Privacy policy
Last updated: 26 October 2026
This policy explains what personal information MSK Line Vacations ("we", "us") collects when you use this website, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. It covers browsing the site, booking experiences, signing in to an account, and talking to us in the live chat.
The short version
- We collect what we need to take and run your booking: your name, email, phone (optional) and trip details.
- You can book as a guest. An account is optional and has no password; you sign in with a code we email you.
- We don't take card payments on this website; you pay on the day of your experience.
- We don't sell your information, we don't show ads, and we don't use advertising or analytics trackers.
- You can ask to see, correct or delete your information at any time by emailing test@gmail.com.
Contents
- Who we are
- What we collect and why
- Payments
- Emails we send
- Cookies and storage on your device
- Who we share information with
- International transfers
- How long we keep information
- How we protect information
- Your rights and choices
- Extra information for some regions
- Children
- Changes to this policy
- Contact us
1. Who we are
This website is run by MSK Line Vacations. We are responsible for (the "controller" of) the personal information described in this policy.
You can reach us about privacy at test@gmail.com.
2. What we collect and why
When you book
- What: the lead traveler's full name, email address and (if you give it) phone number; the experience, date, start time, number of adults and children; any promo code; the price; a booking reference; the booking's status (for example confirmed or cancelled) and when it was made, confirmed or cancelled.
- Why: to reserve your place, hold spots on the departure, send your confirmation, let you look up and cancel your booking, process refunds, contact you about your trip if something changes, and keep the business and tax records we're required to keep.
- Legal basis: performing our contract with you (your booking), and complying with legal obligations (accounting and tax records).
We only record how many children are in a group, not their names or ages.
When you create an account or sign in (optional)
- What: your email address, and the name and phone number you choose to save; when you created the account and last signed in. To sign you in we send a 6-digit code to your email. We store the code only in scrambled (hashed) form, together with the time and your IP address, to stop people guessing codes or flooding inboxes. Signing in places a cookie on your device (see section 5); we store only a scrambled copy of it.
- Why: to show you every booking made with your email on any device, to fill in your details when you book or chat, and to keep accounts secure.
- Legal basis: providing the account you asked for (contract), and our legitimate interest in keeping accounts secure and preventing abuse.
If you've booked as a guest before, your new account starts with the name and phone number from your most recent booking. You can change them on your account page.
When you use the live chat
- What: the messages you and our team send; the name and email address you choose to give; the page you started the chat from; when messages were sent and when you were last active in the chat; and your IP address.
- Why: to answer your questions, to email you our reply if you've left the site and gave us your email, and (for the IP address) to limit how many chats can be started from one address so the chat isn't flooded with spam.
- Legal basis: our legitimate interest in answering enquiries and preventing abuse, or taking steps at your request before a booking.
If you sign in or book with the same email you gave in the chat, our staff can see your chats alongside your bookings so they can help you better.
When you browse
- Like most websites, our server and hosting provider automatically record basic technical information about each request: your IP address, the page or file requested, the time, and your browser type. We use these logs to keep the site running, investigate errors and protect against attacks (our legitimate interest).
- We don't use analytics tools, advertising trackers, or social media pixels.
When you contact us by email, phone or WhatsApp
We use what you send us to reply and help you. If you contact us on WhatsApp, WhatsApp (Meta) also processes the conversation under its own privacy policy.
3. Payments
We don't currently take card payments on this website. You reserve online and pay on the day of your experience, so we don't collect any payment card information online.
4. Emails we send
We only send emails connected to something you did:
- booking confirmations and cancellation confirmations;
- sign-in codes when you ask to sign in;
- our replies to your live chat messages, if you've left the site and gave us your email.
We don't send marketing or newsletters. If we ever want to, we'll ask for your permission first, and you'll be able to unsubscribe at any time.
5. Cookies and storage on your device
We only use cookies and device storage that are needed for the features you use. We don't use advertising or analytics cookies, so we don't show a cookie banner.
| Name | Type | What it's for | How long |
|---|---|---|---|
| site_session | Cookie | Keeps you signed in to your account. Only set if you sign in. | 60 days from your last visit, or until you sign out |
| site.trips | Browser storage | Remembers the booking references (and the email used) for bookings made on this device, so they appear in My trips. | Until you clear your browser's site data |
| site.chat | Browser storage | Lets you return to your live chat conversation. Only set if you start a chat. | Until the chat ends and you start a new one, or you clear your browser's site data |
Our staff area uses its own cookie and browser storage to keep staff signed in and remember their last screen; these aren't set for visitors.
