Privacy Policy

Who We Are

Éclaterra is a private travel company specializing in bespoke ultra-luxury journeys. This policy explains how we collect, use, and protect your personal data when you visit our website or engage with our services.

Contact: world@eclaterra.co

What Data We Collect

Information you provide directly:

• •Name, email address, phone number, and messaging handles (via contact or inquiry forms)
• •Travel preferences, dates, destinations, and group details (via project requests)
• •Payment and billing information (processed securely through third-party providers)
• •Any additional details you share in correspondence with our team

Information collected automatically:

• •IP address, browser type, device, and operating system
• •Pages visited, session duration, referral source
• •Interaction data via cookies and analytics tools (see our Cookie Policy for details)

How We Use Your Data

We use your personal data to:

• •Respond to your inquiries and process travel requests
• •Design, coordinate, and deliver your journey
• •Communicate with you regarding your project, logistics, and updates
• •Improve our website, services, and client experience
• •Send relevant updates or offers, only with your explicit consent
• •Comply with legal and regulatory obligations

We do not sell your personal data to third parties.

Legal Basis for Processing

Under GDPR, we process your data based on:

• •Consent — when you submit an inquiry, subscribe to communications, or accept cookies
• •Contractual necessity — when processing is required to fulfill a travel project you have requested
• •Legitimate interest — when we analyze website usage to improve our services, provided this does not override your rights

Who We Share Data With

We share your data only when necessary to deliver our services:

• •Travel partners — hotels, lodges, charter operators, and local providers involved in your journey, limited to the information required to fulfill your booking
• •Payment processors — to securely handle transactions
• •Analytics and marketing platforms — Google Analytics, Hotjar, Meta (Facebook, Pixel), and our CRM platform, for website analysis and communication purposes
• •Legal or regulatory authorities — only when required by law

All third-party partners are bound by their own privacy policies and applicable data protection regulations.

International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including by third-party service providers. In such cases, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

Data Retention

We retain your personal data only for as long as necessary:

• •Inquiry data — up to 24 months after your last communication, unless a project is confirmed
• •Client project data — for the duration of the project and up to 36 months after completion, for follow-up and quality assurance
• •Financial records — as required by applicable tax and accounting regulations
• •Analytics data — as specified in our Cookie Policy

You may request deletion of your data at any time (see Your Rights below).

Your Rights

Under GDPR, you have the right to:

• •Access your personal data and obtain a copy
• •Correct inaccurate or incomplete data
• •Delete your data ("right to be forgotten")
• •Restrict processing in certain circumstances
• •Object to processing based on legitimate interest
• •Data portability — receive your data in a structured, machine-readable format
• •Withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at world@eclaterra.co. We will respond within 30 days.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. These include encrypted communications, secure hosting, access controls, and regular review of our data handling practices.

Children

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors.

Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

Updates

We may update this policy from time to time. Changes will be posted on this page with a revised date. We encourage you to review this policy periodically.

Contact

For any questions regarding this policy or your personal data:

Éclaterra — Email: world@eclaterra.co
WhatsApp / Telegram: +48 459 567 400