Privacy Policy

This is the Privacy Policy for Jax | Family Travels ("we", "us", "our"), the website at jaxfamilytravels.com. It explains what personal data we collect, why we collect it, who we share it with, and what rights you have over your data.

If you have any questions about this policy, email hello@jaxfamilytravels.com.

Who we are

Jax | Family Travels is a small family-run website operated by Bec and Oli, currently based in the United Kingdom. We're the data controller for the information described in this policy.

What we collect and why

When you create an account

We collect:

• Your name, so we can address you correctly on the site and in emails.
• Your email address, to log you in, send account-related emails (signup confirmation, password reset), and, if you opted in, send marketing updates.
• A password, stored in encrypted form by our authentication provider. We never see your plain-text password.
• Account metadata, when you signed up, your subscription tier (free or premium), and your marketing preference.

When you fill in the "Work With Us" form

We collect everything you choose to share: your name, email, family situation, location, where you are in your travel journey, what you'd like to discuss, and your timezone. We use this to reply to your enquiry and prepare for our call together.

When you buy a guide or subscribe

We pass billing information directly to Stripe, our payment processor. We do not store your card details on our servers. Stripe sends us a record of the purchase so we can grant you access to what you bought.

When you browse the site

Our hosting provider, Cloudflare, processes basic technical information (IP address, browser type, pages visited) for security and performance. We do not currently use analytics cookies, behavioural tracking, or advertising trackers.

Cookies

We use a small number of strictly-necessary cookies, set by our authentication provider, to keep you signed in. Under UK PECR these don't require a consent banner. We do not use marketing or analytics cookies. If we add any in future, we'll update this policy and request your consent first.

Who we share your data with

We rely on a small number of third-party services to run the site. Each one has its own privacy policy and is contractually obliged to protect your data.

• Supabase, stores your account, profile, and any content you create on the site. Hosted in the EU.
• Cloudflare, serves the website itself and routes email forwarding for our addresses.
• Resend, sends transactional and (if you opted in) marketing emails on our behalf.
• Stripe, processes payments. Only used when you buy something.

We do not sell your data. We do not share it with marketers, advertisers, or any third party for purposes other than running this service.

How long we keep your data

We keep your account data for as long as your account is active. If you ask us to delete your account, we'll remove your profile and personal data within 30 days, except where we're legally required to keep records (for example, tax records for purchases, kept for 7 years under UK law).

Call request submissions are kept until the conversation is complete and for a reasonable follow-up period (typically 12 months) after that.

Marketing emails

We only send marketing emails to people who explicitly opted in at signup or via their account settings. Every marketing email contains a one-click unsubscribe link that works without logging in. You can also opt out any time at /account.

Transactional emails (account confirmations, password resets, purchase receipts, replies to your enquiries) are not marketing, we'll send those whenever they're needed.

Your rights under UK GDPR

You have the right to:

• Access, request a copy of the personal data we hold about you.
• Rectification, ask us to correct anything that's wrong.
• Erasure, ask us to delete your data (subject to legal retention requirements).
• Portability, receive your data in a machine-readable format.
• Objection, object to processing for marketing purposes (just opt out, no need to email us).
• Withdraw consent, for anything we process on the basis of consent, you can withdraw consent at any time.

To exercise any of these rights, email hello@jaxfamilytravels.com. We aim to respond within one calendar month.

Complaints

If you're unhappy with how we handle your data, please tell us first so we can put it right. If you're still not satisfied you have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

Changes to this policy

We may update this policy from time to time, typically when we add a new service or change how we use data. Material changes will be communicated to you by email. The "last updated" date at the top of this page reflects the most recent revision.

Contact

Email: hello@jaxfamilytravels.com

This is starter policy text. If you're a visitor to the site reading this, the policy describes our genuine practices. If you're the site owner, please have a UK solicitor review this before relying on it for compliance.