Privacy Policy

1. Who is responsible?

TERRA SANTA EPHESUS LLC is the operator of this website and the contact for privacy enquiries. Our postal address, email and telephone number appear below.

2. Information you choose to provide

The contact form asks for your name, email address, subject and message. You may also share information through email or telephone enquiries. Provide only what is needed for your request; please avoid sending payment-card details, identity documents or unnecessary information about religious beliefs or other sensitive matters.

3. How information reaches us

The contact form submits your name, email, subject and message to our website server for delivery to our team through the configured email service. It does not open your email application. The website does not keep a separate contact-message database. For the newsletter, your email, language, request time, consent version and confirmation status are stored privately. Subscription becomes active only after email confirmation; you can unsubscribe through the link provided.

Newsletter messages are based on your opt-in and email confirmation. You may withdraw consent by unsubscribing. Confirmation links expire after 24 hours. Expired unconfirmed requests are cleaned during subsequent processing; active subscriptions are kept until withdrawal. Unsubscribing removes the subscription record. Anti-spam controls store a keyed hash of the connection address and request times, not the raw IP address, in temporary rate-limit records; records older than 24 hours are cleaned when requests are processed.

4. Why we use information

We use received correspondence to answer questions, provide requested product or wholesale information, follow up your enquiry and meet applicable legal obligations. Where a legal basis is required, processing depends on the request: steps you ask us to take before a contract, legitimate interests in responding and maintaining business communications, legal obligations, or consent where required. You can withdraw consent for future processing without affecting earlier lawful processing.

5. External services and international processing

The Google Maps embed connects to Google when loaded, and Bootstrap resources are requested from jsDelivr. Providers receive connection data such as IP address and browser information and process it under their own policies. Hosting and email providers may also process technical data or correspondence to deliver their services. Information may be processed in the United States, where our company is based, or other countries used by providers. Applicable international-transfer requirements must be observed; this policy does not mean that every country offers identical protections. Social links open independent websites when selected. We share information only as needed to handle your request, operate services or meet legal requirements.

6. Retention and security

Correspondence should be retained only as long as needed for the enquiry, related business records and applicable legal duties, then deleted or anonymised where appropriate. We do not state a fixed retention period for every provider’s logs. Access should be limited to people who need it for these purposes, with reasonable organisational and technical protection; no transmission or storage method can guarantee absolute security.

7. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to certain processing. Contact us below; we may need proportionate information to verify your identity and will handle requests within applicable deadlines. You may also complain to the competent data-protection authority where this right applies. You can choose not to send a message, although we may be unable to answer without contact details. Browser and provider settings control third-party cookies; see our Cookie Policy.

8. Children’s privacy

This website is intended for a general audience and does not intentionally solicit personal information from children. If you believe a child has sent us personal information, contact us so that we can review and address it.

9. Changes to this policy

We will revise this policy and its date when our data handling changes. Account registration, online checkout and payment collection are not currently enabled. Additional services will require updated privacy information before use.