by a partner, that partner receives your name, phone, date and pick-up point — nothing else. |
We do not sell your data. We do not use it for advertising, and we do not share it with anyone other than the processors above and the authorities where the law requires it.
Bookings are stored in our Supabase database hosted in the (REGION — confirm in Supabase settings) region. Backups are held in the same project. If any processor stores data outside the European Economic Area, that transfer is covered by the European Commission's standard contractual clauses.
| Booking records | (N) years, to satisfy accounting and tax law |
| Enquiries that never became a booking | (N) months |
| Email confirmations | Held by the mail provider under its own retention rules |
| Push notification tokens | Until you turn notifications off or clear the app |
| Backups | Rolling, overwritten on a fixed cycle |
Under the General Data Protection Regulation and Montenegrin data protection law you may:
Write to with your booking reference. We answer within 30 days. We may ask you to confirm the phone number used for the booking, so that we do not hand someone else's data to the wrong person.
We do not use advertising or tracking cookies, and we do not run third-party analytics that profiles you. The app stores a small amount of data in your own browser — your language, and a route you have planned — so it still works when you go offline. That data stays on your device and you can clear it by clearing the site data in your browser.
Our services are not directed at children, and we do not knowingly collect data from anyone under 16 without a parent or guardian making the booking.
If we change this policy we update the date at the top of the page. Material changes will be flagged in the app.
| Controller | |
| PIB | |
| Address | |
| Data requests | |
| Phone / WhatsApp |