Effective date: 08 March 2025

Privacy Policy

This Privacy Policy explains how Now or Never ("Now or Never", "we", "us", or "our") collects, uses, shares, and protects personal data in connection with the website located at nowornevertrip.com, our related sub-domains, APIs, email communications, and any other services that link to this notice (together, the "Services").

1. Personal Data We Collect

We collect the following categories of personal data when you use the Services:

• Account Information: username, first and last name, email address, hashed password, and onboarding preferences collected via the registration form.
• Travel Preferences: selected tags, preferred departure airport, saved destinations, and vibe guide submissions.
• Communications: emails you send to us, support enquiries, and preference updates submitted through the subscription dashboard.
• Usage Data: log data generated by our servers, including IP address, device type, browser, operating system, access dates and times, and pages viewed.
• Geolocation Data: approximate location information you voluntarily allow through your browser or device to suggest nearby airports.
• Cookies & Similar Technologies: we do not deploy cookies, SDKs, or browser storage on our domains. If this changes we will update this Policy; external booking partners may apply their own tracking technologies under their privacy notices.
• User-Generated Content: reviews, feedback, or other material you choose to upload.
• Third-Party Data: deal and itinerary information received from travel data providers such as Amadeus, which may include airport codes, destination names, and pricing.

2. Why We Process Your Data (Legal Bases)

We process personal data only when we have a lawful basis under applicable data protection laws, including the GDPR and UK GDPR:

• Performance of a Contract: to create and maintain your account, provide personalised deal alerts, and fulfil your subscription choices.
• Consent: for optional communications (vibe guide news, personalised deals), geolocation services, and non-essential cookies. You may withdraw consent at any time.
• Legitimate Interests: to secure our Services, prevent fraud or abuse, understand how users interact with the platform, and improve functionality. We balance these interests against your rights.
• Legal Obligations: to comply with tax, accounting, and regulatory requirements, and to respond to lawful requests from public authorities.

3. How We Use Personal Data

We use personal data to:

• Provide and personalise the Services, including suggested destinations and curated travel deals.
• Authenticate users, maintain security, and enforce our Terms of Service.
• Send service-related communications, transactional emails, and marketing messages (where permitted).
• Process analytics, conduct product research, and improve user experience.
• Display advertising and measure campaign performance, including through Google AdSense.
• Comply with legal obligations and respond to lawful requests.

4. Sharing & International Transfers

We share personal data only with trusted recipients who support the operation of the Services:

• Infrastructure & Hosting: cloud hosting, database, and content delivery providers that store data on our behalf.
• Email & Communication Tools: services that deliver transactional and marketing emails. Ensure the provider name is disclosed here.
• Analytics & Advertising: partners such as Google (AdSense) to deliver ads and measure performance.
• Travel Data Providers: Amadeus and similar suppliers who power deal discovery.
• Professional Advisors & Authorities: legal, tax, or regulatory bodies when required by law.

If personal data is transferred outside the European Economic Area (EEA), Switzerland, or the United Kingdom, we rely on appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, or your explicit consent.

5. Cookies & Similar Technologies

We do not set cookies, SDKs, or similar tracking technologies on your device for analytics, advertising, or functionality. The Services operate without browser storage, and personalisation is performed using the information you provide directly (such as selected tags or preferred airports).

Our servers may generate short-lived technical logs to keep the platform secure and diagnose service issues; these logs do not rely on cookies. If you access third-party links (for example, airline or hotel partners) those external sites may apply their own tracking technologies, which are governed by their respective privacy notices.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy:

• Account data is retained while your account is active and for up to 24 months after closure, unless a longer period is required by law.
• Marketing preferences are kept until you withdraw consent or opt out.
• Usage logs are typically stored for up to 12 months for security and analytics.
• Aggregated or anonymised data may be stored indefinitely as it no longer identifies you.

7. Your Rights

If you are located in the EEA, UK, Switzerland, or other jurisdictions with similar protections, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data where no longer necessary ("right to be forgotten").
• Request restriction of processing in certain circumstances.
• Object to processing based on legitimate interests or for direct marketing.
• Request data portability in a structured, commonly used format.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local supervisory authority (for example, the Dutch Data Protection Authority or the data protection body in your member state).

To exercise these rights, contact us at [email protected]. We may need to verify your identity before responding.

8. Security Measures

We implement appropriate technical and organisational measures to protect personal data, including encrypted connections, access controls, monitoring for unusual activity, and regular security reviews. No online service is 100% secure, so we encourage you to use strong passwords and keep your credentials confidential.

9. Children

The Services are not directed to individuals under the age of 18, and we do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us so we can delete it.

10. Automated Decision-Making

We do not engage in fully automated decision-making that produces legal or similarly significant effects on you. Personalised deal suggestions and content recommendations involve human oversight and do not constitute solely automated decisions within the meaning of the GDPR.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email, in-app notice, or other appropriate means. The "Effective date" at the top will indicate the latest revision.

12. Contact & Complaints