Your privacy is important to us. We value your trust and are committed to protecting and safeguarding any personal information you give us. This document, which we update from time to time, describes how we use and process your personal data and how we use cookies. It also tells you how you can contact us if you have questions about your personal information.

Data Controller:

Urbanature Travel
Email: contact@urbanaturetravel.com

What personal data do we collect?

We collect only the data necessary to provide our services. This includes:

  • Data you provide directly (when booking a tour, enquiring, or signing up):
    Full name
    Email address
    Phone number
    Address (for invoicing or travel documents if required)
    Travel preferences, special requests, dietary needs, or accessibility requirements
    Payment information (handled securely via third-party processors – we do not store full card details)
    Names and details of fellow travelers in your group (if applicable)
  • Data collected automatically when you visit urbanaturetravel.com:
    IP address
    Browser type and version
    Operating system
    Pages visited, time spent, and referral sources
    Device information (mobile/desktop)
  • Other sources:
    If you contact us via email, WhatsApp, Meetup, social media, or forms, we may receive the information you share.
  • We do not collect sensitive data (e.g., health data beyond voluntary accessibility requests) unless you explicitly provide it for your tour.

Why do we collect and process your personal data? (Purposes and legal basis)

We process your data on the following legal bases under GDPR:

Purpose: Process and manage tour bookings
Legal Basis: Performance of a contract (Art. 6(1)(b) GDPR)
Examples: Confirm reservation, send booking details, communicate about the trip

Purpose: Provide customer support & updates
Legal Basis: Contract + legitimate interests (Art. 6(1)(f))
Examples: Answer enquiries, send reminders, handle changes/cancellations

Purpose: Send essential trip communications
Legal Basis: Contract
Examples: Itinerary updates, guide contacts, safety info

Purpose: Marketing & newsletters (e.g., new tours, tips)
Legal Basis: Consent (Art. 6(1)(a))
Examples: You can unsubscribe anytime via link or by contacting us

Purpose: Improve website & services
Legal Basis: Legitimate interests
Examples: Analytics to understand usage and enhance user experience

Purpose: Prevent fraud & ensure security
Legal Basis: Legitimate interests + legal obligation
Examples: Basic fraud checks during payments

Purpose: Comply with legal obligations
Legal Basis: Legal obligation (Art. 6(1)(c))
Examples: Tax/invoicing records, authority requests

How do we share your personal data?

We share data only when necessary and with appropriate safeguards:

Tour-related partners: Local guides, transport providers (e.g., train/bus companies), or activity partners — only the minimum data needed (name, contact, special requests).
Payment processors: We use WooCommerce (integrated with WordPress) and Revolut (or similar) for secure payments. They process payment data as independent controllers/processors under their own privacy policies (see Revolut’s privacy policy for details). We do not store full payment card details.
Service providers (processors): Hosting provider, email service (e.g., for confirmations/newsletters), analytics tools (e.g., Google Analytics with IP anonymization where possible) — all under GDPR-compliant data processing agreements.
Legal authorities: If required by law (e.g., tax authorities or law enforcement).

We do not sell your data or share it for third-party marketing without your explicit consent.

Cookies and similar technologies

Our website uses cookies and similar technologies:

Essential cookies: For site functionality, cart/booking process (no consent required).
Analytics cookies: To understand site usage (e.g., anonymized Google Analytics).
Marketing cookies: Only with your consent (e.g., for retargeting or embedded social features).

We use a cookie consent banner to obtain your active consent before non-essential cookies are placed. You can manage preferences anytime.

Data retention

We keep your data only as long as necessary:

  • Booking data: Up to 10 years after the trip (for tax/legal reasons).
  • Marketing data: Until you unsubscribe/withdraw consent.
  • Analytics data: Usually 14–26 months (anonymized).

After that, data is deleted or anonymized.

Your rights under GDPR:

  • Access your data
    Rectify inaccurate data
  • Erase your data (subject to legal retention obligations)
  • Restrict processing
  • Object to processing (e.g., marketing)
  • Data portability
  • Withdraw consent (where consent is the basis)

To exercise any right, email us at contact@urbanaturetravel.com with clear details. We will respond within one month (free of charge in most cases).

Security of your data

  • We implement reasonable technical and organizational measures to protect your data, including:
    Secure connections (HTTPS/SSL).
  • Limited access to authorized personnel only.
  • Data processing agreements with third parties.

However, no method of transmission over the internet is 100% secure.

International transfers: Most processing occurs within the EU/EEA. If any transfer occurs outside (e.g., certain analytics providers), we use appropriate safeguards such as Standard Contractual Clauses.

Changes to this policy

We may update this policy from time to time. Changes will be posted here with the updated date. We encourage you to review it periodically.

Last updated: January 02, 2026

Contact us

If you have questions about this Privacy Policy or our data practices:
Email: contact@urbanaturetravel.com