01 — Who's responsible
The person holding your data is me
No marketing department, no third-party CRM running in the background. When you book, your details sit with me — Mike, the driver — and the handful of services I genuinely need to run a booking. I'm the data controller in the sense French and EU law (the GDPR / RGPD) mean it. My full identity is at the bottom of this page.
02 — What I collect
Only what a booking actually needs
When you enquire or book, I collect: your name, the phone number or WhatsApp you message me from, your email if you use it, and the trip details you give me — dates, pick-up point, number of passengers, anything relevant to the day.
Card payments run through Stripe. I never see or store your full card number — Stripe handles that end to end. I only see that a deposit was paid.
03 — Why, and the legal basis
Three reasons, that's it
I don't profile you, I don't run ad-targeting, and I never sell your data. To anyone. Ever.
04 — Who else touches it
A short, named list
Running this cleanly means a few trusted services process some of your data on my behalf. Each one only gets what its job requires:
Some of these are run by companies outside the EU (Stripe, Meta). They operate under the safeguards the GDPR requires for international transfers. If you'd rather not use WhatsApp, email or a phone call works just as well.
05 — How long I keep it
As briefly as the law allows
An enquiry that never turns into a booking is deleted within 12 months. Once you've travelled, invoices and accounting records are kept for 10 years — that's not my choice, it's the French Code de commerce. After that, gone.
06 — Cookies
There's no banner because there's nothing to consent to
This site sets no advertising or tracking cookies. My analytics (Plausible) measure visits without cookies and without identifying anyone — that's the whole reason I chose it.
No cookie wall, no "we value your privacy" pop-up, no hidden trackers. If you came here expecting to click through a consent maze, enjoy the silence.
07 — Your rights
You're in control of your data
Under the GDPR you can ask me to access, correct, delete, transfer, or restrict the data I hold on you, or object to a particular use. Message me and I'll handle it — no forms, no runaround. I'll act within one month.
If you think I've got it wrong and we can't sort it out, you have the right to complain to France's data protection authority, the CNIL (cnil.fr).
Data controller: Mike — That Guy Tours · Entreprise individuelle
SIRET 100 235 928 00015 · VTC registration EVTC 006260200
06000 Nice, France · mike@thatguy.tours
TVA non applicable — Art. 293B du CGI