Privacy policy

Who we are

Tourfect (tourfect.ie) is run by [Legal name of the company that runs Tourfect], [Registered address] ([Company registration number, if any]). Tourfect is a platform that lets independent tour guides run their own booking websites and list their tours in the Tourfect marketplace.

Questions about your data: [Privacy contact email].

Two roles

• Tourfect's own data (this site, guide accounts, the newsletter): we decide how it's used, so we are the data controller.
• Booking requests and customer records on a guide's site or tour page: the guide decides how they're used and is the controller. We store and process them on the guide's behalf as their processor. Each guide's site has its own privacy notice.

What we collect and why

• Booking requests (your name, email, optional phone, date, group size and message): passed to the guide who runs the tour so they can reply. Legal basis: taking steps at your request before a contract with the guide.
• Guide accounts (name, email, password as a secure hash, business details and content): to provide the service. Legal basis: our contract with the guide.
• Newsletter (your email): to send occasional Tourfect news. Legal basis: your consent, which you can withdraw at any time by asking us to remove you.
• Technical data (IP address, browser, pages requested, in server logs; error reports without personal details): to keep the service secure and working. Legal basis: our legitimate interests.
• Analytics (only if you accept analytics cookies): which pages are visited, to improve the site. Legal basis: your consent.

Cookies

We use a session cookie to keep guides signed in and a cookie to remember your cookie choice; these are strictly necessary. Analytics cookies (Google Analytics) are only set if you accept them in the cookie banner. You can change your choice at any time with "Cookie settings" at the bottom of the page.

Who we share it with

• The guide who runs the tour you ask about.
• Service providers who help us run Tourfect: hosting (DigitalOcean, via Hatchbox), email delivery (e.g. Postmark), error monitoring (Sentry) and, with your consent, Google Analytics. They may process data outside the EEA under appropriate safeguards (such as the EU Standard Contractual Clauses).
• Authorities, where the law requires it.

We don't sell personal data.

How long we keep it

Booking requests and customer records stay in the guide's account until the guide deletes them or closes their account. Guide account data is kept while the account is open and deleted after it's closed, except where we must keep records by law. Newsletter emails are kept until you unsubscribe. Server logs are kept for a short period for security.

Your rights

You can ask for access to your data, for it to be corrected or deleted, to restrict or object to its use, and to receive it in a portable format. For data a guide holds (such as a booking request), contact the guide or us and we'll pass it on. You can also complain to the Data Protection Commission (dataprotection.ie).