Privacy Policy
How we handle your data, plainly.
This Privacy Policy explains how Hala Studio (“Hala,” “we,” “us”) collects and uses personal data when you visit hala-studio.com. Questions: info@halastudio.com.
What we collect
Information you give us
- Account data: if you create an account, our authentication provider (Memberstack) processes your email address, password, and plan status on our behalf.
- Profile & preferences: a display name, an optional profile image, and any taste-profile answers you provide are stored with your account (via Memberstack) and used to personalise the site.
- Saved places: items you save with the “save to list” feature are stored in your browser, and — if you are signed in — also synced to your account (via Memberstack) so they follow you across devices.
- Reviews, ratings & social activity: reviews, ratings, comments, likes, and follows you post are stored (via Netlify Blobs) so the community features work. Reviews and profiles are shown publicly alongside your display name.
- Published trips: if you publish a trip, its contents (itinerary, places, notes) are stored and made public at a shareable link.
- Upon Request commissions: the details you submit (name, email, destination, dates, budget, and travel preferences) are recorded in our commissions tracker (a Google Sheet, via Sheetson). Payment is processed by Stripe; we do not store your full card details.
- Enquiries: if you email us, we receive the contact details and message you send.
Information collected automatically
- Technical & usage data: our hosting/CDN provider (Netlify) records standard server logs (IP address, browser, pages viewed) for security and operation.
- Analytics: with your consent, Google Analytics measures how the site is used. We enable IP anonymisation, but analytics may still involve pseudonymous identifiers — it is not fully anonymous. See our Cookie Notice.
How we use it
- To run the site, your account, and the community features (reviews, profiles, follows, saved lists, published trips).
- To fulfil Upon Request commissions and take payment for them.
- To send you transactional messages you would expect (for example, confirming a request).
- To respond to your enquiries.
- To keep the site secure and improve it, and — only with your consent — to understand usage through analytics.
What is public
Some activity is public by design: your reviews, ratings, comments, likes, follows, public profile (display name and any profile image), and any trips you publish can be seen by others and may be indexed by search engines. Please don’t include anything in them you wouldn’t want to be public. You can edit or delete this content, or ask us to remove it.
Legal bases (UK/EU GDPR)
Where UK/EU GDPR applies, we rely on: performance of a contract (your account, and commissions you ask us to fulfil), legitimate interests (running and securing the site, and operating the community features), and consent (analytics cookies, which you can withdraw at any time).
Who we share it with
We do not sell your personal data. We share it only with the service providers that run the site, under contract and only as needed:
- Memberstack — accounts, authentication, profile and preference data.
- Netlify — hosting and CDN, and Netlify Blobs storage (reviews, comments, likes, follows, published trips).
- Sheetson and Google (Google Sheets) — records of Upon Request commissions.
- Stripe — payment processing for commissions.
- Resend — sending transactional email.
- Google Analytics — usage measurement, only if you consent.
These providers may process data outside your country; where required, appropriate safeguards apply. We may also disclose data if required by law.
How long we keep it
We keep account, profile, and saved-list data while your account is active. Public content (reviews, comments, published trips) stays until you delete it or close your account. Commission records are kept as long as needed for the service and for accounting/legal reasons. Server logs are kept for a limited period for security. You can ask us to delete your account data at any time.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your data, to object to or restrict processing, and to withdraw consent. To exercise any of these, email info@halastudio.com. You may also complain to your local data-protection authority.
Cookies & your choices
We use cookies and similar technologies to keep you signed in and, with your consent, for analytics. You can change or withdraw your choice at any time using the Cookie settings link (also in the footer of every page). Full detail is in our Cookie Notice.
Children
The site is intended for adults and is not directed to children under 16.
Changes
We may update this policy; the “last updated” date above will change. Material changes will be posted here.
Contact
Hala Studio — info@halastudio.com