Privacy Notice

1. Who is responsible

Mistress Gia is responsible for your personal information. Privacy enquiries may be sent to contact@mistress-gia.com.

2. What I use

I use information you choose to provide in enquiries, bookings, payments and correspondence. This may include contact and age-confirmation details, availability, travel or venue information, boundaries and relevant health or safety information.

It is used only to consider and arrange requests, provide an accepted service, protect safety and discretion, administer payment and meet legal obligations. The legal bases are pre-contractual steps, performance of an agreement, legal obligations and legitimate interests. Sensitive information is used only with explicit consent where required.

3. Sharing

Your information is never sold. It is shared only when necessary with trusted providers, professional advisers or authorities required by law. If you consent to Analytics, limited website-usage and technical data is processed through Google Analytics, a service provided by Google Ireland Limited, solely for the statistical purpose described below.

Google may process data outside the European Economic Area, including in the United States. Google states that it relies, where applicable, on recognised transfer mechanisms such as adequacy decisions and Standard Contractual Clauses. Processing outside the EEA may nevertheless be subject to different legal protections.

4. Retention

Unaccepted enquiries are normally deleted within twelve months. Required accounting records are kept for seven years. Other information is deleted or anonymised when no longer reasonably needed for the arrangement, safety or a legal claim.

Google Analytics is configured to retain user-level and event-level data for two months. Google’s retention setting does not apply to standard aggregated Analytics reports, which may remain available for longer.

5. Website and security

The website uses Google Analytics 4 to understand visits to approved public pages and basic website usage. The legal basis is your consent. The Google tag is not loaded and no Analytics request is sent before you select Accept Analytics. You may decline without losing access and may change or withdraw your choice through Cookie Settings in the footer. The choice is stored locally in your browser so it can be remembered.

If you consent, Google Analytics may set analytical cookies, configured here with a maximum lifetime of ninety days, and process an approved canonical page path and title together with limited browser, device, approximate-location and session information. Although Enhanced Measurement is disabled and this website sends only an explicit page_view, Google Analytics may itself generate automatic events such as first_visit, session_start and user_engagement; these cannot all be reliably disabled with the standard Google tag. Google Signals and advertising personalisation are disabled. Scrolls, outbound clicks and form interactions are not configured as measurements.

This implementation excludes the private test hostname, URL query parameters, URL fragments and referring URLs from its explicit page-view data. It does not configure User-ID, form-field tracking or the transmission of enquiry or email content. Google still receives technical connection data needed to deliver the tag and Analytics service, which may include an IP address before Google applies its own processing controls.

When you withdraw consent, the website switches Analytics storage back to denied, prevents new measurements as soon as practicable, removes the loaded tag and attempts to delete accessible Analytics cookies for the current host and relevant parent domains. Withdrawal cannot recall data already transmitted and cannot delete cookies that are inaccessible to this website or stored under another unrelated domain.

Hosting may create necessary security logs. Reasonable measures protect your information, but email is never completely secure; please share only what is relevant. No advertising cookies, automated decision-making or marketing profiles are used.

6. Your rights

You may request access, correction, deletion, restriction or portability, object to processing, or withdraw consent where applicable. You may also complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens. Contact contact@mistress-gia.com to exercise your rights.