1. Who We Are

DayTripReady is a festival directory platform that allows users to search for festivals, save them to wishlists, leave reviews, and receive updates. This Privacy Policy applies to all users of our website and services.

2. Personal Data We Collect

We may collect the following types of personal data when you use our website:

• Account Information: Name, email address, and password
• Technical Information: IP address, browser type, device data
• Usage Data: Search history, saved festivals, page views, and clicks
• User Content: Reviews, comments, and wishlist entries
• Newsletter Data: Subscription preferences and interaction history

3. How We Use Your Data

We process your personal data for the following purposes:

• To create and manage user accounts
• To allow you to save and revisit festivals
• To send newsletters and promotional emails (with your consent)
• To understand user behavior and improve our services
• To moderate reviews and prevent abuse or spam
• To communicate with you about your account or support requests

4. Legal Bases for Processing

We process your personal data under the following legal bases:

• Consent: For sending newsletters and promotional content
• Contractual Necessity: For account management and service delivery
• Legitimate Interests: To improve our services and maintain website security
• Legal Obligations: Where required by law

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and understand how our website is used.

• A cookie banner is shown when you visit, giving you the option to accept non-essential cookies (e.g., analytics).
• We do not use a consent management platform (CMP) at this time.
• Only essential cookies are placed by default. Analytics cookies are only used if you give your consent.

6. Third-Party Services

We use trusted third-party providers to help deliver our services. These include:

• Google Analytics – to analyze site traffic
• Google Cloud – to securely store data
• NextAuth.js – to manage secure user authentication

These providers may have access to user data only as necessary and are bound by strict data processing agreements. We do not share user data with any linked external websites such as festival organizers, Facebook, or Instagram — these are just links.

7. Data Security

We take your privacy seriously and implement technical and organizational security measures including:

• HTTPS encryption for all data transfers
• Encrypted password storage
• Secure user authentication via NextAuth.js

While no online service is 100% secure, we strive to use commercially acceptable means to protect your personal data.

8. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy:

• Inactive user accounts are deleted after 24 months.
• Newsletter and email interaction data is retained for 24 months.

You may request account deletion or data removal at any time (see Section 10).

9. Your Rights Under GDPR

If you are a resident of the EU/EEA, you have the following rights under the General Data Protection Regulation:

• Access: Request a copy of your personal data
• Correction: Request corrections to inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Objection: Object to certain data processing (e.g., for marketing)
• Portability: Request a copy of your data in a portable format
• Withdraw Consent: Withdraw consent at any time (e.g., unsubscribe from newsletters)

To exercise any of these rights, please contact us at hello@daytripready.com.

10. International Data Transfers

We do not transfer your data outside of the EU/EEA. All data processing is done using services operating in jurisdictions with strong data protection laws.

11. Policy Updates

We may update this Privacy Policy occasionally. When we do, we'll update the "Last Updated" date at the top of this page. We recommend checking this page regularly to stay informed.

12. Contact Us

If you have any questions or privacy-related requests, please contact:

Email: hello@daytripready.com

Thank you for trusting DayTripReady. We're committed to protecting your personal data and making your festival experience both safe and enjoyable.