(Last Updated: October 2025)
Haunted Bruges BV (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you book or participate in our walking tours, visit our website, or interact with us through booking platforms such as Bókun and Viator.
1. Who We Are
Haunted Bruges BV
 Vorstlaan 398, 1160 Brussels, Belgium
 Company Number (KBO): 1029.261.258
 Email: matt@hauntedbruges.com
We act as the Data Controller for personal data processed under this policy.
2. What Personal Data We Collect
We may collect the following types of information:
  • Identity and Contact Information
 (name, email address, phone number)
  • Booking Information
 (tour date/time, number of participants, language preference)
  • Payment Status Information
 (confirmation only — we never store full card numbers)
  • Technical Data
 (IP address, cookie identifiers, browser/device type)
  • Communication Records
 (messages or inquiries you send us)
We do not knowingly collect data from children without parental consent.
3. How We Collect Personal Data
  • Directly from you when you book a tour
  • Through third-party booking platforms (Bókun, Viator, TripAdvisor)
  • Through our website via cookies and similar technologies
  • When you communicate with us via email
4. Why We Process Personal Data
We use your information for the following reasons:
PurposeLegal BasisConfirming and managing your tour bookingPerformance of a contractCommunicating tour information & updatesPerformance of a contractImproving our services and websiteLegitimate interestComplying with accounting/legal obligationsLegal requirementRequesting optional feedback or reviewsLegitimate interest
We do not sell personal data.
5. Sharing of Personal Data
We may share personal data only with:
  • Booking partners such as Bókun and Viator
  • Approved service providers such as email systems
  • Payment processors and financial institutions
  • Belgian or EU authorities if legally required
Each third party must comply with GDPR.
6. International Transfers
Some booking platforms or processors may operate outside the EU/EEA.
 When required, we rely on:
  • Standard Contractual Clauses
  • Other GDPR-approved safeguards
7. Data Retention
We keep data only as long as necessary:
  • Booking records: up to 7 years (for legal/accounting purposes)
  • Communications: up to 2 years
  • Cookies: according to our cookie policy
Data is securely deleted once no longer needed.
8. Data Security
We take appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse.
Access is limited only to personnel who need it for service delivery.
9. Your GDPR Rights
You have the right to request:
  • Access to your personal data
  • Correction of inaccurate information
  • Deletion of data when permitted
  • Restriction of processing
  • Data portability
  • Objection to certain processing activities
Contact: matt@hauntedbruges.com
You may also submit a complaint to the Belgian Data Protection Authority if you believe your rights are violated.
10. Cookies
Our website may use cookies for basic functionality and analytics.
 You may manage cookie preferences via your browser settings at any time.
(A separate cookie policy can be provided if required.)
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any updates will be posted on this page with a new “Last Updated” date.
📌 By booking a tour or using our website, you acknowledge that you have read and understood this Privacy Policy.