Privacy Policy

Last updated: September 1, 2026

1. Introduction

Welcome to AllTrips. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website, in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is AllTrips. If you have any questions about this privacy policy or our data practices, please contact us at the details provided at the end of this policy.

3. What Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide

  • Account information (email address, username, password) when you create an account
  • Profile information (display name, avatar, travel preferences)
  • User-generated content (itinerary notes, check-ins, reviews)
  • Payment information (processed securely through third-party payment processors)
  • Communication data when you contact us for support

3.2 Information Collected Automatically

  • Usage data (pages visited, time spent on pages, navigation patterns)
  • Device information (browser type, operating system, device type)
  • Location data (if you enable location services)
  • IP address and approximate geographic location
  • Cookies and similar tracking technologies (see Section 4)

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small text files stored on your device that help us understand how you use our site.

4.1 Types of Cookies We Use

  • Essential Cookies: Required for the website to function properly (authentication, security)
  • Analytics Cookies: Help us understand how visitors interact with our website using Google Analytics
  • Preference Cookies: Remember your settings and preferences

4.2 Managing Cookies

You can control and manage cookies through our cookie consent banner and your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

5. How We Use Your Data

We use your personal data for the following purposes:

  • To provide and maintain our services
  • To authenticate your account and manage your access
  • To process payments and transactions
  • To personalize your experience and provide relevant content
  • To send you important updates about our services
  • To analyze website usage and improve our services
  • To detect and prevent fraud and security issues
  • To comply with legal obligations

6. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

  • Consent: When you have given explicit consent (e.g., analytics cookies)
  • Contract: To fulfill our contractual obligations when you use our services
  • Legitimate Interests: For our legitimate business interests (e.g., improving services, security)
  • Legal Obligation: To comply with legal requirements

7. Data Sharing and Third Parties

We may share your personal data with the following third parties:

  • Google Analytics: For website analytics (subject to your consent)
  • Supabase: Our cloud infrastructure and database provider
  • Payment Processors: For secure payment processing
  • Service Providers: Who assist us in operating our website and services

We do not sell your personal data to third parties. All third-party service providers are required to maintain the confidentiality and security of your personal data.

8. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place to protect your data, such as Standard Contractual Clauses approved by the European Commission.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. When data is no longer needed, we securely delete or anonymize it. Account data is retained while your account is active and for a reasonable period afterward to comply with legal obligations.

10. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to certain types of processing
  • Right to Withdraw Consent: Withdraw consent at any time where we rely on consent
  • Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise any of these rights, please contact us using the information provided below.

11. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

12. Children's Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately so we can take appropriate action.

13. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this privacy policy, wish to exercise your data protection rights, or have any concerns about how we handle your personal data, please contact us:

Email: contact@alltrips.net
Website: https://alltrips.net

We will respond to your request within 30 days as required by GDPR.