Privacy Policy

Xavier Alvarez Quintana, trading as Planora, NIF 41016429T, at C/ Mímica, 9, 08035, Barcelona, España, is responsible for the website's customer and marketing records. Contact planoratrips@gmail.com. The business is established in Spain; the GDPR and applicable Spanish data-protection rules apply. Dodo Payments separately controls payment information on its hosted checkout.

• Purchases and custom planning: name, email, optional contact information, chosen product, price, payment references, terms acceptance and trip briefing are used to provide the contracted service. Accounting records are also kept to meet legal obligations. Card numbers and payment credentials are not collected by this website.
• Free guide: email and chosen language are used to provide the guide you request. Requesting it does not subscribe you to advertising. Optional marketing consent is a separate, unchecked choice, with its date recorded.
• Newsletter: email, language, source and subscription date are processed with your consent for Indonesia travel updates and product news. Each email includes a withdrawal or data-management link.
• Contact: your message and contact details are used to answer you and send the confirmation and free guide, not to enrol you in marketing.
• Security and reliability: our hosting providers process technical requests. Planora stores a keyed hash of request identity for shared rate limits, never raw IP or email in the rate-limit table. Helpful votes use a pseudonymous hash and a local device preference. Sentry receives filtered error reports; approximate country or city information may be derived by the provider. These controls serve our legitimate interest in maintaining a secure, reliable website.
• Optional statistics: only after analytics consent, Vercel Web Analytics and Speed Insights measure public-page visits and performance. Our own performance records contain a random per-document metric ID, metric name and value, a public path and receipt time, without email, IP, user ID, query string or payment token. No advertising profiles or marketing pixels are used.

We use the following providers for the functions described. We do not sell personal data.

• Supabase: database, administrator authentication and storage. The current database region is Australia. Paid files are private; website images are public.
• Dodo Payments: merchant of record, hosted payment processing, transaction taxes, fiscal invoices, refunds and disputes.
• Google Gmail: transactional and business emails from planoratrips@gmail.com.
• Vercel: hosting, server execution, technical logs and consent-based visit/performance statistics.
• Sentry: error diagnostics in its European region, without session replay. Email, cookies, request bodies, query values and private keys are filtered from reports.
• Have I Been Pwned: administrator password-safety checks send only the first five characters of a password hash, not the password, account email or full hash.
• Trustpilot: the review link opens their service when you choose it. The original review widget connects your browser to Trustpilot only after you select “Show Trustpilot widget”; it does not load automatically. Trustpilot then receives connection data such as your IP address and browser information. You can hide the embedded content; reloading resets the page-only activation.
• Open-Meteo: our server obtains public weather information; your browser does not load their tracking scripts.

Some providers process data outside the EEA. Their applicable data-processing terms describe transfer mechanisms, such as standard contractual clauses or applicable adequacy decisions. Ask us for information about the safeguards relevant to your request; a European monitoring region does not mean every supplier processes all data exclusively in Europe.

• Orders and fiscal records: kept for applicable accounting and tax retention periods and any justified claim-related extension, with access restricted to administration. Deleting marketing data does not delete a paid order or change its payment.
• Active newsletter subscriptions: until you withdraw consent. Withdrawal disables newsletter and free-guide marketing consent; the inactive newsletter record is removed after 24 months unless you request earlier deletion.
• Free-guide requests, contact messages and helpful-vote hashes: removed after 24 months, or earlier when an applicable deletion request is verified.
• Email delivery queue: sent bodies and attachments are removed after 30 days. Pending and failed deliveries remain available for retries and support; marketing deletion also removes associated queued messages. Emails already delivered cannot be recalled and the sender's mailbox has its own retention.
• Rate-limit records: the database cleanup removes records older than one day, every 30 minutes. These keyed hashes are pseudonymous, not described as impossible to associate under all circumstances.
• Performance records: removed after 30 days. Sentry event retention follows the project's configured retention; it is not an indefinite archive.

You may request access, correction, deletion, restriction or portability where applicable, object to eligible processing, and withdraw consent without affecting previous lawful processing. Use our data-management portal for verified marketing withdrawal or deletion, or contact planoratrips@gmail.com. You may also complain to the Spanish Data Protection Agency or another competent authority.

We normally answer within one month, subject to lawful extensions. Accounting information that must be retained remains restricted. Processor backups and technical logs follow their retention cycles; deletion from the live marketing database is not a claim that every historical backup or delivered email disappears immediately. We do not knowingly target children under 16.

We use HTTPS, row-level database access controls, private paid-file storage and server-verified administrator sessions. Form protection includes Vercel BotID Basic to limit automated abuse. Optional statistics stay off until you consent and can be disabled in cookie preferences. Necessary operational error monitoring is separate from optional analytics.

The development and maintenance of this website have received assistance from artificial intelligence. Planora does not provide a customer-facing AI assistant, and the production application does not send customer records to an AI service merely because AI assisted its development.

Where a personal-data breach requires notification, we notify the competent authority within the applicable statutory deadline and affected individuals without undue delay when the relevant risk threshold is met.

We update this policy when actual processing changes. Material changes to optional statistics require a renewed choice; continued browsing alone is not consent to new optional processing.