Privacy policy
What we collect when you book an experience, order from the shop or write to us, and what we do with it.
1.Who we are
Visit Lazarat is a community tourism platform run by the families of Lazarat, Gjirokastër, Albania. We are responsible for the personal data you give us on this website.
For anything about your data, write to hello@visitlazarat.al.
2.What we collect
When you book an experience: your name, email, phone number, country, whether you travel alone or as a group, the number of guests and any special requests you write (for example allergies or accessibility needs).
When you order from the shop: your name, email, phone number and, for delivery, your address.
When you use the contact form or ask for a group offer: your name, contact details, your message and, for groups, the company name and group size.
When you pay: the amount, the method (bank transfer or cash) and the bank reference. Card payments aren't taken on this site, and we never see or store card details.
3.Why we use it
To arrange your booking or order with the host family or artisan, to contact you about it by phone or email, to keep the accounting records the law requires, and to answer your messages.
We don't send newsletters or marketing, and we never sell or rent your data.
4.Who sees it
The Visit Lazarat team. The host of the experience you book sees your name, contact details, group size and special requests, so they can prepare for your visit. An artisan sees the items they need to prepare for your order.
Our website runs on services that store data for us and use it only on our behalf: Vercel (hosting), Neon (the database, on servers in the European Union) and Cloudflare (photo storage).
5.Cookies and your browser
We don't use advertising or tracking cookies. A small cookie remembers the language you chose. Your shopping basket is kept in your own browser until you place the order. Hosts, artisans and our team get a sign-in cookie when they log in to the dashboard.
6.How long we keep it
Bookings, orders and payments are kept for as long as accounting and tax law requires. Messages and group requests are kept while they're useful for answering you, and deleted when you ask, unless the law requires us to keep them.
7.Your rights
You can ask to see the data we hold about you, to correct it, to delete it or to stop us using it. Write to hello@visitlazarat.al and we'll reply within 30 days.
If you think we've handled your data wrongly, you can also complain to Albania's Commissioner for the Right to Information and Personal Data Protection (idp.al).
8.Changes
If we change how we use your data, we'll update this page and the date at the top.