Privacy Statement

1. Who We Are

Partyin.co is a group travel company specialising in party weekends and bachelor/bachelorette trips across Europe. We are the data controller responsible for the personal data you share with us.

2. What Data We Collect

We collect the following personal data when you use our website or contact us:

• Name — to address you personally and prepare your trip documents.
• Email address — to send you quotes, booking confirmations, and trip information.
• Phone / WhatsApp number — to coordinate your trip and answer questions quickly.
• Group size & travel dates — to build a personalised itinerary and check availability.
• Budget preference — to recommend packages that match your group's expectations.
• Payment data — collected and processed securely by Stripe — we never store card details ourselves.
• IP address & browser data — collected automatically via cookies and analytics tools.

3. How We Use Your Data

We use your personal data only for the purposes listed below:

• To plan and organise your group trip (fulfillment of contract).
• To send you a personalised quote or itinerary (legitimate interest / pre-contractual steps).
• To process your payment securely via Stripe (fulfillment of contract).
• To send booking confirmations and trip updates by email (fulfillment of contract).
• To send occasional newsletters or offers — only if you have given explicit consent.
• To improve our website through anonymised analytics data (legitimate interest).

We rely on the following legal bases under GDPR: contract performance, legitimate interest, and consent (for marketing communications only).

4. Who We Share Your Data With

We do not sell your personal data. We share it only with trusted service providers who help us deliver our service:

• Stripe — Payment processing. Stripe is PCI DSS Level 1 certified. See stripe.com/privacy.
• Brevo (Sendinblue) — Email delivery for booking confirmations and notifications.
• Google Analytics — Anonymised website usage analytics to improve our service.
• Local suppliers & venues — Shared minimally (your name and group size) solely to fulfil your booking.

All processors are bound by data processing agreements and handle your data in compliance with GDPR.

5. How Long We Keep Your Data

• Booking & payment records — 7 years (Dutch tax law obligation).
• Lead & quote enquiries (no booking made) — 12 months, then deleted.
• Marketing consent — Until you withdraw consent.
• Analytics data — 14 months (Google Analytics default), anonymised.

6. Your Rights

Under the GDPR you have the following rights:

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (AP).

7. Cookies

We use cookies to make our website work and to understand how visitors use it:

• Necessary cookies — Required for the website to function (session, security). Always active.
• Analytics cookies — Google Analytics — tracks page views and behaviour in anonymised form. Only set after you accept.
• Marketing cookies — Meta Pixel — used to measure ad performance. Only set after you accept.

You can change your cookie preferences at any time using the cookie banner. Most browsers also allow you to block or delete cookies in their settings.

8. Security

We take appropriate technical and organisational measures to protect your personal data against loss, unauthorised access, and misuse. All data is transmitted over HTTPS. Payments are handled exclusively by Stripe and never stored on our servers. Access to personal data within our team is restricted to those who need it to deliver your trip.

9. Changes to This Policy

We may update this privacy statement from time to time. The "last updated" date at the top of this page reflects the most recent version. For significant changes, we will notify you by email if we hold your contact details.