Privacy Policy

Who we are

The data controller is IGR Craving Inc., 298 Third Ave, Chula Vista, California, USA. For anything about your data, write to hello@qinsaba.com.

What we collect

• Your Journey questionnaire: your answers (who is travelling, when, what you would like to do, budget range, places), the video-call time you choose and your time zone, your name, email, country, preferred language and, if you give it, your phone number.
• Messages: what you write to us by email and the details you include.
• Account and audio tours: name, email, password (stored only as an encrypted hash), language and the tours you buy.
• Payments: handled by Stripe. We never see or store your full card details; we receive the outcome of the payment and basic billing data.
• Browsing data: IP address, device and browser, pages visited and how you reached the site. Our hosting provider collects it for security and, where you allow it, Google Analytics and Google Ads collect it too (see the Cookie Policy).

Why we use it

• To reply to your request, hold the video call and design your trip: steps you ask for before a contract (GDPR art. 6.1.b).
• To provide the trips, accounts and tours you buy: performance of a contract (art. 6.1.b).
• To keep accounting and tax records: legal obligation (art. 6.1.c).
• To keep the site secure and block spam: our legitimate interest (art. 6.1.f).
• To measure visits and the results of our ads: your consent in the EU, EEA, UK and Switzerland (art. 6.1.a); elsewhere our legitimate interest, and you can opt out at any time.

We do not sell your personal data, and we do not use it for automated decisions that affect you.

Who receives it

Only the providers that help us run the service, bound by contract to protect your data:

• Vercel Inc.: website hosting (United States).
• Neon: database (servers in London, United Kingdom).
• Aruba S.p.A.: email delivery (Italy).
• Stripe: payments.
• Google: Tag Manager, Analytics and Ads.
• When you book a trip, the hotels, guides, drivers and other partners in Italy who deliver it receive only the data they need, such as names and dates.

We may also disclose data when the law requires it.

Transfers outside Europe

IGR Craving Inc. is based in the United States, and some of our providers process data there. When data leaves the EU, EEA, UK or Switzerland, we rely on the EU–US Data Privacy Framework where the recipient is certified, or on the European Commission’s Standard Contractual Clauses.

How long we keep it

• Questionnaire answers and messages: up to 24 months after our last contact, unless you book.
• Booking, purchase and billing records: as long as tax and accounting law requires.
• Account: until you delete it or ask us to.
• Google Analytics data: 14 months.

Your rights

You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time; this does not affect what happened before. Write to hello@qinsaba.com and we will reply within 30 days.

If you are in Europe, you can also complain to your data protection authority. In Italy, that is the Garante per la protezione dei dati personali.

If you live in California or another US state with a privacy law, you have the right to know what we collect, to delete or correct it, and to opt out of the use of your data for targeted advertising. We do not sell personal information. To opt out, use the cookie settings or write to us. We will not treat you differently for using these rights.

Children

Our services are not meant for children under 16, and we do not knowingly collect their data. Parents booking a family trip give us only the details we need about their children.

Security

We use encrypted connections, access controls and providers with recognised security standards. No system is perfectly secure, but if something goes wrong we act promptly and inform you when the law requires it.

Changes

We may update this policy. The date at the top shows the current version; for significant changes we will tell you on the site or by email.