Privacy notice — bot-events.com

Best of Tours SAS — 26 bis rue de la Calade, 84200 Carpentras, France.

Privacy contact: contact@bestoftours.co.uk

• Booking details — first/last name, email, phone, organization, check-in/out dates, room count, special requests. Used to provision and confirm your hotel reservation.
• Payment data — handled directly by Stripe (we never see or store your card number). We receive a payment identifier and confirmation status only.
• Technical data — IP address, browser user-agent, minimal request logs (kept by our hosting provider for security and incident response).

• Contract performance (art. 6(1)(b)) — booking details and payment data are processed to perform the booking contract you enter into.
• Legal obligation (art. 6(1)(c)) — financial records retained per French accounting and tax obligations.
• Legitimate interest (art. 6(1)(f)) — technical logs for security and abuse prevention.

• The contracted hotel for your stay — your name, dates, room type, and any relevant special requests are shared for check-in operations.
• Stripe (Stripe Payments Europe Ltd, Ireland) — payment processing.
• Resend (Resend Inc., USA) — transactional email delivery (booking confirmation, balance reminder).
• Google Cloud (Google Ireland Ltd, Dublin) — hosting infrastructure (Cloud Run, Firestore) in EU regions.

• Active booking records: until 12 months after the event ends.
• Accounting/invoicing records: 10 years (French Code de commerce art. L123-22).
• Technical logs: 12 months maximum.

Under the GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to lodge a complaint with the French supervisory authority (CNIL, cnil.fr).

To exercise any of these rights, email contact@bestoftours.co.uk with the booking reference and a description of your request. We respond within 30 days.

Some of our processors (notably Resend) operate from the United States. Transfers rely on the EU-US Data Privacy Framework where applicable, and on Standard Contractual Clauses approved by the European Commission otherwise.

bot-events.com does not set any analytics, advertising, or social tracking cookies. The only browser storage used is technical session state required to operate the booking flow and admin console (essential, exempt from consent under PECR / ePrivacy).