Privacy Policy

Effective date: 17 September 2025. This Privacy Policy explains how Smart Tourist Guide (“we”, “us”, “our”) collects, uses, discloses, and protects personal data when you use our website and related services.

1. Who we are

Controller: Smart Tourist Guide

Address: 321 Hughes Ridges, Summerfurt, SW8 4TE, United Kingdom

Phone: +44 1886 399343 • Email: [email protected]

Registration No: 47574920

2. What data we collect

• Contact data: name, email, phone, message content (from the Contact form and “Leave a review” modal).
• Usage and device data: IP address, device/browser type, pages viewed, timestamps, referral URLs, approximate location, and events measured via analytics.
• Cookies and similar technologies: preferences (including your cookie choices saved in localStorage as cookieConsent), session identifiers, and analytics pixels.
• Transaction-related data: if you place orders or purchase services (via our cart or payment partners), we process order details. Payment card data is handled by our payment processor; we do not store full card numbers.
• User submissions: reviews, inquiries, or other content you voluntarily provide.

3. How we use your data and legal bases

• Provide and operate the site and services (contract or legitimate interests).
• Respond to inquiries and support requests (contract/legitimate interests).
• Improve content, usability, and security (legitimate interests).
• Analytics and performance measurement using Google Analytics and Facebook Pixel (consent where required; otherwise legitimate interests).
• Marketing communications with your consent; you can unsubscribe anytime.
• Compliance, prevention of fraud/abuse, and enforcement (legal obligations/legitimate interests).

4. Cookies and tracking

We use cookies, localStorage, and similar technologies to keep preferences, run the site, and analyze traffic. The cookie banner lets you Accept, Decline, or Customize.

Types

• Strictly necessary: security, navigation, and core features (e.g., modal state, consent flag).
• Analytics: Google Analytics (G-XXXXXXX) to understand usage patterns.
• Marketing: Facebook Pixel to measure page views and campaign performance.

You can control cookies via the banner and your browser settings. Declining may reduce certain features.

5. Sharing your data

• Service providers: hosting, analytics (Google), marketing pixels (Meta/Facebook), email and form processing, payment processors.
• Legal and compliance: authorities or third parties when required by law or to protect our rights.
• Business transfers: in a merger, acquisition, or asset sale, data may be transferred with appropriate safeguards.

6. International transfers

Your data may be transferred to countries outside the UK/EEA (e.g., the United States). Where applicable, we rely on appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or vendor certifications.

7. Data retention

• Contact and inquiry data: typically 24 months after last interaction.
• Analytics data: per provider defaults or as configured (usually 14–26 months).
• Order/transaction records: per statutory requirements (typically 6 years in the UK).
• Consent logs: maintained as long as necessary to demonstrate compliance.

8. Your rights

Depending on your location (e.g., UK GDPR/EEA GDPR), you may have the right to:

• Access, rectify, or erase your personal data.
• Restrict or object to processing, including objection to processing based on legitimate interests.
• Data portability.
• Withdraw consent at any time (does not affect prior lawful processing).
• Lodge a complaint with a supervisory authority. In the UK: Information Commissioner’s Office (ICO) – ico.org.uk.

To exercise these rights, contact us at [email protected] or by mail at the address above. We may need to verify your identity.

9. Security

We use administrative, technical, and organizational measures appropriate to the risk, including HTTPS, access controls, and vendor due diligence. No method of transmission or storage is 100% secure.

10. Children’s privacy

Our site is not intended for children under 16. We do not knowingly collect data from children. If you believe a child provided data, contact us to remove it.

11. Third-party links

Our articles may link to third-party websites or services. We are not responsible for their privacy practices. Review their policies before providing data.

12. Contact

Email: [email protected] • Phone: +44 1886 399343 • Address: 321 Hughes Ridges, Summerfurt, SW8 4TE, United Kingdom

13. Changes to this policy

We may update this Privacy Policy from time to time. Updates will appear on this page with a new “Effective date”. Significant changes may be notified via banner or email where appropriate.