Privacy policy

Last updated: 22 September 2026

1. Who is responsible for your data

Bright Function Limited is the controller of your personal data under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, because we offer our services to people in the European Union and EEA, the EU General Data Protection Regulation (EU GDPR).

Bright Function Limited
85 Woodlands Lane
Chichester
England
PO19 5PF
United Kingdom
Company number 09016105, registered in England and Wales
Email: [email protected]
Phone: +44 7457 423811 (Monday to Sunday, 9:00–18:00 (Budapest time))

Our representative in the EU under Article 27 GDPR: Nicholas Francis Harris, 5 Károly körút, 6th floor 2, 1075 Budapest, Hungary, email [email protected]. You can contact them instead of us on any data protection matter.

For any privacy question or request, email [email protected].

2. Data we collect

Data you give us

• Billing details you enter at checkout: first and last name, address, city, postcode, state or region, country, email address and phone number. These details are passed directly to our secure payment page (payment.danubelandmark.com) so you don't need to type them again. This website itself does not save them.
• Messages you send us by email, phone, chat or messaging apps.

Order record

When you continue to payment, our server keeps a short record of the order: the order number, tour date and time, ticket types and quantities, price category and amount. This record contains no name or contact details. We use it, together with the payment record, to obtain and deliver your tickets.

Payment data

Card payments are processed by Stripe. We receive confirmation of payment, the amount, your billing details and limited card details such as the card type and last four digits. We never receive or store your full card number.

Data collected automatically

• Technical data such as IP address, browser and device type, and pages visited, collected by our hosting provider for security and to keep the site working.
• If you accept analytics or advertising cookies: how you use the site and whether you arrived from an ad (see section 4).

3. How we use your data and why

We do not send marketing emails unless you have opted in. You can unsubscribe at any time using the link in the email.

4. Cookies and similar technologies

We use:

• Strictly necessary cookies that make booking and payment work and remember your cookie choice. These don't need consent.
• Analytics cookies (Google Analytics) to understand how visitors use the site. Used only with your consent.
• Advertising cookies (Google Ads) to measure whether our ads lead to bookings. Used only with your consent.

The full, automatically updated list of cookies used on this site, with their purpose and lifetime, is shown below.

We use Google Consent Mode: until you accept, Google tags do not set analytics or advertising cookies. You can change or withdraw your consent at any time using the "Cookie settings" link in the footer of every page. Learn how Google uses data at policies.google.com/technologies/partner-sites.

5. Who we share data with

We share personal data only as needed to provide our service:

• the primary ticket provider, where visitor details are needed to issue your ticket;
• Stripe, to process payments and refunds;
• our website hosting, email and customer support providers, who act on our instructions;
• Google, for analytics and ad measurement, only if you have consented;
• professional advisers such as accountants, and authorities where the law requires it.

We do not sell or rent your personal data.

6. International transfers

Some of our service providers, such as Stripe and Google, process data outside the UK and the European Economic Area, mainly in the United States. For these transfers they rely on the UK Extension to the EU–US Data Privacy Framework, the EU–US Data Privacy Framework, or the UK International Data Transfer Addendum and the EU Standard Contractual Clauses. You can ask us for a copy of the relevant safeguards.

7. How long we keep data

• Order records and payment records: 6 years after the end of the financial year of your booking, as required by UK tax law.
• Customer service messages: 2 years after your tour, unless needed for a complaint or legal claim.
• Analytics data: up to 14 months.

8. Security

The website uses HTTPS encryption. Access to personal data is limited to people who need it to provide our service, and our providers are bound by confidentiality and data protection obligations.

9. Your rights

You have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted, where we don't need to keep it by law;
• restrict or object to our use of your data, including for direct marketing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting processing before you withdrew it.

To use any of these rights, email [email protected]. We reply within one month.

10. How to complain

Please contact us first so we can try to help. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or, if you live in the EU or EEA, to the data protection authority in your country of residence.

11. Children

Bookings must be made by adults aged 18 or over. We do not knowingly collect data from children, other than the number and age category of children on a booking.

12. Changes to this policy

We may update this policy. The date at the top shows when it was last changed.