1. Information We Collect
Account and Profile Data
We collect account identity, role, name, profile photos, bio, pronouns, languages, country, currency preference, and other profile fields you provide.
Traveler Data
Traveler onboarding may collect contact details, WhatsApp number, residence information, interests, accessibility needs, dietary preferences, emergency-contact details where provided, booking history, reviews, support messages, and payment-customer references. If you save a guide, we store that bookmark so it remains available in your traveler dashboard.
Guide Data
Guide onboarding may collect service cities, biography, photos, pricing, availability, specialties, languages, legal name, phone/WhatsApp details, payout reminders, verification status, and, while an application is under review, a government-issued ID with its type and number.
Booking, Payment, and Message Data
We collect booking dates, multi-day duration selections, city, guide/traveler IDs, party size, notes, meeting details, booking status history, payment references, payout status, disputes, reviews, and in-platform messages.
Payout Data
Guides may provide payout details for manual payouts, including a Wise or PayPal account email address, a name exactly as shown on their government ID for Western Union cash pickup, and bank details such as beneficiary name, IBAN or account number, routing details, payout currency, recipient address/contact information, and payout notes. We do not collect a copy of the ID for payouts. Our team records which payout method it uses for each guide, and the guide can see that record.
2. Uploads, Blog Content, and Support Records
Cloudinary stores user-uploaded images and temporary guide verification uploads.
Before a guide is approved, our team manually checks their government-issued ID together with the other information they provide, such as their legal name and profile details. We do not keep the ID: when Admin approves or rejects the application, we permanently delete the uploaded ID photo or PDF (and any proof-of-address upload) and erase the ID number. We keep the guide's legal name, the type of ID that was checked, and the verification result and date as a record that verification took place. These are visible only to our team.
Blog content is managed in Sanity. Sanity stores article content, categories, tags, images, SEO fields, and related editorial metadata. Supabase remains the source of truth for marketplace data.
Contact forms, support messages, safety reports, dispute reasons, admin notes, and admin support threads may be stored for support, safety, legal, and operational review.
3. How We Use Information
- Create and protect accounts.
- Verify guides and manage public guide visibility.
- Process bookings, payments, cancellations, and reviews.
- Calculate fees, commissions, payouts, and reconciliation.
- Handle support, refunds, disputes, and safety reports.
- Operate analytics, error monitoring, email, and CMS systems.
- Meet legal, safety, tax, accounting, and audit obligations.
5. Access Controls
Normal user access is partitioned by role and ownership through Supabase Row Level Security. Travelers can access their own bookings and messages. Guides can access their assigned bookings, messages, service cities, availability, and payout profile. Admins can access platform data for operations, support, safety, legal, compliance, and finance.
Users are responsible for keeping their account credentials secure.
6. Retention and Deletion
We retain account and marketplace data while needed to provide the service and meet legal/accounting obligations. When an account is deleted, personally identifying profile data is deleted or anonymized where possible. Historical booking, financial, review, support, and audit records may be retained in anonymized or legally required form.
8. Newsletters and email marketing
ALANI CONSULTING SERVICES LTD., trading as Rainbow Tour Guides, is the controller for our newsletter and CRM data. Our postal address is 124 City Road, London, England, EC1V 2NX. Alan Stables handles privacy and erasure requests at hello@rainbowtourguides.com.
Newsletter signup collects your email address and, optionally, your first name. We use these to send role-relevant travel inspiration, destination or traveler-demand updates, platform news, practical tips, and occasional offers, normally approximately twice per month. Where you opt in, we rely on consent and record when, where, and how you subscribed, including the wording version. Signup marketing choices are optional, separate from our Terms, and presented unchecked so that consent is affirmative. Where an existing-customer exception applies, we must meet its requirements, including an opportunity to opt out when details were collected and in each message; account creation alone is not consent.
We may also show signed-in users a policy-update notice. We record the applicable Terms and Privacy versions, the date and time of the response, how it was collected, and whether the user separately selected the optional marketing invitation. Agreeing to updated Terms or acknowledging this Policy does not itself create marketing consent.
We may organise campaigns by account role, voluntarily provided interests, and contact lists or tags. We do not use government IDs, private support messages, health information, or inferred sexual orientation to target marketing. Supabase stores contact and preference records, and Resend processes email delivery. These providers may process data outside the UK; applicable transfers require adequacy regulations or appropriate contractual safeguards.
Every marketing email contains an unsubscribe link. Travelers and Guides can also unsubscribe from newsletters and marketing in their dashboard settings. You can withdraw consent or object to direct marketing at any time, without a fee. We stop future marketing after an unsubscribe; a message already submitted may still arrive. Essential booking, payment, security, and support emails continue as needed.
We record delivery, bounce, complaint, unsubscribe, open, and link-click events to operate and assess campaigns. Our emails contain a small invisible image (a tracking pixel) and tracked links, which tell us when an email is opened and which links are clicked. We also count whether recipients go on to create an account, apply to become a guide, or request or confirm a booking in the weeks after a campaign. We use this to measure how campaigns perform, not to build advertising profiles. You can stop open tracking by turning off automatic image loading in your mail app. We retain contact details while needed for the stated purpose and review inactive records. After withdrawal or erasure, we retain only the evidence and minimum suppression information needed to honour your choice and demonstrate compliance. Contact Alan for details about applicable retention periods.
9. Your Rights and Contact
Depending on your location, you may have rights to access, correct, export, or delete your personal data, restrict processing, and object to direct marketing. Withdrawing consent does not affect processing carried out lawfully before withdrawal. You can complain to the UK Information Commissioner’s Office at ico.org.uk. For privacy questions or data-rights and erasure requests, contact Alan Stables at hello@rainbowtourguides.com.