PRIVACY POLICY.

DunWivBooks is a trading name of Pragticality Ltd, a company registered in England and Wales (company no. 17207406). Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. For data-protection purposes, Pragticality Ltd is the data controller for personal data collected through DunWivBooks. We are registered with the Information Commissioner’s Office (ICO registration no. ZC134066).

Contact: hello@dunwivbooks.com

Account information

When you create an account, we collect:

• Name and email address (via Clerk authentication)
• Password (stored securely and encrypted by Clerk — we never see it)

Profile information

Optional fields you can provide to make trips more relevant:

• Home city and country
• Nationality and passport country
• Preferred currency
• Preferred airports
• Railcard ownership / student status
• Passport and visa expiry dates (if you save reminders)
• Working-holiday visa flag (if relevant)
• Dietary requirements
• Notification preferences

Planning data

When you use the planner:

• Trip details you enter (destination, dates, group size, trip type, budget)
• Generated itineraries saved to your account
• Pre-departure checklist progress

Usage data

We use Vercel Analytics to understand how visitors use the site. Vercel Analytics does not use cookies and does not collect personally identifying data. It records page views and aggregated traffic patterns only. No data is sold or shared with advertisers.

• To provide and personalise the DunWivBooks service
• To save your itineraries and planning preferences
• To send reminders you have opted into (passport expiry, trip countdown)
• To send marketing emails where you have given explicit consent
• To improve the service based on aggregated, anonymous usage data
• To comply with our legal obligations

• Contract performance — to provide the service you have signed up for
• Legitimate interests — to improve our service and prevent fraud
• Consent — for marketing emails and any optional cookies
• Legal obligation — where required by law

We do not sell your personal data. We share data only with trusted service providers who process it on our behalf:

• Clerk — authentication and user account management (Privacy Policy)
• Supabase — secure database storage (Privacy Policy)
• Vercel — website hosting and analytics (Privacy Policy)
• Anthropic — AI inference for the planner / help endpoints (Privacy Policy)
• Google (Places API) — to verify the venues we recommend are real and trading (Privacy Policy)
• Resend — transactional and reminder email delivery

We may also share data where required by law or to protect the rights and safety of DunWivBooks or others.

DunWivBooks contains affiliate links to third-party services including Hostelworld, Booking.com, FlixBus, Trainline, Interrail/Eurail, Skyscanner, EasyJet, GetYourGuide, Viator, Fever, Wise, Revolut, SafetyWing, World Nomads, InsureandGo, Airalo, Holafly, and AirHelp. When you click these links you may be tracked by those third parties under their own privacy policies. We earn a small commission on qualifying purchases at no extra cost to you. We only recommend services we believe are genuinely useful.

• Account data — retained for as long as your account is active, plus 30 days after deletion
• Itinerary data — retained until you delete it or close your account
• Analytics data — aggregated and anonymous, retained indefinitely
• Email records — retained for up to 2 years

Under UK GDPR, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data (“right to be forgotten”)
• Restriction — limit how we process your data
• Portability — receive your data in a portable format
• Object — object to processing based on legitimate interests
• Withdraw consent — at any time for consent-based processing

To exercise any of these rights, email hello@dunwivbooks.com. We’ll respond within 30 days.

See our Cookie Policy for full details of the cookies and storage we use.

We take appropriate technical and organisational measures to protect your data. All data is encrypted in transit (HTTPS) and at rest. Authentication is handled by Clerk, which holds ISO 27001 certification. We regularly review our security practices.

Some service providers operate outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.

We may update this Privacy Policy from time to time. We will notify members of material changes by email. The date at the top of this page shows when it was last updated.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.