Privacy

TO BE PROVIDED — name, legal form, and contact details of the data controller.

Contact form: first name, email address, message content.

Trip questionnaire: email address, desired dates and duration, number of travellers, indicative budget, accommodation and pace preferences, interests, free-text comments.

Payment: card details are entered directly with Stripe and never pass through our servers. We only retain the payment confirmation (amount, plan, status).

Responding to contact requests.

Processing the order, preparing and delivering the personalised itinerary.

Sending the confirmation emails tied to these steps.

Measuring site traffic in an aggregated, privacy-respecting way (see the cookie policy).

Contract performance for processing orders and questionnaires.

Legitimate interest for processing contact requests.

Consent for audience measurement (see the cookie policy).

Supabase — database hosting.

Stripe — payment processing.

Brevo — transactional email delivery.

These providers may process data outside the European Union, under the contractual safeguards set out in their respective terms.

TO BE PROVIDED — retention periods per data category, to be defined before launch.

Under GDPR, you have the right to access, rectify, erase, restrict, object to, and port your data. To exercise it, contact us via the Contact page.

Exchanges with the site are encrypted (HTTPS). Access to data in the database is restricted by row-level security policies — no direct access is possible without going through our application servers.

Details of the cookies and storage technologies used are described in the cookie policy.