At Tourlly, we respect your privacy and are committed to protecting your personal data. This Data Policy outlines how we collect, use, share, and protect the information you provide to us when using our services, including generating tailored itineraries. We also explain your rights regarding your personal data in accordance with applicable data protection regulations, including the General Data Protection Regulation (GDPR).

1. Data Collection and Use

When you use our services to generate a tailored itinerary, we collect and process the information you provide. This data may include:

• Non-Personally Identifying Information: You can choose not to provide personal information, such as your name. However, to send itineraries via email, we will require an email address.

• Session Data: We store the data you provide during your session for the sole purpose of generating the itinerary. You have the option to clear the session at any time, which will immediately remove all associated data.

We only use the information provided to:

• Generate your itinerary based on your inputs.

• Send itineraries via email when requested.

2. Email and Communication

While we do not require personally identifying information, your email address is necessary if you wish to send an itinerary to yourself or others. We will use your email address only for:

• Delivering the requested itinerary.

• Communicating with you if there is an issue or clarification needed regarding your request.

We do not use your email address for marketing purposes unless you have explicitly opted into marketing communications.

3. Third-Party Service Providers

To provide our services, we may share data with trusted third-party service providers. These include but are not limited to:

• Google Maps API: Used for mapping locations in your itinerary.

• Payment Processors: Used to facilitate payment transactions for premium itineraries.

These service providers may have access to your data but are strictly limited to using it only for the purpose of enabling the functionality of our service. All third-party providers used by Tourlly are required to comply with applicable data protection laws, including the GDPR, to ensure the protection of your personal data.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Your data is stored securely, and we take all reasonable precautions to safeguard it.

5. User Rights and Control

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: You may request a copy of the data we hold about you at any time.

• Right to Rectification: You may request correction of inaccurate or incomplete data.

• Right to Erasure: You can request the deletion of your personal data (the "right to be forgotten"). However, this may limit our ability to provide certain services, such as itinerary delivery via email.

• Right to Restrict Processing: You can request restrictions on the processing of your personal data.

• Right to Data Portability: You can request a copy of your data in a machine-readable format.

• Right to Object: You can object to the processing of your personal data at any time.

If you wish to exercise any of these rights, please contact us at [support email]. We will respond to your request in accordance with GDPR regulations.

6. Data Retention

We retain personal data only as long as it is necessary to fulfill the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. You can delete your session data at any time, which will remove the data associated with your itinerary request.

7. International Data Transfers

Where necessary, your data may be transferred outside of the European Economic Area (EEA) to service providers located in countries that may not have the same data protection laws as the EEA. When this occurs, we ensure that appropriate safeguards are in place, including the use of Standard Contractual Clauses (SCCs) approved by the European Commission.

8. Changes to This Data Policy

We may update this Data Policy from time to time to reflect changes in our practices or legal obligations. Any updates will be posted on our website, and the updated policy will take effect immediately upon posting.

9. Contact Us

If you have any questions or concerns about this Data Policy or your personal data, please contact our support team at support [AT] tourlly.com. We are here to assist with any inquiries you may have regarding your privacy and data protection.