Privacy Policy

Last updated: 19 October 2026

1. Who is responsible for your data

The controller of your personal data is Zofia Konieczna Street Fox Food Tours, Poland, NIP 7822281891. For anything about your data, write to hello@streetfoxfoodtours.com.

2. What data we collect

• Booking details: your name, email address, phone number, the number of adults and children, the tour date, payment status and any notes you give us.
• Allergies and dietary needs: only if you tell us, so that we can adjust the food.
• Payment details: payments are processed by our payment provider. We never see or store your full card number.
• Messages: what you send us by email, phone, WhatsApp, Facebook Messenger or Instagram.
• Photos: photos taken during a tour, only if you agree (see section 5).
• Website visits: our hosting provider keeps short technical logs (such as IP address and browser type) for security. Our website does not use analytics or advertising cookies.

3. Why we use your data and on what legal basis

• To handle your booking and run the tour, including contacting you about it. This is necessary to perform our agreement with you (Article 6(1)(b) GDPR).
• To adjust the food to your allergies or diet. Information about allergies is health data, so we only use it with your explicit consent, which you give by sharing it with us (Article 9(2)(a) GDPR). You can withdraw your consent at any time. We may also keep this information to establish or defend legal claims (Article 9(2)(f) GDPR).
• To meet our accounting and tax obligations, such as invoices and payment records (Article 6(1)(c) GDPR).
• To answer your questions and messages, and to establish or defend legal claims if needed. This is our legitimate interest (Article 6(1)(f) GDPR).
• To share tour photos on our website and social media, only with your consent (Article 6(1)(a) GDPR).
• To keep our website secure. This is our legitimate interest (Article 6(1)(f) GDPR).

You need to give us your booking details to book a tour. Everything else is voluntary.

4. Who we share your data with

We only share what is necessary, with:

• our booking system (Bookeo) and payment provider (Stripe);
• Google, for our email (Google Workspace) and the fonts on our website;
• Meta (WhatsApp, Facebook, Instagram), if you contact us through those apps;
• our website hosting provider (Netlify);
• our accounting provider, for invoices and tax records;
• the food vendors on our route, but only information about allergies or diet, without your contact details;
• public authorities, when the law requires it.

Some of these providers may process data outside the European Economic Area, for example in the United States. In that case, the transfer is protected by safeguards required by the GDPR, such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

5. Photos during tours

We sometimes take photos during a tour, for example a group photo, and may post them on our website or social media. We always ask the group first, and you can say no without giving a reason. If you agree and change your mind later, email us and we will remove the photos showing you from our website and our social media accounts.

6. How long we keep your data

• Booking details: for as long as needed to provide the tour, and then until any possible claims expire.
• Allergy and dietary information: kept together with your booking details, for the same period, because we may need it if a question comes up later about how your dietary needs were handled.
• Invoices and payment records: for as long as tax law requires, usually 5 years from the end of the year in which the tax became due.
• Messages: for as long as needed to deal with your question, and no longer than 2 years.
• Photos: until you withdraw your consent.

7. Your rights

You have the right to access your data, to correct it, to have it deleted, to restrict its use, to receive it in a portable format, and to object to its use based on our legitimate interest. Where we rely on your consent, you can withdraw it at any time. This does not affect anything we did before you withdrew it. To use any of these rights, email hello@streetfoxfoodtours.com.

You also have the right to complain to the Polish data protection authority: President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

8. Automated decisions

We do not make automated decisions or create profiles about you.

9. Cookies

Our website does not use analytics or advertising cookies. When you book, our booking system may use cookies that are needed for the booking to work. You can find more information in its own privacy policy. If we ever add analytics or marketing cookies, we will ask for your consent first and update this policy.

10. Changes to this policy

We may update this policy from time to time. The current version is always published on this page.

← Back to the homepage