Privacy Policy

1. Information We Collect

Personal Information

• Name and contact information (email, phone number)
• Account credentials
• Payment information (processed securely through third-party providers)
• Profile information (bio, photo, professional details)
• Travel preferences and booking history

Automatically Collected Information

• IP address and device information
• Browser type and operating system
• Usage data and analytics
• Cookies and similar tracking technologies

2. Social Media Integration & Marketing

Meta Platform API Data Collection

When you connect your Instagram or Facebook account, we may collect:

• Your public profile information (name, profile picture, username)
• Photos and videos you share related to tours
• Engagement metrics (likes, comments, shares)
• Instagram Business Account insights (if applicable)
• Location data from posts (when available)

How We Use Social Media Data

• Display your tour photos on our platform (with your permission)
• Create social proof through user-generated content
• Improve tour recommendations based on your interests
• Enable social sharing of tour experiences
• Send marketing communications about relevant tours (opt-in required)

Social Media Cookies

We use social media cookies to:

• Enable social login functionality
• Track conversions from social media campaigns
• Display relevant advertisements on social platforms
• Analyze social media traffic and engagement

Opt-Out Options

3. How We Use Your Information

We use your information to:

• Provide and maintain our services
• Process bookings and payments
• Communicate with you about tours and services
• Send marketing communications (with your consent)
• Improve our services and user experience
• Comply with legal obligations
• Detect and prevent fraud

4. Data Sharing and Disclosure

We may share your information with:

• Tour Organizers: To facilitate your bookings
• Service Providers: Payment processors, email services, analytics
• Legal Requirements: When required by law or to protect rights
• Business Transfers: In case of merger or acquisition

We do NOT sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• SSL/TLS encryption for data transmission
• Secure data storage with encryption at rest
• Regular security audits and updates
• Limited access to personal information
• PCI DSS compliance for payment processing

6. Data Breach Notification

Notification Timeline

If a data breach occurs that may affect your personal information, we commit to:

• Within 72 hours: Notify relevant supervisory authorities as required by GDPR
• Without undue delay: Notify affected users when the breach is likely to result in high risk to your rights and freedoms
• Immediate action: Take steps to minimize harm and secure affected systems

What We Will Tell You

Our breach notification will include:

• Description of the nature of the breach
• Categories and approximate number of affected individuals
• Categories of personal data involved
• Likely consequences of the breach
• Measures taken or proposed to address the breach
• Contact details of our Data Protection Officer
• Recommendations for protecting yourself

Our Incident Response Procedures

1. Detection & Assessment: Immediate investigation upon discovery
2. Containment: Isolate affected systems to prevent further damage
3. Evaluation: Assess the scope and impact of the breach
4. Notification: Alert authorities and affected users as required
5. Remediation: Fix vulnerabilities and strengthen security
6. Documentation: Maintain detailed records of the incident
7. Review: Conduct post-incident analysis to prevent recurrence

How We Notify You

We will notify you through one or more of the following methods:

• Email to your registered email address
• Prominent notice on our website
• In-app notification when you next log in
• Direct communication for high-risk breaches

Supervisory Authority Contact

7. Your Rights

Under GDPR (EU Users)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Restriction: Request limited processing

Under CCPA (California Residents)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination

To exercise these rights, contact us at privacy@fuchstravels.com

8. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Maintain your session and preferences
• Analyze site usage and performance
• Provide personalized content
• Support marketing efforts
• Enable social media integration (Facebook, Instagram)
• Track conversions from social media campaigns

You can control cookies through your browser settings or by managing your cookie preferences below. Note that disabling cookies may affect site functionality.

9. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" above.

11. Contact Us