Privacy & Security

Privacy Policy

Your privacy is our priority. We are fully GDPR compliant and committed to protecting your personal data.

Data Collection

We collect only essential data: name, email, travel preferences, and booking history. No unnecessary personal information is stored.

Data Security

All data is encrypted using AES-256 encryption. We use secure servers and follow industry-standard security protocols.

Your Rights

You have the right to access, modify, or delete your data at any time. Contact us to exercise these rights.

GDPR Compliance

We are fully GDPR compliant. Your data is processed lawfully, fairly, and transparently with your consent.

Data Protection Details

What We Collect

  • Name and contact information
  • Travel preferences and booking history
  • Payment information (processed securely by Stripe)
  • Website usage analytics (anonymized)

How We Use Your Data

  • Process bookings and reservations
  • Send booking confirmations and updates
  • Provide customer support
  • Improve our services (anonymized data only)

Your Rights Under GDPR

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate data
  • Right to Erasure: Delete your personal data
  • Right to Portability: Export your data
  • Right to Object: Opt-out of data processing

Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy. Booking data is retained for 7 years for tax and legal compliance. You can request deletion at any time.

Contact Us

For any privacy-related questions or to exercise your rights, contact us at:
Email: privacy@vaycays.org
Phone: +1 (650) 338 8168

Last updated: 10/17/2025