Privacy Policy
Version 1 · published on July 29, 2026
1. Who processes your data
Godshot LLC, which operates LOCAL AT, is the controller of the personal data we collect through this site.
2. What we collect and why
There is no user registration: you can browse the entire site without giving us a single piece of data. Data is captured when you book, and it is what we need in order to deliver the experience:
| Data | Why |
|---|---|
| First and last name | To identify you on the day and on the coordinator's list |
| Date of birth | To check age requirements on some experiences and for attendance |
| Nationality | To prepare the experience (language, access documentation for some venues) |
| To send your confirmation, your booking management link and your review link | |
| Phone | To reach you on the day if needed |
| Name and date of birth of each companion | Participant list for the event |
| Preferred language | To assign a coordinator who speaks it and to write to you in it |
| Notes (optional) | Anything you want to tell us about your booking |
We also store the language you were browsing in, the financial breakdown of your booking and the log of its status changes (confirmed, cancelled, rescheduled).
3. What we do NOT collect
We do not store your card details. They never pass through our servers: you hand them directly to Stripe, our payment processor. For each charge we keep only the operation identifier, the amount, the card brand and its last four digits — the minimum needed to identify a payment and refund it.
4. Legal basis
We process your data to perform the contract you enter into when booking (delivering the experience, charging you, refunding you where applicable), to comply with legal obligations — accounting and tax — and, as regards site security, on our legitimate interest in preventing abuse.
5. Who we share it with
Only with those needed to deliver the service:
- Stripe, to process the charge and refunds.
- Supabase and Vercel, the infrastructure the application runs on.
- Twilio, to send the emails and SMS about your booking.
- The coordinator running your experience, who sees what is needed to operate it. **Once
the experience ends, they no longer see your email or phone number.**
We do not sell your data, nor share it with third parties for advertising.
6. How long we keep it
We keep your booking data for as long as an accounting or tax obligation tied to the payment exists. The payment operation log and the booking status history are immutable: they exist so we can show what happened to your money.
Bookings that were never paid are closed automatically as housekeeping.
7. Your rights
You can ask us for access to your data, its rectification, its erasure, restriction of processing or portability, and you can object to certain processing. Write to info@localat.io from the email address you booked with and we will respond.
One honest limit worth knowing: we cannot delete the record of a payment operation while the legal obligation to retain it exists.
8. Cookies and local storage
We do not use advertising cookies or third-party tracking. We use storage in your browser strictly for functionality: remembering the language you chose and not losing the data you entered if you reload the page mid-booking.
9. International transfers
Our infrastructure and payment providers may process data outside your country. We choose providers that offer contractual guarantees of equivalent protection.
10. Minors
Experiences are booked by adults. If a minor takes part, their details are entered by the adult making the booking and under their responsibility.
11. Changes
We may update this policy. Each update creates a new version with its own date. The version that applied to you when you booked is recorded alongside your booking.
12. Contact
info@localat.io