Datenschutzerklärung

TODO — placeholder. Needs a real GDPR-compliant policy before launch, covering:

What data the contact/booking form collects and why
That Stripe processes payment data (link to Stripe's own privacy policy)
Any analytics in use (e.g. Cloudflare Web Analytics) and what it tracks
How long data is retained and how people can request deletion
Contact details of the data controller (you)