Privacy Policy Last updated: 17 October 2026 We respect your privacy. This Policy explains how personal information is used when you visit Packed for Paradise, contact us, contribute material or use our services. 1. Data controller Operator and service provider: La Espiral, s.r.o. Registered office: Betlémská 262/10, Staré Město, 110 00 Prague 1, Czech Republic Company ID (IČO): 24656721; VAT ID (DIČ): CZ24656721 Registered in the Commercial Register maintained by the Municipal Court in Prague, file C 163855. The company is the controller of personal data processed in connection with this website and its services. For privacy matters, contact [email protected]. 2. Information we process Depending on your interaction with the website, this may include: Technical and security information: IP address, device and browser information, access times, diagnostic and security logs. Enquiries: your name, email address and the contents of messages you send us. Business orders: contact and business identification, billing details, applicable tax information, order details, payment status and necessary transaction records. Editorial contributions: materials, images and biographical or authorship information that you provide or agree to have published. Analytics and privacy choices: information collected by optional analytics tools when you consent, together with records of your cookie preferences. Card payments are handled by an external payment provider. We do not need to store your complete payment card details on our website. 3. Purposes and legal grounds We use personal data to: Operate, protect and improve the technical reliability of the website — our legitimate interests. Answer enquiries and manage communication — our legitimate interests or steps requested before entering into a contract. Process business orders, payments and contractual communication — performance of a contract or pre-contractual steps. Keep legally required tax and accounting records — compliance with legal obligations. Prepare and publish agreed contributions — according to the relevant agreement, permissions and applicable legal basis. Measure website use through optional analytics — your consent, where required. Reading our editorial content generally does not require you to provide your name. Information requested for an enquiry or order may be necessary to respond or provide the selected service. 4. Cookies and website analytics Our website uses the following analytics services, subject to the applicable consent requirements: Google Analytics 4 (Google): helps us understand visitor numbers, traffic sources and how pages are used. Microsoft Clarity (Microsoft): helps us understand website interactions through aggregated behaviour reports, heatmaps and session recordings, such as clicks and scrolling. These analytics services are optional. Where consent is required, they are activated only after you agree to analytics. You may refuse without losing access to our editorial content and may change or withdraw your choice using the Cookie settings link on the website. Essential cookies or similar technologies may be used for security, session management and storing privacy choices where necessary. Analytics technologies may use cookies or other identifiers. The exact cookie names, providers and lifetimes applicable to this website are described in the cookie settings information. 5. Service providers and international processing Where necessary, personal data may be processed by providers of hosting and infrastructure, email delivery, payment services (including Stripe), Google Analytics 4 and Microsoft Clarity, and other service providers supporting our operations. Some providers may process data outside the European Economic Area. Where this occurs, we apply the safeguards required by applicable data protection law. We do not sell personal information to advertisers. 6. Retention We keep personal data only for the period necessary for its purpose or the applicable statutory retention period. In particular, accounting and business transaction records are retained as required by law; correspondence is retained to handle enquiries and associated matters; technical logs are retained for operational and security needs. Analytics data and cookies are retained according to the settings of the relevant service and our published cookie information. When personal data is no longer needed, we delete or anonymise it, unless we must keep it by law. 7. Your rights Subject to applicable law, you may request access to or correction of your information, ask for its deletion or restriction, object to certain processing, and request data portability where applicable. Where processing relies on consent, you may withdraw it at any time without affecting previous lawful processing. To exercise your rights, email [email protected]. You may also complain to a data protection authority, including the Czech Office for Personal Data Protection (uoou.gov.cz). 8. Policy changes We may update this Policy to reflect changes in our services, technology or legal obligations. The latest version and its revision date will be available here.