Last updated: September 2026
Flow & Vibes respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share personal information when you visit our website, contact us, make a booking, or use our services.
The data controller responsible for the processing described in this Privacy Policy is:
Flow and Vibes Μονοπρόσωπη ΙΚΕ
(Flow and Vibes Single Member P.C.)
VAT No.: EL802999959
G.C.R. (GEMI) No.: 187103207000
Registered Office:
Rodopoleos 9
Elliniko 167 77
Greece
Email: info@flowandvibes.com
Website: flowandvibes.com
Depending on how you interact with us, we may collect and process:
Contact and identification information, such as your name, email address, telephone number, and other information you provide when contacting us.
Booking information, such as the experience booked, booking date, number of guests, preferences, requests, meeting arrangements, and information reasonably necessary to organize and provide the booked service.
Communications, including enquiries, messages, requests, feedback, and correspondence with us.
Payment and transaction information, such as payment status, amount, currency, transaction reference, and related booking information. Payments are processed through third-party payment providers such as Stripe and PayPal. Flow & Vibes does not itself store complete payment-card details.
Technical and usage information, which may include IP address, browser and device information, pages visited, interactions with the website, approximate location derived from technical information, and similar website usage data.
Information received from third parties, including booking platforms, travel partners, or other parties through which you have booked or requested a Flow & Vibes service.
Please avoid providing sensitive personal information unless it is reasonably necessary for us to arrange or safely provide a requested service.
We process personal data for the following purposes:
Under the General Data Protection Regulation (GDPR), we rely on one or more of the following legal bases, depending on the circumstances:
Performance of a contract or steps before entering into a contract — for example, when processing information required to respond to a booking request, manage a confirmed booking, or provide an experience.
Compliance with a legal obligation — for example, where information must be retained for accounting, tax, regulatory, or other legal requirements.
Legitimate interests — where reasonably necessary for the operation, administration, security, and improvement of our business and services, provided that those interests are not overridden by your rights and interests.
Consent — where consent is required, particularly in relation to certain cookies, analytics technologies, or other optional processing. Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Payments made through our website may be processed by third-party payment providers, including Stripe and PayPal.
These providers process payment information in accordance with their own privacy and security practices. Flow & Vibes may receive information such as payment confirmation, transaction identifiers, amounts, and payment status but does not itself store your complete payment-card details.
We use Google Analytics to understand how visitors interact with our website and to help us improve its performance and content.
Our current analytics configuration includes measures intended to limit unnecessary collection and use of personal information, including IP-address anonymization or equivalent privacy controls where applicable.
We use Complianz to manage cookie consent and cookie-related preferences. Non-essential cookies and technologies are managed according to the consent choices available through our cookie banner.
Our website may also use services such as Google reCAPTCHA for security and abuse prevention and Google Fonts for website presentation.
More detailed information about the cookies and services used on the website, their purposes, and how you can manage your preferences is available in our separate Cookie Policy. You can also change your cookie preferences through the consent-management options available on the website.
We may share personal data only where reasonably necessary for the purposes described in this Privacy Policy.
Recipients may include:
Where you make a booking through a third-party booking platform or travel partner, that third party may process your personal data under its own privacy policy. Flow & Vibes may subsequently receive information necessary to administer and provide your booking.
We do not sell your personal data.
Some of the technology and service providers used by Flow & Vibes may process personal data outside Greece or the European Economic Area (EEA).
Where personal data is transferred outside the EEA, appropriate safeguards are used where required by applicable data-protection law. Depending on the destination and provider, these may include an adequacy decision adopted by the European Commission, approved contractual safeguards such as Standard Contractual Clauses, or another lawful transfer mechanism.
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to satisfy applicable legal, accounting, tax, regulatory, or reporting requirements.
Retention periods therefore vary according to the type of information and the reason for processing it. Booking and transaction records may be retained for the period required by applicable accounting, tax, and legal obligations. Enquiries and correspondence that are no longer required are deleted or otherwise removed when there is no continuing business or legal reason to retain them.
Where processing is based on consent, relevant information may be retained until consent is withdrawn or the information is no longer required, subject to any overriding legal obligations.
We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
We also use third-party hosting, payment, security, and technology providers that maintain their own security measures.
However, no method of transmitting or storing information online can be guaranteed to be completely secure.
Subject to the conditions and limitations provided by applicable law, you may have the right to:
To exercise your rights, contact us at info@flowandvibes.com
We may need to request information reasonably necessary to verify your identity before acting on a request.
You also have the right to lodge a complaint with the competent data-protection supervisory authority. In Greece, this is the Hellenic Data Protection Authority (HDPA).
Our website may contain links to third-party websites, booking platforms, social-media services, or other external services.
Those third parties are responsible for their own privacy practices. We encourage you to review their privacy policies when providing personal information directly to them.
We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or data-processing practices.
When material changes are made, the “Last updated” date at the top of this page will be revised.
For questions about this Privacy Policy, the processing of your personal data, or the exercise of your data-protection rights, please contact:
Flow and Vibes Μονοπρόσωπη ΙΚΕ
(Flow and Vibes Single Member P.C.)
VAT No.: EL802999959
G.C.R. (GEMI) No.: 187103207000
Registered Office:
Rodopoleos 9
Elliniko 167 77
Greece
Email: info@flowandvibes.com
