Privacy Policy

1. Who we are

My Haven Holiday Tracker ("we", "us", "our") is a free, independent fan-made web app at holidayparktracker.co.uk. We are not affiliated with, endorsed by, or connected to Haven Holidays or Bourne Leisure Ltd. For UK GDPR purposes we are the data controller for personal data processed through this service. You can contact us at hello@holidayparktracker.co.uk.

2. What data we collect

We only collect what we need to run the app:

• Account data: email address, display name, and (optionally) avatar image and profile details you choose to add.
• Authentication data: hashed credentials or OAuth identifiers (e.g. Google sign-in) handled by our authentication provider.
• Content you create: holidays you log, trip notes, photos you upload, star ratings, public reviews, wishlists, saved items.
• Usage data: pages visited, device type, country, referrer, and aggregate page-view counts collected via privacy-friendly analytics. We do not use advertising cookies.
• Technical data: IP address, browser type and basic request logs, retained for security and abuse prevention.

We do not knowingly collect data from children under 13. If you believe a child has provided personal data, contact us and we will delete it.

3. How we use your data (and our legal basis)

• To provide the service — store your holidays, photos and account (legal basis: performance of a contract).
• To keep the service secure — prevent abuse, fraud and unauthorised access (legitimate interests).
• To improve the app — aggregate, anonymised analytics on what features people use (legitimate interests).
• To communicate with you — essential service emails such as password resets or important changes (performance of a contract).
• To comply with the law — respond to lawful requests from authorities (legal obligation).

We do not sell your personal data. We do not use your data to train AI models. We do not send marketing emails without your consent.

4. What's public vs private

By default, every holiday you log is private to your account. When you log a trip you can choose to leave a public review with a star rating — only that review (with your display name) is shown publicly. Your profile may be visible to others if you mark it as public. Photos you upload are private unless you explicitly mark them public. You can change these settings or delete content at any time inside the app.

5. Cookies and similar technologies

We use a small number of strictly necessary cookies (or local storage) to keep you signed in and remember basic preferences. We use privacy-friendly analytics that do not require a cookie consent banner under UK rules. We do not use third-party advertising or tracking cookies.

6. Who we share data with

We use a small number of trusted processors to run the service:

• Hosting & database — our cloud provider stores your account, holidays and photos.
• Authentication — sign-in (including Google sign-in if you use it) is handled by our auth provider.
• Analytics — anonymised, aggregate usage statistics.
• Email delivery — for transactional emails such as password resets.

Each processor is bound by a data processing agreement and only acts on our instructions. Some processors may store data outside the UK/EEA; where they do, transfers are protected by appropriate safeguards such as the UK International Data Transfer Addendum or EU Standard Contractual Clauses. We may also disclose data where required by law.

7. How long we keep your data

We keep your account and content for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we must keep limited records to comply with legal obligations or for backup retention (typically up to 90 days). Anonymised, aggregate analytics may be retained indefinitely.

8. Your rights

Under UK GDPR you have the right to:

• Access a copy of your personal data.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw consent at any time, where consent is the legal basis.

Most of these can be done directly in the app's profile settings. For anything else, email hello@holidayparktracker.co.uk. You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Security

We use industry-standard measures including encrypted connections (HTTPS), encryption at rest, hashed credentials, row-level database security and least-privilege access. No system is 100% secure, but we work hard to protect your data.

10. Third-party links and content

The app may link to third-party sites (e.g. Haven's own pages or external guides). We are not responsible for their content or privacy practices — please read their policies.

11. Changes to this policy

We may update this policy from time to time. We'll change the "Last updated" date above and, for significant changes, notify you in the app or by email.

12. Contact

Questions, requests or complaints? Email hello@holidayparktracker.co.uk.