Privacy Policy

Baluu Ltd is the data controller for personal data processed through the Baluu website.

If you have any questions about this policy or how we handle your data, you can contact us using the details at the end of this page.

We aim to collect as little personal data as possible. Depending on how you use Baluu, this may include:

• Information you give us — for example, your name, email and message when you contact us.
• Usage information — the pages you view and how you interact with the site, collected through privacy-focused analytics.
• Device information — such as browser type and approximate location derived from your IP address.

We use the personal data we collect to:

• Operate, maintain and improve the Baluu website.
• Understand how the site is used so we can make it better.
• Respond to your enquiries and provide support.
• Keep the site secure and prevent misuse.
• Comply with our legal obligations.

We rely on the following legal bases under UK data protection law:

• Legitimate interests — to run and improve our service and keep it secure.
• Consent — for optional analytics and any cookies that require it; you can withdraw consent at any time.
• Legal obligation — where we must process data to comply with the law.

We use a privacy-focused analytics tool (Umami) to understand how the site is used. It does not use tracking cookies and does not identify you personally.

Where we use cookies that are not strictly necessary, we will ask for your consent. You can also control cookies through your browser settings.

We do not sell your personal data. We share it only where necessary:

• With payment providers such as Stripe, to process the bookings and payments you make for Experiences.
• With service providers that help us run the site, such as hosting and analytics providers.
• Where required by law, or to protect our rights, our users or the public.

When you book an Experience, your booking and payment details are collected and processed securely by our payment provider. Baluu does not store your card details.

Processing your booking and payment may involve sub-processors, including Stripe (payments), Google (email and file storage), Intercom (support) and Active Campaign (email).

We keep personal data only for as long as necessary for the purposes set out in this policy, or as required by law, after which it is deleted or anonymised.

Under UK data protection law, you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete your data.
• Restrict or object to our processing.
• Request a copy of your data in a portable format.
• Withdraw your consent where we rely on it.

We use appropriate technical and organisational measures to protect your personal data. No method of transmission or storage is completely secure, but we work to safeguard your information and review our measures regularly.

Baluu links to third-party websites and services, including Hosts' own pages and our payment provider. We are not responsible for their privacy practices, and we encourage you to read their privacy policies.

Baluu is not directed at children. You must be at least 18 to make a booking, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the “Last updated” date shown below.

Your continued use of Baluu after changes take effect means you accept the updated policy.