Privacy Policy & Cookies

1. Who we are

Mykonos Exclusive Tours is a trading name operated from Messaria, Mykonos, Greece, and a member of the Mykonos Concierge Group of Companies. For any privacy question, contact us at info@mykonosexclusivetours.com.

2. What we collect

• Enquiry details — the name, contact, group size, preferred date, vehicle, and notes you provide through our forms, WhatsApp, or email.
• Booking details — the experience selected, pickup location, and any dietary, mobility, or special-occasion information you share.
• Payment confirmation — we receive confirmation from PayPal that a payment has succeeded. We do not receive or store your card number.
• Anonymous analytics — aggregated, non-identifying statistics about how the website is used (pages viewed, approximate region, device type).

3. Why we collect it

Solely to respond to your enquiry, confirm and operate your booking, and improve our website. We do not sell, rent, or share your data with third parties for marketing. We do not send promotional emails unless you explicitly ask to be added to our list.

4. How long we keep it

Enquiry and booking records are retained for as long as needed to operate your booking and for a reasonable period afterwards for accounting and legal purposes. If you ask us to delete your data, we remove it from our active systems within 30 days, retaining only what we are legally required to keep.

5. Cookies

This website uses a small number of cookies:

• Essential cookies — required for the site to function (for example, remembering that you have dismissed the cookie notice).
• Analytics cookies — anonymous, aggregated usage statistics that help us improve the site. You can decline these.

We do not use advertising or cross-site tracking cookies.

6. Your rights

Under the EU General Data Protection Regulation (GDPR) you have the right to access, correct, export, or delete the personal data we hold about you, and to object to or restrict certain processing. To exercise any of these rights, simply message us on WhatsApp or email — a real person handles every request.

7. Security

Our website is served over HTTPS. Enquiries are transmitted securely. Payment details are handled entirely by PayPal's PCI-DSS compliant infrastructure and never touch our servers.

8. Children

Our services are intended for adults booking on behalf of themselves or their party. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date above reflects the most recent revision.