Privacy Policy

1. Introduction

Nomadica Travel ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

This policy applies to all users of our Service, regardless of location. For users in the European Union, we comply with the General Data Protection Regulation (GDPR).

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when using our Service:

• Account Information: Name, email address, profile picture (via Google OAuth)
• Profile Data: Travel preferences, sustainability settings, interests, language preference
• Travel Content: Itineraries, reviews, photos, and other user-generated content
• Communications: Messages, feedback, and support requests

2.2 Automatically Collected Information

When you use our Service, we automatically collect certain information:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent, click patterns
• Location Data: Approximate location based on IP address (with your consent for precise location)
• Cookies: Session cookies, preference cookies, analytics cookies

2.3 Information from Third Parties

We receive information from:

• Google OAuth: Profile information you authorize Google to share
• Analytics Providers: Aggregated usage statistics and performance data

3. How We Use Your Information

We use your information for the following purposes:

• Provide the Service: Account management, personalized recommendations, content delivery
• Improve the Service: Analyze usage patterns, develop new features, fix bugs
• Communications: Send service updates, respond to inquiries, provide support
• Safety and Security: Prevent fraud, enforce our Terms, protect user safety
• Legal Compliance: Comply with applicable laws and regulations
• Marketing: Send promotional content (with your consent, where required)

Legal Basis for Processing (GDPR)

For users in the EU, we process your data based on:

• Consent: When you explicitly agree to processing
• Contract Performance: To provide the Service you've requested
• Legitimate Interests: To improve and secure our Service
• Legal Obligation: To comply with applicable laws

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• With Your Consent: When you explicitly authorize us to share information
• Service Providers: Third-party vendors who help us operate the Service (hosting, analytics, email)
• Community Features: Information you choose to make public (profile, reviews, photos)
• Legal Requirements: When required by law or to protect rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data Retention

We retain your information for as long as necessary to:

• Provide the Service and fulfill the purposes described in this policy
• Comply with legal obligations (e.g., tax, accounting requirements)
• Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we must retain it for legal reasons.

6. Your Privacy Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Limit how we use your data in certain circumstances
• Data Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time (where processing is based on consent)

To exercise these rights, please contact us at [email protected]. We will respond within 30 days.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Required for the Service to function (e.g., authentication, security)
• Preference Cookies: Remember your settings (e.g., language preference)
• Analytics Cookies: Understand how you use the Service

You can control cookies through your browser settings. Note that disabling certain cookies may affect Service functionality.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Access controls and authentication requirements
• Regular security assessments and updates
• Employee training on data protection

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by relevant data protection authorities
• Other legally approved transfer mechanisms

10. Children's Privacy

Our Service is not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.

11. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending an email notification (for significant changes)

Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

13. Contact Us and Data Protection Officer

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

For EU users, you also have the right to lodge a complaint with your local data protection authority.

14. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how we use it
• Right to delete your personal information (with certain exceptions)
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights

To exercise these rights, contact us at [email protected].