Privacy Policy

1. Information we collect

Depending on how you use our website and services, we may collect:

• Contact details such as your name, email address, phone number and WhatsApp number.
• Booking and payment details.
• Messages you send to our support team.
• Device and browser information.
• Cookie and website-usage data.

Booking information may also reach us from third-party booking platforms.

2. How we use your information

• Processing bookings and providing tours and customer support.
• Sending confirmations and reminders.
• Handling payments and cancellations.
• Improving our services.
• Preventing fraud and meeting our legal obligations.
• Sending marketing messages where this is lawful.

3. WhatsApp, CRM and automation

We use WhatsApp Business, operated by Meta, to stay in touch with customers. Conversations may be stored in our customer-support system, and automated messages may be sent.

4. AI-assisted support

We may use AI tools to help understand enquiries, find information and draft replies. Where needed, information may be sent to an external AI provider. We do not intend to use AI on its own to make decisions that have a significant legal effect on you.

5. Booking, analytics and payments

Bókun and other booking platforms handle reservations and payments. We use Google Analytics 4 and Microsoft Clarity to understand how the website is used. These providers handle information under their own privacy policies.

6. Cookies

We use cookies for functionality, security, analytics and performance. Where the law requires it, we ask for your consent before using non-essential cookies.

7. Legal bases (GDPR)

We process personal information where it is needed to perform a contract, where you have given consent, where we have a legitimate interest, or where we have a legal obligation. You can withdraw your consent at any time.

8. Sharing and transfers

We may share information with booking, payment, support, analytics, technology and AI providers, with our advisers, and with authorities when required by law. Some providers may process data outside the European Economic Area; where GDPR applies, we use safeguards for these transfers.

We do not sell personal information in the ordinary meaning of that term.

9. Retention and security

We keep personal information only as long as reasonably needed for providing services and support, and for legal, accounting, security and dispute purposes. We use technical and organisational measures to protect it.

10. Your privacy rights (GDPR)

Subject to legal conditions, you may have the right to:

• Access your personal information.
• Have it corrected.
• Have it deleted.
• Restrict or object to its processing.
• Receive it in a portable format.
• Withdraw your consent.
• Object to direct marketing.
• Be protected in relation to automated decision-making.

11. California residents

If you live in California, you may have the right to access and correct your personal information, to request its deletion, and to other rights under applicable law.

12. Children’s privacy

If a parent, guardian or authorised person gives us information about a child, we process it only as needed for the booking and to meet our legal obligations.

13. Changes to this policy

We may update this policy when our services, providers, practices or the law change. When we do, we will revise the “Last updated” date.

14. Contact

Questions or requests about your personal information: support@unclesam.tours. You also have the right to complain to your local data-protection supervisory authority.