Our pages load fonts from Google Fonts. To deliver the fonts, Google receives your IP address and browser information. Google says it doesn't use this information to identify you or for advertising; see Google Fonts' privacy FAQ.
6. Who we share information with
We don't sell or rent your personal information, and we don't share it with advertisers. We share it only with:
- The guides and operators who run your experience: the lead traveler's name, phone number and group details, so they can meet you and run the tour.
- Service providers who run parts of our service for us: our website hosting provider (which stores our database and server logs), our email delivery provider (which sends the emails described above), and Google Fonts (see above). They may only use the information to provide their service to us.
- Authorities, when the law requires it: for example to comply with a court order, or to protect people's safety or our legal rights.
- A new owner, if our business is sold or merged, in which case this policy would continue to apply to your information.
7. International transfers
Our service providers may store or process information in countries other than yours, including the United States. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the standard contractual clauses approved by the relevant authorities, which our providers offer.
8. How long we keep information
- Bookings: for as long as we need them to provide the service and handle any questions or disputes, and for as long as tax and accounting laws require us to keep business records.
- Accounts: until you delete your account. Sign-in sessions end after 60 days without a visit.
- Sign-in codes: each code stops working after 10 minutes, and we delete the records after about a day.
- Live chats: kept with your customer record so we can follow up on your questions, unless you ask us to delete them.
- Server logs: kept for a short period by our hosting provider, according to its settings.
- Information on your device: until you clear your browser's data for this site or sign out.
When we no longer need information, we delete it or make it anonymous.
9. How we protect information
- Information sent between your browser and our site is encrypted (HTTPS).
- We don't use passwords for customer accounts. Sign-in codes and sign-in cookies are stored only in scrambled (hashed) form, so they can't be read even from our database. Codes expire quickly and stop working after a few wrong tries.
- Only authorised staff can see bookings, customer details and chats, through a password-protected staff area.
- We limit how often codes can be requested and chats started, to prevent abuse.
No system is perfectly secure. If a breach affects your information, we'll tell you and the relevant authorities where the law requires us to.
10. Your rights and choices
Depending on where you live, you have the right to:
- see the personal information we hold about you and get a copy of it;
- correct information that's wrong or incomplete;
- delete your information (we may need to keep some booking records to meet legal obligations, and we'll tell you if so);
- object to or ask us to limit how we use your information;
- receive your information in a portable format;
- complain to your local data protection authority.
Some of this you can do yourself: if you have an account, you can update your name and phone number, sign out on all devices, or delete your account from your account page. Deleting your account doesn't delete your bookings, so your trips still go ahead.
When you ask us to delete your information, we delete your chats and your account, and remove your name, email address and phone number from your past bookings. We keep the rest of each booking record (experience, date, amount and payment reference) without anything that identifies you, because tax and accounting laws require it. If you have an upcoming trip, we'll do this after the trip or once you've cancelled it.
For anything else, email test@gmail.com. To protect your information, we'll check the request comes from you, usually by replying to the email address on your booking. We'll respond within one month, and won't charge you unless a request is clearly excessive.
11. Extra information for some regions
European Economic Area and United Kingdom
The GDPR and UK GDPR give you the rights listed in section 10. The legal bases we rely on are shown for each activity in section 2. You can complain to the data protection authority in the country where you live or work, or where you think a breach happened. In the UK this is the Information Commissioner's Office (ico.org.uk).
United States
If you live in a US state with a consumer privacy law (such as California), you have the right to know what personal information we collect and how we use it, and to ask us to correct or delete it. We don't sell or "share" personal information for cross-context behavioural advertising, as those laws define those terms, and we won't treat you differently for using your rights.
12. Children
Our website is meant for adults booking experiences. Children can join experiences when an adult books for them, but we don't knowingly collect personal information from children. We only record how many children are in a booking. If you think a child has given us personal information, contact us and we'll delete it.
13. Changes to this policy
We'll update this policy when our service or the law changes. The date at the top shows when it last changed. If we make a significant change, we'll tell customers with upcoming bookings by email or on this site.
14. Contact us
MSK Line Vacations
Email: test@gmail.com
Or use the live chat or our contact page.