Privacy

Privacy Policy

Draft prepared for review. This page has not yet been approved by a legal adviser.

Away Circle and your privacy

Away Circle is a trading name used by a sole trader in England. This notice explains how we handle information when you enquire, register interest or join the Circle.

Address:

Email: hello@awaycircle.com.

For privacy enquiries, write to Privacy enquiries, Away Circle, at this address, or use our general enquiry form and explain your privacy request. The form stores your message and reply details; it is not a dedicated privacy inbox. Please do not include identity documents or sensitive information unless requested through an agreed secure method.

What we collect

When you join the newsletter: your first name, email address, any travel interests you choose, the page you signed up on, and a record of your consent (the wording you agreed to, its version and the date and time).

When you send an enquiry or register interest: your name, email address, enquiry type, submission page and date, message, and any details you provide. Depending on the form, these may include your organisation, destination, travel dates or season, occasion, group size, budget, room or accommodation preferences, travel interests and the guidance you need. We record whether you chose the separate marketing opt-in. We do not ask for passports, payment details or sensitive documents.

Private administration may add an enquiry stage, qualification, priority, follow-up date and action, staff owner alias, notes and supporting opportunity information. Technical records support access security, spam prevention and synchronisation. Newsletter rate limiting uses a server-generated email fingerprint and a short-lived attempt count, not a public list of email addresses.

How we use it

We use enquiry details to consider and respond to your request, assess the support you need and organise follow-up. Where you ask about a proposed service with a view to purchasing it, our basis is taking steps at your request before a contract. General enquiries, privacy requests, operational administration and fraud or spam prevention rely on our legitimate interests in handling requests and protecting the service; legal obligations apply where we must respond to data-rights requests or retain required records.

Marketing is optional and relies on your separate consent. Sending an enquiry does not subscribe you unless you tick the optional marketing box. Newsletter signup requires a positive consent choice. We retain the wording, version and time of newsletter consent, and withdrawal information where applicable. You can withdraw consent without affecting earlier lawful processing. Business email delivery is currently paused: saving an enquiry or subscription does not mean an email has been sent. No enquiry creates a booking or payment commitment.

Who can see it

Enquiry and subscription records are restricted to authorised Away Circle administrators. Lovable Cloud provides website hosting, record storage and private team sign-in. We do not sell your information, and an enquiry does not automatically share your contact details with a travel operator.

The approved Google Sheets integration shares only these operational fields with the Away Circle Operations Hub, hosted by Google: full lead identifier, enquiry category, Marrakech destination where relevant, submission source, creation date, original enquiry marketing opt-in label, enquiry stage, qualification outcome, next-action category, follow-up date and staff owner alias. Names, email addresses, messages, budgets, room preferences, detailed consent evidence and private notes are not exported by this integration. A lead identifier can still link a row to your enquiry; these rows are not necessarily anonymous. The historical opt-in label is not current permission to send marketing. New enquiries and changes to these mapped fields are synchronised automatically in the background; ambiguous delivery attempts are held for manual review.

Google Fonts receives requests from your browser for the site’s fonts, including normal connection information such as your IP address. No advertising pixels or third-party video embeds are currently configured. Browser storage remembers the newsletter invitation and storage notice; team sign-in stores an authentication session in browser local storage.

Visitor analytics

Visitor analytics and click tracking are enabled for the published site. Lovable records pages visited, where visitors came from, country, browser, operating system, device type, time on page, page loading speed, errors and clicks on buttons and links. Our storage notice only saves an acknowledgement, not an analytics consent choice, so clicks and these visit measurements are recorded for every visitor of the published site. Page visits, time on page, page speed and errors are counted without cookies and without identifying anyone.

Lovable’s analytics uses no cookies, stores nothing on your device, does not keep IP addresses and does not identify visitors. Detailed data is kept for 90 days and daily summaries for one year. This is separate from the contact details you deliberately submit in a form.

Lovable collects this data for us. Lovable’s privacy policy explains how it handles it. The editor preview is not counted.

Retention review

Our proposed policy is to close inactive enquiries following the last meaningful contact, then review them for deletion or anonymisation once 12 months have passed since that contact. The review includes identifiable linked Google Sheets rows, not only the website record. A documented continuing need, such as an active request, legal obligation or dispute, may justify keeping specified information longer; the reason and next review should be recorded.

Newsletter details are kept while you remain subscribed. After withdrawal, the proposed policy is to keep only the minimum suppression information needed to avoid unwanted marketing and consent or withdrawal evidence for as long as it is needed to demonstrate your choice or meet a documented legal need. These records should be reviewed rather than kept indefinitely without a reason.

The proprietor is responsible for these manual retention reviews, recording any continuing need and arranging deletion or anonymisation across linked records. This is not an automatic erasure service; routine reviews and provider backup removal have not yet been verified in operation. Removing a live record does not necessarily remove every backup immediately.

International processing

Lovable Cloud, Google Sheets and Google Fonts support the website and may involve processing outside the UK. Website pages are delivered globally. The actual storage and processing locations and applicable international-transfer arrangements for these services have not yet been verified for Away Circle. This notice does not assert a UK-only location, an adequacy decision or contractual safeguards that have not been confirmed.

Your choices

You can ask for access to, correction of or deletion of your details using the postal privacy contact above or our general enquiry form. You can withdraw marketing consent through the same contact options; any future marketing emails must also provide an unsubscribe link. Our existing unsubscribe page changes subscription status when opened with a valid subscription link. No marketing emails are currently being sent.

Depending on the circumstances, you may also request restriction or portability, object to processing and withdraw consent without affecting earlier lawful processing. You can complain to the Information Commissioner’s Office at ico.org.uk. Contacting us first is optional. Providing enquiry details is voluntary, but we may be unable to reply without contact information. We do not use these details for automated decisions with legal or similarly significant effects.