1. Introduction and Identity of the Data Controller
At Winsome Planet, we are committed to protecting your personal data and your privacy. This policy informs you how we look after your personal data when you visit our website (regardless of where you visit it from) and tells you about your privacy rights and how the law protects you.
The data controller responsible for your personal data is:
- Name: Winsome Planet
- Email: compliance@winsomeplanet.com
- Address: Limerick, Ireland
2. The Data We Collect About You
Personal data means any information about an individual from which that person can be identified. We may collect, use, and store different kinds of personal data about you, which we have grouped together as follows:
- Identity and Contact Data: Includes your email address (collected when you subscribe to our newsletter or contact us).
- Financial and Transaction Data: None. Winsome Planet is currently free to use and takes no payments, so no card or billing details are collected or stored. If paid features are introduced, this policy will name the payment processor before any charge is taken.
- Technical Data: Includes internet protocol (IP) address, browser type and version, time zone setting, and location (collected via cookies).
- Usage Data: Information about how you use our website, products, and services.
3. How and Why We Use Your Data
We will only use your personal data when the law allows us to. Most commonly, we use your data in the following circumstances:
- Consent: When you voluntarily sign up for our newsletter (Legal Basis: Art. 6(1)(a) GDPR).
- Performance of a Contract: To provide the account features you sign up for — saving trips, preferences and itineraries (Legal Basis: Art. 6(1)(b) GDPR).
- Legitimate Interests: To improve our website content and understand our audience (Legal Basis: Art. 6(1)(f) GDPR).
4. Cookies and Tracking Technologies
Our website uses cookies to distinguish you from other users. This helps us provide you with a good experience and allows us to improve our site.
- Strictly Necessary Cookies: Required for the operation of the site.
- Analytical Cookies: Allow us to recognise and count the number of visitors.
- Affiliate Tracking Cookies: Used to identify if you have clicked on a link to one of our carbon-conscious partners so we may receive a commission.
5. Data Sharing and International Transfers
We may share your data with:
- Service Providers: Amazon Web Services (Cognito for sign-in, SES for email, DynamoDB for storage, S3 for media, and Bedrock, which receives the trip description you type in order to generate an itinerary), plus CookieYes for consent and our analytics providers. The full list is on the Licensing & Data Sources page.
- Affiliate Partners: None at present — see our Affiliate Disclosure. No link on this site places a referral cookie on your device.
If we transfer your data outside the European Economic Area (EEA), we ensure a similar degree of protection is afforded to it by ensuring at least one of the specific safeguards approved by the European Commission is implemented.
6. Your Legal Rights
Under the GDPR, you have the following rights:
- Request access to your personal data.
- Request correction of your personal data.
- Request erasure of your personal data ("right to be forgotten").
- Object to processing of your personal data.
- Request restriction of processing.
- Request transfer of your personal data.
- Right to withdraw consent at any time.
To exercise these rights, please contact us at compliance@winsomeplanet.com. You also have the right to lodge a complaint with your local Data Protection Authority.
Compliance Note: This document includes a Legal Basis for Processing section, which is a mandatory requirement under GDPR Articles 6 and 13. The language has been simplified into "Plain English" to ensure that the average user—regardless of legal background—can understand how their data is used, fulfilling the Transparency Principle.