Legal
Privacy policy
We collect only what we need to plan your trip, we do not sell it, and you can ask us to delete it.
What we collect
- Trip requests: the details you enter in our trip form (name, email, optional WhatsApp number, dates, group, interests, budget range, notes), the page you first landed on and the website that referred you.
- Messages you send us by email or WhatsApp.
- Basic usage events: when a button such as “Plan your trip” or “WhatsApp” is clicked, we record the event name, the page and the date. We do not record your IP address or set tracking cookies for this.
- Security data: to limit spam we keep a one-way hashed and salted version of the network address that submitted a form, for a short period.
Why
To reply to you, plan and arrange your trip (with your agreement), and understand which pages help travellers so we can improve them. Our legal basis is your consent when you submit the form and, once you book, the performance of our agreement with you.
Who we share it with
When you ask us to arrange a service, we share only what your local guide or operator needs to deliver it, such as names, dates, pick-up location and relevant health or mobility notes. Our website and database run on Cloudflare. We do not sell your data or use it for advertising.
How long we keep it
Trip requests that do not lead to a booking are deleted within 24 months. Booking records are kept as long as needed for accounting and legal obligations.
Your rights
You can ask to see, correct or delete your data, or withdraw consent, at any time by emailing hello@saotometrip.com. You also have the right to complain to your data protection authority.
Analytics
We do not currently use third-party analytics.