Privacy Policy
Last updated September 11, 2026
1. Information We Collect
Account and Profile Data
We collect account identity, role, name, profile photos, bio, pronouns, languages, country, currency preference, and other profile fields you provide.
Traveler Data
Traveler onboarding may collect contact details, WhatsApp number, residence information, interests, accessibility needs, dietary preferences, emergency-contact details where provided, booking history, reviews, support messages, and payment-customer references. If you save a guide, we store that bookmark so it remains available in your traveler dashboard.
Guide Data
Guide onboarding may collect service cities, biography, photos, pricing, availability, specialties, languages, legal name, phone/WhatsApp details, payout reminders, verification status, and verification materials.
Booking, Payment, and Message Data
We collect booking dates, multi-day duration selections, city, guide/traveler IDs, party size, notes, meeting details, booking status history, payment references, payout status, disputes, reviews, and in-platform messages.
Payout Data
Guides may provide bank-transfer details for manual payouts, including beneficiary name, bank details, routing details, payout currency, recipient address/contact information, and payout notes.
2. Uploads, Blog Content, and Support Records
Cloudinary stores user-uploaded images and temporary guide verification uploads. Government ID and proof-of-address uploads are deleted when Admin approves or rejects a guide application, and retained document references are cleared at that point.
Blog content is managed in Sanity. Sanity stores article content, categories, tags, images, SEO fields, and related editorial metadata. Supabase remains the source of truth for marketplace data.
Contact forms, support messages, safety reports, dispute reasons, admin notes, and admin support threads may be stored for support, safety, legal, and operational review.
3. How We Use Information
- Create and protect accounts.
- Verify guides and manage public guide visibility.
- Process bookings, payments, cancellations, and reviews.
- Calculate fees, commissions, payouts, and reconciliation.
- Handle support, refunds, disputes, and safety reports.
- Operate analytics, error monitoring, email, and CMS systems.
- Meet legal, safety, tax, accounting, and audit obligations.
5. Access Controls
Normal user access is partitioned by role and ownership through Supabase Row Level Security. Travelers can access their own bookings and messages. Guides can access their assigned bookings, messages, service cities, availability, and payout profile. Admins can access platform data for operations, support, safety, legal, compliance, and finance.
Users are responsible for keeping their account credentials secure.
6. Retention and Deletion
We retain account and marketplace data while needed to provide the service and meet legal/accounting obligations. When an account is deleted, personally identifying profile data is deleted or anonymized where possible. Historical booking, financial, review, support, and audit records may be retained in anonymized or legally required form.
8. Newsletters and email marketing
ALANI CONSULTING SERVICES LTD., trading as Rainbow Tour Guides, is the controller for our newsletter and CRM data. Our postal address is 124 City Road, London, England, EC1V 2NX. Alan Stables handles privacy and erasure requests at hello@rainbowtourguides.com.
Newsletter signup collects your email address and, optionally, your first name. We use these to send role-relevant travel inspiration, destination or traveler-demand updates, platform news, practical tips, and occasional offers, normally approximately twice per month. Where you opt in, we rely on consent and record when, where, and how you subscribed, including the wording version. Signup marketing choices are optional, separate from our Terms, and presented unchecked so that consent is affirmative. Where an existing-customer exception applies, we must meet its requirements, including an opportunity to opt out when details were collected and in each message; account creation alone is not consent.
We may also show signed-in users a policy-update notice. We record the applicable Terms and Privacy versions, the date and time of the response, how it was collected, and whether the user separately selected the optional marketing invitation. Agreeing to updated Terms or acknowledging this Policy does not itself create marketing consent.
We may organise campaigns by account role, voluntarily provided interests, and contact lists or tags. We do not use government IDs, private support messages, health information, or inferred sexual orientation to target marketing. Supabase stores contact and preference records, and Resend processes email delivery. These providers may process data outside the UK; applicable transfers require adequacy regulations or appropriate contractual safeguards.
Every marketing email contains an unsubscribe link. Travelers and Guides can also unsubscribe from newsletters and marketing in their dashboard settings. You can withdraw consent or object to direct marketing at any time, without a fee. We stop future marketing after an unsubscribe; a message already submitted may still arrive. Essential booking, payment, security, and support emails continue as needed.
We record delivery, bounce, complaint, unsubscribe, and link-click events to operate and assess campaigns. Marketing emails do not use open-tracking pixels. We retain contact details while needed for the stated purpose and review inactive records. After withdrawal or erasure, we retain only the evidence and minimum suppression information needed to honour your choice and demonstrate compliance. Contact Alan for details about applicable retention periods.
9. Your Rights and Contact
Depending on your location, you may have rights to access, correct, export, or delete your personal data, restrict processing, and object to direct marketing. Withdrawing consent does not affect processing carried out lawfully before withdrawal. You can complain to the UK Information Commissioner’s Office at ico.org.uk. For privacy questions or data-rights and erasure requests, contact Alan Stables at hello@rainbowtourguides.com.
Questions about this page? Contact support
