🔏 privacy policy

1. Data controller — Harbor & Flame UAB (address: Prie Pilies 15, Vilnius, Lithuania) is responsible for your personal data.

2. What we collect — When you book or use our contact form, we collect name, email, phone, dietary preferences, and any allergy info you provide.

3. Purpose — To manage reservations, send confirmations, improve our service, and occasionally send offers (only if you opt in).

4. Legal basis — Contract performance (booking) and legitimate interest (customer service). For marketing, we ask separately.

5. Sharing — We never sell data. We may share with payment processors or tour partners only when you book a workshop.

6. Retention — Reservation data stored for 3 years. Marketing data until you unsubscribe.

7. Your rights — Access, correction, deletion — email dpo@harborflame.lt. You also have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania.

8. Cookies — Our website uses only essential technical cookies. No tracking cookies without consent.