Privacy Policy
Last updated: November 2026
This policy explains what personal information Explorify collects, why, who we share it with, and the choices and rights you have. The short version: we use your information to plan and deliver your journey, we share it only with the people who need it to do that, and we do not sell it for money.
1. Who is responsible for your information
1.1 Explorify LLC, 954 Lexington Ave. #1062, New York, NY 10021, United States, USA, is responsible for the personal information collected through byexplorify.com and our services (the "controller").
1.2 Other Explorify group companies handle some information for us: Explorify sp. z o.o. (ul. Bobrowiecka 3/224, 00-728 Warszawa, Poland; KRS 0001171278; NIP PL5273162862) for card payments and European support.
1.3 Contact for privacy questions and requests: [email protected], the privacy request form on our Legal & Complaints page, or +1 (431) 533-9900.
2. What we collect
| Type | Examples | Where it comes from |
|---|---|---|
| Identity and contact | Name, email, phone, address, date of birth | You |
| Travel details | Destinations, dates, travelers, preferences, budget, celebrations | You, our forms, AI tools and chat |
| Booking information | Names as on passports, gender, nationality, passport details where a supplier requires them, frequent flyer numbers | You |
| Health and accessibility | Dietary needs, allergies, medical conditions or mobility needs you choose to tell us | You, only if you choose to share |
| Payment information | Payment amounts, dates and references. Card details are entered on Stripe's page; we do not see or store full card numbers | You, Stripe, our bank |
| Technical and usage | IP address, browser, device, pages viewed, how you arrived | Your browser, cookies (section 8) |
| Communications | Emails, WhatsApp and chat messages, call notes, reviews | You |
We do not collect passport numbers through website forms. Please don't send passport or card numbers through forms or chat; we'll ask for what we need securely.
3. How we use it, and our legal reasons
| Purpose | Legal reason (where EU/UK law applies) |
|---|---|
| Answer your enquiry and prepare proposals | Steps before a contract, at your request |
| Book and deliver your journey, issue tickets and documents, support you while traveling | Performing our contract with you |
| Share health, dietary or accessibility details with suppliers so they can look after you | Your explicit consent, which you can withdraw |
| Take payments, keep accounts, prevent fraud | Contract; legal obligation; legitimate interests |
| Send occasional travel news and offers | Your consent (EU/UK) or our legitimate interests with an easy opt-out (US) |
| Measure and improve our website and advertising | Your consent through the cookie banner |
| Handle complaints, legal claims and regulatory requests | Legal obligation; legitimate interests |
| Protect someone's life or safety in an emergency | Vital interests |
AI tools. Our journey designer, journey match and concierge use automated tools to prepare drafts and answers from what you type. A specialist reviews every itinerary; no booking or decision with legal effect is made by AI alone.
4. We do not sell your information for money
We never sell personal information for money. If you accept advertising cookies, the Meta Pixel shares information about your visit with Meta to show you Explorify ads and measure them. Under California and some other US state laws this can count as "sharing" or "selling" for advertising. You can stop it at any time with Do Not Sell or Share My Personal Information at the bottom of every page, or by choosing "Essential only" in Cookie settings. We treat a Global Privacy Control (GPC) signal from your browser as an opt-out.
5. Who we share it with
Suppliers who deliver your journey: airlines, hotels and lodges, ground operators, guides, permit authorities, insurers you choose. They receive only what they need.
Explorify group companies, acting on our instructions (section 1.2).
Payment providers: our bank and Stripe.
Service providers, under contracts that limit their use of your data:
Website hosting and enquiry handling: Sintra
Security and delivery: Cloudflare
Flight and hotel search and booking: Adivaha
Email: Brevo
Live chat: Chatwoot (hosted on our own servers)
Scheduling: Cal.com (only if you book a call)
Messaging: WhatsApp (Meta) (only if you message us)
AI tools: our AI service providers, under contracts that limit their use of their data
Analytics: Google Analytics (only with consent)
Advertising: Meta (only with consent)
Maps, weather, fonts, translation and images: Google Maps (contact page map), OpenStreetMap, Open-Meteo, Google Fonts, Google Translate (only if you choose a language) and Unsplash. Your browser connects to these directly, so they see your IP address.
