Privacy Policy

1. Data Controller

This website is operated by Club Loyalty DMC, Crnogorskih Serdara 107, 85000 Bar, Montenegro. Registration No. 50961682. Contact: contact@clubloyalty.me.

2. What Personal Data We Collect

When you submit an RFP through our website form, we collect:

• Name
• Company name
• Contact email
• Phone number
• Event dates
• Participant numbers
• Event type
• Budget range
• An optional file attachment (event brief)

All of this is submitted voluntarily via the RFP form.

3. Purpose & Legal Basis for Processing

We process this data to prepare and deliver a costed event proposal, respond to inquiries, and manage the resulting business relationship. The legal basis for processing is your consent, given via the form's checkbox, and, where applicable, our legitimate interest in responding to a business inquiry initiated by you.

4. Third-Party Processors

Form submissions are processed via Web3Forms (web3forms.com), a third-party form-delivery service, which transmits the submitted data to our email inbox. Web3Forms operates from India and uses the following infrastructure providers to deliver the service: Amazon Web Services (hosting, storage, database, and email delivery via Amazon SES), Cloudflare (content delivery, DNS, and security), and Hetzner (application infrastructure). Data is encrypted in transit (HTTPS) and at rest.

To protect against spam and abuse, Web3Forms also shares the IP address and email address of form submitters with CleanTalk and Akismet, two spam-prevention services.

Where personal data is transferred from the European Economic Area, the United Kingdom, or Switzerland, such transfers are made under appropriate safeguards, including Standard Contractual Clauses, as set out in Web3Forms' Data Processing Agreement (web3forms.com/dpa).

Form submission data is retained by Web3Forms for a maximum of three years from the date of submission, after which it is automatically deleted.

5. Data Retention

Personal data submitted via the RFP form is retained by us for the duration of the business relationship, and up to 3 years after the last contact for follow-up purposes, unless earlier deletion is requested. This aligns with the retention period applied by our form-processing provider, Web3Forms (see Third-Party Processors section above).

6. Your Rights

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data
• Restrict processing
• Object to processing
• Data portability

To exercise these rights, contact us at contact@clubloyalty.me.

7. Cookies & Local Storage

This website does not currently use tracking or analytics cookies. Only strictly necessary technical data (e.g. language preference) is stored locally in your browser.

8. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The date below indicates when this policy was last revised.