1. Controller

This Privacy Policy describes how Navi ("Navi", "we", "us", "our") processes personal data in connection with the website and the purchase and use of our digital audio tours.

Data Controller: Sofia Yartseva, sole proprietor registered in Estonia (FIE)
Registry code: 17525273
Contact: hello@navi-tour.com

2. Scope

This Policy applies to personal data collected through our website and related services, including purchases, delivery of access links, and customer support.

3. Personal Data We Process

Depending on how you interact with the service, we may process:

• Account / delivery data: email address (to deliver the access link and support you)
• Transaction data: purchase status, receipt identifiers, and payment confirmation details
• Device and usage data: IP address, device type, browser, basic logs for security and troubleshooting

We do not store full payment card details. Payments are handled by our payment provider (e.g., Stripe).

4. Purposes of Processing

We process personal data for the following purposes:

• To deliver your unique access link and enable access to the purchased tour
• To provide customer support and handle delivery or access issues
• To process payments and prevent fraud
• To maintain website security and reliability
• To comply with legal and accounting obligations

5. Legal Bases (GDPR)

Where the GDPR applies, our legal bases typically include:

• Contract: to perform the purchase contract and deliver the digital product
• Legitimate interests: security, fraud prevention, service improvement and support
• Legal obligation: accounting, tax, and compliance requirements
• Consent: where required (e.g., certain optional cookies or marketing communications)

6. Payment Processing

Payments are processed by a third-party payment provider (for example, Stripe). The payment provider processes payment data in accordance with its own privacy policy. We receive confirmation of payment and limited transaction details necessary to fulfill your order.

7. Cookies and Similar Technologies

We use only essential technical cookies and similar technologies required for website functionality, access management, and security.

8. Sharing and Transfers

We may share personal data with:

• Service providers that help us operate the site and deliver the service (e.g., hosting, email delivery)
• Payment providers to process transactions
• Authorities when required by law

Where data is transferred outside the EEA, we will use appropriate safeguards (such as standard contractual clauses) when required.

9. Retention

We retain personal data only for as long as necessary for the purposes described above, including to comply with legal, accounting, or reporting obligations. Retention periods may vary depending on the type of data and applicable laws.

10. Your Rights

If the GDPR applies to you, you may have the right to request access, rectification, deletion, restriction, portability, and to object to processing. You may also withdraw consent at any time where processing is based on consent.

To exercise your rights, contact: hello@navi-tour.com

You also have the right to lodge a complaint with your local data protection authority.

11. Security

We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date indicates the latest revision.