Privacy Policy

What we collect and why

• Contact form: your name, email address and message. We use them only to reply to you.
• Account sign-up: email and password, first and last name, gender, age range, country and income range (optional). An account gives you the free guides and the trip planner, and we look at the demographic fields in aggregate to understand our audience and improve the content. Passwords are handled by Supabase and we never see them.
• Analytics: these run only if you click "Accept" on the cookie banner. Google Analytics 4 tells us which pages people read, and Microsoft Clarity shows how the site is used (clicks, scrolling and session recordings). If you decline, Clarity is not loaded and Google Analytics storage stays off.
• Local preferences: an appLang cookie remembers your language, and a value in your browser stores your cookie-banner choice.

What we do not do

We do not sell your data, share it with advertisers, or use site data for advertising.

Our Facebook and Instagram pages

We publish to our Facebook page and Instagram account, and read and reply to comments on our own posts, through the official Meta API using our own app, HabibiTravelPage. The app does not offer Facebook Login and does not collect any data from your account. Anything you post in a public comment on our posts is governed by Meta's privacy policy.

Who processes data for us

• Supabase: database and sign-in.
• Vercel: hosting. It keeps short-lived technical server logs such as IP addresses.
• Google and Microsoft: analytics, only after you consent.
• Meta: publishing to Facebook and Instagram.
• Travelpayouts and Skyscanner: the flight and hotel search tools. They load from the partner's own site and may use cookies to credit a booking to us. See our affiliate disclosure for details.

How long we keep data

We keep contact messages for as long as we need them to reply, and accounts until you ask us to delete them. Analytics data follows the retention settings of Google Analytics and Microsoft Clarity.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, and withdraw analytics consent at any time by clearing this site's data in your browser and choosing "Decline". You can also complain to the UK Information Commissioner's Office (ICO).

Requesting data deletion

Message us through the contact page or our Facebook page and tell us the email address linked to your data. We delete your account and messages within 30 days and confirm when it is done.

Changes

If we change this policy, we update the date at the top of this page.