Privacy policy

Introduction

We are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

Data we collect

We may collect the following types of data:

• Personal identifiers (e.g., name, email address, phone number)
• Personal documents (e.g. passports, licences)
• Booking and travel preferences including conditions we need to be attentive to, your emergency contacts, other travel guests joining etc.
• Payment and transaction data
• Device and usage data (e.g., IP address, browser type, session activity)

How we use your data

We use your information to:

• Process and manage bookings
• Communicate with you
• Improve our platform and services
• Ensure security and compliance with legal obligations

Legal basis for processing

We process personal data on the following bases:

• Your consent
• Performance of a contract
• Compliance with legal obligations
• Legitimate interests

Sharing and transfers

We may share data with trusted third parties (sub-processors) for service delivery. We ensure all transfers follow appropriate safeguards (e.g., SCC).

Your rights

You have the right to:

• Access your data
• Correct or delete your data
• Object to processing
• Withdraw consent
• Data portability

Data retention

We retain data only for as long as necessary for the purposes outlined or to comply with legal obligations.

Security measures

We use encryption, user-based access controls and third-party authentication to protect personal data.

Cookies and similar technologies

Strictly necessary cookies and storage keep you signed in to the platform and remember your cookie choice. They are always active and need no consent.

Optional analytics cookies and storage are set only after you accept them in the platform’s cookie banner. Legal basis: your consent.

• PostHog — product analytics and session replay, so we can see how the platform is used and fix what breaks. Processor: PostHog, hosted in the EU. Retention: up to 12 months.
• Sentry session replay — records the page during a session so we can reproduce errors. Processor: Sentry, hosted in the EU. Retention: up to 90 days. Error reports without replay are sent regardless of your choice, on the basis of our legitimate interest in keeping the service working.

Contact

If you have questions about this policy or wish to exercise your rights, please contact us: contact@huntadmin.com