Authorities, courts or advisers where the law requires it, or to protect our rights or someone's safety.
A buyer or successor, if our business is sold or reorganized, under the same protections.
5A. SMS messages
If you agree on our enquiry or booking form, or when you book by phone or in our office, we send you SMS messages about your booking: confirmations, itinerary details, schedule changes, check-in reminders and transfer details.
Mobile numbers and SMS consent are not shared with, or sold to, any third parties or third-party applications for marketing or promotional purposes. Your number is used only to send messages about your own enquiry or booking.
Message frequency varies depending on your booking activity. Message and data rates may apply.
Reply STOP at any time to opt out of SMS messages. Reply HELP for help, or contact [email protected] or +1 (431) 533-9900. Consent is not a condition of enquiring or booking.
6. International transfers
Your information is processed in the United States and, to deliver your journey, in the countries you visit and where our suppliers and group companies operate (including Poland). Where EU or UK law applies, we protect transfers with the European Commission's Standard Contractual Clauses, adequacy decisions (including the EU–US Data Privacy Framework where a recipient is certified) or other lawful safeguards. Ask us for a copy.
7. How long we keep it
| Information | How long |
|---|---|
| Booking and payment records | 7 years after travel (tax and legal) |
| Enquiries that don't become bookings | 2 years after last contact |
| Health and accessibility details | Until 90 days after you return, unless needed for a claim |
| Marketing preferences | Until you unsubscribe |
| Chat transcripts | Moved to our bookings mailbox at the end of the chat, kept 30 days, then deleted within a further 30 days |
| Complaints and privacy requests | 6 years after closure |
| Analytics cookies choice | Up to 12 months, then we ask again |
8. Cookies and similar technologies
On your first visit we ask which cookies you accept. Change your choice any time with Cookie settings at the bottom of every page.
Essential (always on): your cookie choice, currency and language, the chat window, and Cloudflare security checks on forms.
Analytics (only if you accept): Google Analytics (_ga, _ga_*) to understand which pages help. If you choose "Essential only", Google Analytics does not load.
Advertising (only with "Accept all"): the Meta Pixel (_fbp, _fbc) to show and measure Explorify ads on Facebook and Instagram.
Payments: Stripe sets its own security cookies on its checkout page.
If your browser sends a Global Privacy Control signal, analytics and advertising stay off unless you turn them on.
9. Your rights
Depending on where you live, you can ask us to: give you a copy of your information; correct it; delete it; restrict or object to how we use it; receive it in a portable format; withdraw consent; and opt out of targeted advertising, "sale" or "sharing". You will not be treated differently for using these rights.
US residents. Residents of California and of other states with privacy laws (such as Colorado, Connecticut, Virginia, Texas and Oregon) have the rights above. We use sensitive information (such as health details) only to deliver your journey. You may use an authorized agent; we may ask them for proof. If we decline your request, you can appeal by replying to our decision; we answer appeals within the time the law requires.
EU and UK residents. You may also complain to your local data protection authority, for example the Polish UODO or the UK ICO, but please contact us first so we can try to help.
How to make a request: use the privacy request form on our Legal & Complaints page or email [email protected]. We will confirm receipt within 10 days and respond within 30 days (45 days for California requests), and may need to verify your identity first.
10. Security
We use encryption in transit, access controls, secure payment providers and staff training. No system is perfectly secure; if a breach affects you and the law requires it, we will tell you and the relevant authorities. Payment fraud warning: we never change bank details by email or message. Call +1 (431) 533-9900 to confirm before paying.
11. Children
Our website is not aimed at children under 16, and we don't knowingly collect their information online. We collect children's details for bookings only from their parent or guardian.
12. Changes to this policy
We will post any update here with a new "Last updated" date and tell you directly if a change materially affects you.
13. Contact
Explorify LLC · 954 Lexington Ave. #1062, New York, NY 10021, United States · Privacy: [email protected] · +1 (431) 533-9900