Legal

Privacy Policy

Last updated: 30 April 2026

1. Who We Are

Indulgence4All is a trading name of Pragticality Ltd, a company registered in England and Wales (company no. 17207406). Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. For data protection purposes, Pragticality Ltd is the data controller for personal data collected through Indulgence4All. We are registered with the Information Commissioner's Office (ICO registration no. ZC134066).

Contact us at: hello@indulgence4all.com

2. What Data We Collect

Account Information

When you create a member account, we collect:

• Name and email address (via Clerk authentication)
• Password (stored securely and encrypted by Clerk — we never see it)

Profile Information

Information you choose to provide to personalise your experience:

• Home city and country
• Nationality and passport country
• Preferred currency
• Preferred airports and airlines
• Frequent flyer programme numbers
• Passport and visa expiry dates (if you choose to save reminders)
• Notification preferences

Planning Data

When you use our planners:

• Trip details you enter (destination, dates, group size, occasion, budget, tastes)
• Generated itineraries saved to your account
• Booking checklist progress

Usage Data

We use Plausible Analytics — a privacy-friendly, GDPR-compliant analytics tool — to understand how visitors use our site. Plausible does not use cookies and does not collect personal data. It measures page views, referral sources, and general device information only. No data is sold or shared with advertisers.

3. How We Use Your Data

• To provide and personalise the Indulgence4All service
• To save your itineraries and planning preferences
• To send reminders you have opted into (passport expiry, trip countdown)
• To send marketing emails where you have given explicit consent
• To improve our service based on aggregated, anonymous usage data
• To comply with our legal obligations

4. Legal Basis for Processing

• Contract performance — to provide the service you have signed up for
• Legitimate interests — to improve our service and prevent fraud
• Consent — for marketing emails and optional analytics cookies
• Legal obligation — where required by law

5. Who We Share Data With

We do not sell your personal data. We share data only with trusted service providers who process it on our behalf:

• Clerk — authentication and user account management (Privacy Policy)
• Supabase — secure database storage (Privacy Policy)
• Vercel — website hosting (Privacy Policy)
• Plausible Analytics — privacy-friendly analytics (Privacy Policy)
• Resend — transactional and marketing email delivery

We may also share data where required by law or to protect the rights and safety of Indulgence4All or others.

6. Affiliate Links

Indulgence4All contains affiliate links to third-party services including Booking.com, OpenTable, GetYourGuide, Viator, Kiwi.com, Trainline, Eurostar, Omio, and AirHelp. When you click these links, you may be tracked by those third parties under their own privacy policies. We earn a small commission on qualifying purchases at no extra cost to you. We only recommend services we believe are genuinely useful to our members. See our Affiliate Disclosure for full details.

7. Data Retention

• Account data — retained for as long as your account is active, plus 30 days after deletion
• Itinerary data — retained until you delete it or close your account
• Analytics data — aggregated and anonymous, retained indefinitely
• Email records — retained for up to 2 years

8. Your Rights

Under UK GDPR, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — limit how we process your data
• Portability — receive your data in a portable format
• Object — object to processing based on legitimate interests
• Withdraw consent — at any time for consent-based processing

To exercise any of these rights, email us at hello@indulgence4all.com. We will respond within 30 days.

9. Cookies

Please see our Cookie Policy for full details of the cookies and tracking technologies we use.

10. Security

We take appropriate technical and organisational measures to protect your data. All data is encrypted in transit (HTTPS) and at rest. Authentication is handled by Clerk, which holds ISO 27001 certification. We regularly review our security practices.

11. International Transfers

Some of our service providers operate outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify members of material changes by email. The date at the top of this page shows when it was last updated.

13. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.