Privacy Policy
How we protect and handle your personal information
Last Updated: September 25, 2025
1. Introduction
HygGeo ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our sustainable travel platform.
2. Information We Collect
2.1 Information You Provide Directly
- Account Information: Username, email address, first and last name
- Profile Information: Bio, location, avatar/profile picture, sustainability preferences
- Travel Survey Data: Travel preferences, sustainability goals, budget ranges, travel styles
- Trip Information: Travel plans, experiences you're interested in, trip reviews
- Communications: Messages, support requests, feedback you send us
2.2 Information Collected Automatically
- Usage Data: Pages visited, experiences viewed, search queries, click patterns
- Device Information: IP address, browser type, operating system, device identifiers
- Cookies and Tracking: Session cookies, preference settings, analytics data
- Location Data: General location based on IP address (not precise GPS location)
3. How We Use Your Information
3.1 Primary Uses
- Provide and maintain our travel recommendation service
- Personalize travel recommendations based on your preferences
- Enable communication between travel community members
- Process and respond to your requests and inquiries
- Send important account and service-related notifications
3.2 Improvement and Analytics
- Analyze usage patterns to improve our platform
- Develop new features and services
- Monitor and prevent fraud, abuse, or illegal activities
- Ensure the security and integrity of our services
3.3 Legal Basis (GDPR)
Under GDPR, we process your data based on:
- Consent: When you voluntarily provide information or opt-in to communications
- Contract: To provide the services you've requested
- Legitimate Interest: To improve our services and prevent fraud
- Legal Obligation: To comply with applicable laws and regulations
4. Information Sharing and Disclosure
4.1 Limited Sharing Situations
- Service Providers: Trusted partners who help us operate our platform (hosting, analytics, email services)
- Legal Requirements: When required by law or to protect our rights and safety
- Business Transfers: In the event of a merger, acquisition, or sale of assets
- Public Information: Profile information you choose to make public
4.2 Affiliate Partners
When you click on affiliate links to book experiences, you may be redirected to partner websites. These partners have their own privacy policies, and we encourage you to review them.
5. Data Security
We implement industry-standard security measures to protect your information:
- Encryption: All data transmission is encrypted using SSL/TLS
- Secure Storage: Data is stored on secure servers with access controls
- Password Protection: Your passwords are hashed and never stored in plain text
- Regular Updates: We regularly update our security measures and software
- Access Controls: Only authorized personnel have access to personal data
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
6. Your Rights and Choices
6.1 GDPR Rights (EU Users)
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Receive your data in a portable format
- Restriction: Limit how we process your data
- Objection: Object to certain types of processing
- Withdraw Consent: Withdraw consent for data processing
6.2 CCPA Rights (California Users)
- Know: What personal information we collect and how it's used
- Delete: Request deletion of your personal information
- Opt-Out: Opt-out of the sale of personal information (we don't sell data)
- Non-Discrimination: Equal service regardless of privacy choices
6.3 How to Exercise Your Rights
To exercise any of these rights, please contact us at:
Email: [email protected]
Subject Line: "Privacy Rights Request"
We will respond to your request within 30 days.
7. Cookies and Tracking Technologies
7.1 Types of Cookies We Use
- Essential Cookies: Required for basic site functionality
- Preference Cookies: Remember your settings and choices
- Analytics Cookies: Help us understand how you use our site
- Security Cookies: Protect against fraud and abuse
7.2 Managing Cookies
You can control cookies through your browser settings. Note that disabling certain cookies may affect site functionality.
8. Data Retention
- Account Data: Retained while your account is active
- Analytics Data: Retained for 2 years for improvement purposes
- Support Communications: Retained for 3 years
- Legal Requirements: Some data may be retained longer if required by law
When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure adequate protection through:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions by relevant authorities
- Other appropriate safeguards as required by law
10. Children's Privacy
11. Updates to This Policy
We may update this Privacy Policy from time to time. When we do:
- We will post the updated policy on this page
- We will update the "Last Updated" date
- For significant changes, we will notify you via email or prominent notice
- Your continued use of our service constitutes acceptance of the updated policy
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
EU Representative
For EU users, you may also contact our European representative for data protection matters at [email protected]