Privacy policy

1. Introduction

We are committed to safeguarding the privacy of our website visitors and service users. This policy applies where we are acting as a data controller with respect to your personal data.

In this policy, “we”, “us” and “our” refer to Uncrowds.

2. Who we are

3. How we use your personal data

3.1 Usage data

We may process data about your use of our website, including your IP address, geographical location, browser type, operating system, referral source, page views, and navigation paths. This is processed to analyse and improve our website. The legal basis is our legitimate interests in monitoring and improving our services.

3.2 Inquiry and booking data

When you submit an inquiry or book an experience, we process personal data including your name, email address, phone number, group size, and preferred dates. This is processed to respond to your inquiry, arrange your booking, and deliver the experience. The legal basis is performance of a contract or steps taken at your request prior to entering a contract.

3.3 Transaction data

We process information relating to your bookings and payments, including contact details and booking details, to supply the purchased services and maintain proper records. The legal basis is performance of a contract.

3.4 Correspondence data

We may process data contained in any communication you send us. The legal basis is our legitimate interests in administering our business and communicating with users.

3.5 Legal and compliance processing

We may process your personal data where necessary for compliance with a legal obligation, for the establishment or defence of legal claims, or for obtaining insurance or professional advice.

3.6 WhatsApp communications

Where you have provided your phone number in connection with a booking or inquiry, we may send you transactional WhatsApp messages via the WhatsApp Business API (operated by Meta Platforms, Inc.). These messages include tour reminders, guide contact details, and review requests.

The legal basis is performance of a contract or our legitimate interests in communicating with customers about confirmed bookings.

Meta Platforms processes message data under their own privacy policy: whatsapp.com/legal/privacy-policy

You can opt out of WhatsApp communications at any time by replying STOP to any message or contacting us at hello@uncrowds.com.

4. Sharing your personal data

We do not sell your personal data. We may share it with:

• Service providers: payment processors (Stripe), booking platforms (Bokun), email delivery services, and hosting providers, only to the extent necessary to deliver our services.
• Venue partners: where required to confirm and arrange your booked experience (e.g. name list submission to a venue).
• Professional advisers: insurers, accountants, and legal advisers where necessary.
• Authorities: where required by law.

5. International transfers

Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, including the use of standard contractual clauses approved by the European Commission.

6. Data retention

We retain your personal data only for as long as necessary for the purposes set out in this policy. Booking and transaction records are retained for a minimum of 5 years to comply with French accounting and legal obligations. Inquiry data for inquiries that did not result in a booking is retained for up to 2 years.

7. Your rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data (subject to legal retention obligations)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with the French data protection authority (CNIL) at cnil.fr

To exercise any of these rights, contact us at hello@uncrowds.com.

8. Cookies

We use cookies on our website to operate the site and understand how it is used.

We use cookies for:

• Analytics: Google Analytics (GA4) to understand website usage. Blocked until you consent via our cookie banner.
• Cookie consent: to remember your preferences (CookieYes).
• Booking functionality: to operate the booking widget on our site.

You can manage or withdraw cookie consent at any time via the cookie settings on our website.

9. Third-party services

Our website uses the following third-party services which may process your data under their own privacy policies:

• Google Analytics: policies.google.com/privacy
• Stripe (payments): stripe.com/privacy
• Bokun (booking platform): bokun.io/privacy-policy
• Meta Platforms / WhatsApp Business API: whatsapp.com/legal/privacy-policy

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent update.

11. Contact