Privacy Policy
How Kotor Travel handles visitor data: analytics, affiliate links, cookies, legal bases, retention, international transfers and your UK/EU data rights.
Last updated: 7 June 2026
On this page
- Who we are & how to contact us
- What data we collect
- Analytics
- Affiliate links
- Cookies & consent
- Legal bases
- Retention
- International transfers
- Third parties & processors
- Your rights
- Complaints
- Security
- Children
- Updates
This Privacy Policy explains how Kotor Travel (“we”, “us”, “our”), which operates the website at kotortravel.com, handles information about visitors. It is written in plain English to help UK and EU visitors understand their choices. It is general information and not legal advice.
Who we are and how to contact us
Kotor Travel is an independent travel guide to Kotor and the Bay of Kotor, Montenegro. For any privacy question or request, email us at contact@kotortravel.com. We act as the data controller for the limited personal data described below.
What data we collect
This is a static informational website. We do not run user accounts, comment forms, newsletters or checkout on this site. The data involved is limited to:
- Analytics data — our cookieless Plausible analytics records anonymous, aggregate usage such as pages viewed, approximate country, device and browser type, and referring site, with no cookies and no personal identifiers. We use this in aggregate to improve the guide. Optional, consent-gated tools (Crazy Egg heatmaps) collect anonymised interaction data only if you opt in.
- Technical/server data — like most websites, our hosting provider may process standard server logs (IP address, request time, user agent) to deliver pages and maintain security.
- Email you send us — if you email contact@kotortravel.com, we receive your address and message so we can reply.
- Consent record — your cookie choices are stored in your own browser (local storage), not on our servers.
We do not knowingly collect special-category data, and we do not sell personal data.
Analytics
We measure aggregate traffic with Plausible Analytics, a privacy-friendly, cookieless analytics tool. Plausible sets no cookies, stores nothing on your device, collects no personal data and does not track you across sites or build a profile of you — it only reports anonymous, aggregate page statistics. Because it accesses no information on your device, it runs without requiring consent, and there is nothing to opt out of. See Plausible’s data policy.
We also use optional, consent-gated analytics scripts — Crazy Egg (anonymised heatmaps) and the GetYourGuide Integration Analyzer — which load only after you accept analytics cookies. If you reject or ignore the banner, they do not load.
Affiliate links
We are a member of several travel affiliate programmes (including Booking.com, Viator, GetYourGuide, RentalCars and Skyscanner, partly via the Travelpayouts and Stay22 networks). When you click an affiliate link and then book on a partner site, that partner may set its own cookies and may pay us a commission at no extra cost to you. The Travelpayouts and Stay22 affiliate automation scripts load only after you accept the “Booking link support” category (affiliate / marketing cookies). See our Affiliate Disclosure for details. Bookings happen entirely on the partner’s own site under their privacy and cookie terms.
Cookies and consent
We use a small number of cookies and similar technologies. Strictly necessary items (including the record of your cookie choice) are always on. Analytics and booking link support (affiliate / marketing) technologies load only with your consent, which you can change at any time using the Cookie Preferences control in the footer of every page. Full detail is in our Cookie Policy.
Legal bases (UK GDPR / EU GDPR)
- Consent — for analytics and booking link support (affiliate / marketing) cookies and scripts. You can withdraw consent at any time.
- Legitimate interests — for keeping the site secure and operational (e.g. standard server logs), balanced against your rights.
- Legitimate interests — for responding to emails you choose to send us.
Retention
Aggregated, anonymous analytics data is retained by Plausible under its own retention and data policy. Email correspondence is kept only as long as needed to handle your query and any follow-up. Your in-browser consent record stays until you clear your browser storage or it expires by version change.
International transfers
Our Plausible analytics is EU-based and EU-hosted, so routine traffic analytics is not transferred outside the EEA. Some other processors (for example Crazy Egg, and our affiliate partners) may be based outside the UK/EEA, which can involve transferring data internationally. Where that happens, providers typically rely on safeguards such as the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.
Third parties and processors
- Plausible Analytics — cookieless, EU-hosted aggregate traffic measurement (no consent required, no personal data).
- Crazy Egg — anonymised heatmaps, only after you accept analytics.
- Travelpayouts, Stay22 and affiliate networks — Booking.com, Viator, GetYourGuide, RentalCars, Skyscanner and the Travelpayouts and Stay22 platforms, for affiliate attribution.
- Our hosting provider — to serve the website.
Each third-party booking or affiliate site has its own privacy and cookie terms, which apply once you leave our site.
Your rights
If you are in the UK or EU you have rights over your personal data, including the right to access, rectify, erase, restrict or object to processing, the right to data portability, and the right to withdraw consent. To exercise any of these, email contact@kotortravel.com. Because this site stores very little personal data directly, some requests may relate to data held by our processors, and we will help you direct them appropriately.
Complaints
If you are unhappy with how we handle your data, you can complain to your data protection authority. In the UK that is the Information Commissioner’s Office (ICO), ico.org.uk. In the EU you can contact your local supervisory authority. We would appreciate the chance to address your concern first via contact@kotortravel.com.
Security
We serve the site over HTTPS and apply reasonable measures to protect the limited data involved. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
Children
This site is intended for adults planning travel. It is not directed at children, and we do not knowingly collect data from children. If you believe a child has provided personal data, contact us and we will delete it.
Updates to this policy
We may update this policy from time to time. The “last updated” date at the top shows the latest revision. Material changes will be reflected on this page.
Questions or privacy requests: contact@kotortravel.com.