Last updated
This Privacy Policy was last updated on May 5, 2026.
Our commitment
MAPL Tours respects your privacy. This Policy explains what information we collect, why we collect it, who we share it with, and the choices you have. If you have any questions after reading it, email contact@mapltours.com.
Information we collect
- Account information — your name, email address, phone number, and country when you create an account or complete a booking.
- Booking information — the experiences or transfers you purchase, travel dates, traveler counts, pickup and drop-off details, and any special requests you send us.
- Payment information — handled directly by Stripe. We never see or store your full card number; we only receive a token plus the last four digits and card brand for receipt display.
- Usage data — pages you view, experiences you save, and basic device information (browser, OS, screen size) collected through analytics cookies.
- Communication — anything you send us through the contact form, email, or support chat.
How we use your information
- Process and confirm your bookings, including sharing the relevant details with the experience creator delivering your trip.
- Send transactional emails (booking confirmations, transfer details, contact form replies).
- Provide customer support and respond to your questions.
- Improve the platform — understand which experiences travelers love, fix bugs, and tune the user experience.
- Detect, prevent, and address fraud or abuse on the platform.
- Comply with applicable law, including tax and accounting obligations.
Who we share data with
We share the minimum information necessary with trusted third parties that help us operate:
- Experience creators — receive your name, traveler count, date, contact phone, and any special requests so they can host you.
- Stripe — payment processing.
- Resend — transactional email delivery.
- Supabase — secure database hosting (Frankfurt region).
- Google Analytics & Hotjar — anonymised usage analytics. You can opt out via your browser’s Do Not Track or ad-blocker.
We do not sell your personal information to anyone.
Cookies
We use cookies and similar technologies to keep you logged in, remember your itinerary cart, and measure how the site is performing. You can disable cookies in your browser settings, but some parts of the site (checkout, saved trips) may not work properly without them.
Data retention
We keep booking records for seven years to satisfy tax and accounting obligations. Account information is retained for as long as your account is active. You can request deletion of your account and personal data at any time by emailing contact@mapltours.com — we will process the request within 48 hours.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to certain uses of it. To exercise any of these rights, email contact@mapltours.com with the words “Privacy request” in the subject line.
Security
We use HTTPS site-wide, encrypt sensitive data at rest, and limit who on our team can access your information. No system is perfectly secure — if you believe your account has been compromised, contact us immediately and we will help you secure it.
Children
MAPL Tours is intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with their information, contact us and we will delete it.
Changes
When we make material changes to this Policy, we will post the new version here with an updated “Last updated” date. For substantial changes, we may also notify you by email.