Privacy notice
Draft for review: items marked [to complete] need Trust the Locals’ company details and must be checked by a legal adviser before launch.
This notice explains what personal data Trust the Locals collects when you plan and book a journey with us, why, and who we share it with. It applies to this website and to the emails we send about your journey.
Who we are
The data controller is Trust the Locals s.r.l, Via Guicciardini, 15/N – 50125 Firenze (Italia), VAT [to complete: P.IVA]. You can reach us at trustthelocalsrl@pec.it.
Read our published privacy policy on Iubenda and cookie policy. This app-specific draft still requires review and reconciliation with those policies before launch.
What we collect
- Your account: your email address, used to sign you in with a one-time code.
- Your travel brief: dates, destinations, who is travelling (including children’s ages), interests, budget, transport and any notes you write.
- Your request: name, email, optional phone number and message, when you send your journey to our travel designers.
- Bookings: the traveller names and contact details needed by providers when our team arranges a booking. Online card payments and automatic hotel booking are disabled for this release.
Why we use it
- To design your itinerary and price it (performing the service you asked for).
- To answer your request, prepare your proposal and, once you accept, book hotels, experiences and transfers on your behalf.
- To send you the emails about your journey (sign-in codes, proposal, confirmations).
- To keep the service secure and prevent misuse.
Who we share it with
- Hotels, hosts and drivers you book with us, only what they need to serve you.
- Service providers: LiteAPI (hotel availability), Resend (email), Vercel and Supabase (hosting, authentication and database), and the AI services used to process planning notes. [to complete: confirm provider names, processing agreements, legal bases and international transfer safeguards in Iubenda].
We do not sell your data or use it for third-party advertising.
How long we keep it
Journeys you plan stay in your account until you delete them or your account. Booking and accounting records are kept for the period required by Italian law [to complete: retention period].
Your rights
Under the GDPR you can ask to access, correct, delete or export your data, object to or restrict its use, and complain to the Italian data protection authority (Garante per la protezione dei dati personali). Write to trustthelocalsrl@pec.it.
Last updated: [to complete: date]