Privacy Policy

1. Data Controller

Inworkwetrust Ltd. acts as the data controller for personal data collected through the Platform. For all privacy-related matters, please contact: privacy@bookmypadeltrip.com

2. Personal Data We Collect

We may collect the following categories of personal data:

• Identity data: full name, date of birth
• Contact data: email address, phone number
• Booking data: reservation details, property information, travel dates
• Payment data: processed via secure third-party providers — we do not store full card details
• Technical data: IP address, device type, browser type, operating system
• Usage data: pages visited, search history on the Platform
• Communications: messages exchanged between users and the Platform
• Condition reports: photos uploaded by Hosts as part of the check-in process

3. Purpose of Data Processing

Personal data is processed to:

• Manage and confirm bookings
• Process and remit payments and security deposits
• Verify user identity and prevent fraud
• Manage damage claims and disputes
• Improve platform performance and user experience
• Send transactional communications (booking confirmations, reminders, receipts)
• Send marketing communications (newsletters, promotions) — with your prior consent
• Comply with legal and regulatory obligations

4. Legal Basis for Processing

We process personal data based on:

• Contractual necessity — to fulfill our booking and payment services
• Legitimate business interests — for fraud prevention, security, and platform improvement
• Legal obligations — to comply with applicable laws
• User consent — for marketing communications (withdrawable at any time)

5. Data Sharing

Personal data may be shared with:

• Payment service providers (for secure transaction processing)
• Technical and cloud hosting providers
• Analytics service providers (data is anonymized where possible)
• Government authorities when legally required
• Hosts and Guests — only data necessary to complete a booking

We do not sell, rent, or trade personal data to third parties for commercial purposes.

6. International Data Transfers

Given the international nature of our Platform, data may be processed in countries outside the user's country of residence. Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions).

7. Data Retention

Personal data is retained only as long as necessary, or as required by applicable law:

• Booking data: retained for 5 years for accounting and legal purposes
• Condition report photos: retained for 90 days after check-out
• Account data: retained until account deletion, plus a 30-day grace period
• Marketing consent: until withdrawn

8. User Rights

Under applicable data protection law (including GDPR where applicable), you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to processing based on legitimate interests
• Request restriction of processing
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time (for marketing communications)

To exercise any of these rights, please contact: privacy@bookmypadeltrip.com. We will respond within 30 days.

9. Cookies Policy

Our Platform uses cookies and similar technologies:

• Essential cookies — necessary for the Platform to function
• Analytics cookies — to understand how users interact with the Platform (with your consent)
• Marketing cookies — to deliver relevant advertising (with your consent)

You may manage your cookie preferences at any time via the cookie banner on our website or through your browser settings. Refusing non-essential cookies will not affect your ability to use the Platform.

10. Security Measures

We implement appropriate technical and organizational measures including:

• SSL/TLS encryption for all data in transit
• Secure storage with access controls
• Regular security audits
• Staff training on data protection

In the event of a data breach that poses a high risk to your rights, we will notify you without undue delay.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you by email and/or a prominent notice on the Platform before any material changes take effect.

12. Contact and Complaints

For any privacy-related questions or requests:

• Email: privacy@bookmypadeltrip.com
• Company: Inworkwetrust Ltd.

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority (e.g., CNIL in France, AEPD in Spain, or the Israeli Privacy Protection Authority).