Privacy Policy

This Privacy Policy explains how Hidden Path processes personal data in connection with its website, inquiries, and private culinary and market tour services in Astara. It applies to information collected before, during, and after a booking, including communication, planning, payment, and check-in steps.

Policy guidance

This introduction outlines how the policy is organized and where to find key information.

Use of information
Handled under this policy framework
User rights
Requests and access options are described below
Support channel
01

How We Use Data

We use personal data to respond to inquiries, confirm dates and group details, collect dietary information, check venue availability, arrange routes and tastings, process booking payments, coordinate meeting-point check-in, and deliver the guided experience. We also use data to communicate with you, maintain records, improve website reliability, manage security, and meet accounting, tax, and other legal obligations.

Processing is limited to operational, administrative, and legal needs.
02

Service Providers

We may share personal data with payment processors, website hosting and technical support providers, communication tools, and other operational partners that help us manage bookings, payments, site functionality, and recordkeeping. These parties are expected to use the information only for the services they provide to us and to maintain appropriate confidentiality and security measures.

Service providers receive only the information needed to perform their role.
03

Legal Disclosure

We may disclose personal data to public authorities, courts, or other parties when required by law, when necessary to protect our rights or the rights of others, or when needed to respond to lawful requests, fraud concerns, or security incidents. We may also share information in connection with a business reorganization if permitted by law.

Disclosure may be required for compliance, safety, or dispute handling.
Privacy Office

Contact Information

Email contact
Telephone contact
+994 50 582 52 51
Postal address
1, Qum Küçəsi Döngə 1, Astara, AZ
Privacy contact
01

Data We Collect

We may collect contact details, booking information, group size, requested dates, dietary information, meeting-point details, communication records, payment-related information, and technical data such as device and browser information, log data, and cookie identifiers. Where needed for a tour request, we may also process preferences relevant to route planning and guide language confirmation.

The categories collected depend on booking, inquiry, and site-use activity.
02

Sources of Data

We receive data when you submit a consultation request, communicate by email or phone, provide booking and dietary details, complete payment steps, or check in for a scheduled experience. We also obtain limited technical data automatically when you use the website, including through cookies and similar tools.

Most information comes directly from the person making the inquiry or booking.
03

Cookie Types

Our website may use essential cookies to support core functions, preference cookies to remember basic settings, and analytics or performance cookies to understand how the site is used. Cookie duration may be session-based or persistent, depending on the function. We do not use cookies to promise third-party access, transport, or other services outside the scope of this policy.

We use a limited set of cookie categories for operation and measurement.
04

Cookie Controls

You may manage cookies through your browser settings and, where available, through site controls. Blocking some cookies may affect basic site functions, form handling, or preference storage. We do not rely on cookies to collect more information than is needed for ordinary website operation.

Browser controls can be used to limit non-essential cookies.
User Rights

Your Rights

Subject to legal limits, you may ask to access, correct, delete, or restrict certain personal data, and you may object to some processing based on your circumstances. Where processing is based on consent, you may withdraw that consent for future processing. We may need to keep some information where required for accounting, safety, dispute resolution, or other legal reasons.

Available rights depend on the nature of the data and the applicable law.
Requests

How to Make a Request

To make a privacy request, use the contact details in this policy and describe the data or activity concerned. We will review the request and respond within a reasonable period, taking into account the nature of the request and any legal obligations that apply. If we cannot fully comply, we will explain the reason where permitted.

We may ask for information needed to verify the request before acting on it.
Data Retention

Retention

Booking, payment, and service records are retained for a practical period after the experience ends so we can manage follow-up, accounting, dispute handling, and legal obligations. Technical logs and cookie data are kept for shorter periods unless a longer period is needed for security, troubleshooting, or compliance. When data is no longer needed, we delete it or de-identify it where appropriate.

We keep information only for as long as it is needed for the stated purpose or legal recordkeeping.
Policy Updates

Policy Changes

If we make material changes, we will update the policy text on the website and may provide additional notice where appropriate. The revised version applies from the date it is posted unless a different effective date is stated.

We review this policy when our practices or legal obligations change.