Privacy Policy
This Privacy Policy explains how SmartFold AI ("we", "us", "our") collects, uses, shares and protects your personal data when you visit mynext.holiday (the "Site"). We are committed to handling your data lawfully, fairly and transparently, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
SmartFold AI is the data controller responsible for your personal data in connection with this Site. This means we decide how and why your personal data is processed.
- Data controller: SmartFold AI
- Registered / correspondence address: 3rd Floor, 86–90 Paul Street, London, England, EC2A 4NE, United Kingdom
- Contact for privacy & data-subject requests: hello@mynext.holiday
2. What personal data we collect
We keep data collection to a minimum. The Site is a largely static content site — you can browse most of it without providing any personal data and without creating an account (we do not offer user accounts or logins). The data we do collect falls into three groups:
a. Information you choose to give us
We only receive this if you actively submit one of our forms:
- "Plan my trip" enquiry form — your name, email address, and the trip details you provide (rough destination, dates, who is travelling, and any free-text notes).
- Newsletter sign-up — your email address.
You choose what to send us. These forms are the only places on the Site where you knowingly hand us personal data, and they are optional.
b. Technical and usage data (collected automatically)
Like almost all websites, our hosting provider automatically records technical information when your browser requests a page, in server access logs. This can include:
- your IP address;
- your browser type and version, device type and operating system (from the user-agent your browser sends);
- the pages you request, the date and time of each request, and the referring page or source.
We use this operationally and for security — we do not use it to build marketing profiles about you.
c. Analytics — what we do not do
For transparency: at the time of writing we do not run a third-party analytics product such as Google Analytics on the Site, and we do not deploy advertising or conversion-tracking pixels (for example Meta/Facebook or Pinterest pixels). We include passive site-verification meta tags for Google Search Console and Pinterest, which confirm to those services that we own the domain; these tags do not set cookies or track your browsing. If we add analytics in future, we will update this policy and, where required, ask for your consent first.
3. How and why we use your data (lawful bases)
Under UK GDPR we must have a lawful basis (Article 6) for each use of your personal data. Our uses and their bases are:
| Purpose | Data used | Lawful basis |
|---|---|---|
| Responding to a "Plan my trip" enquiry and helping plan/book your trip | Name, email, trip details you submit | Article 6(1)(b) — steps taken at your request prior to entering a contract; and/or Article 6(1)(f) legitimate interests (answering enquiries) |
| Sending our newsletter ("the monthly dispatch") | Email address | Article 6(1)(a) — your consent (you opt in and can withdraw at any time) |
| Operating, maintaining and securing the Site; preventing spam, fraud and abuse; diagnosing technical problems | Server log / technical data | Article 6(1)(f) — legitimate interests (running a safe, reliable website) |
| Measuring referrals to our affiliate partners so we can be credited for bookings you choose to make | Cookies / identifiers set by affiliate partners when you click their links | Article 6(1)(f) — legitimate interests (funding the Site through affiliate commission); consent where required for non-essential cookies |
| Displaying interactive maps | IP address (sent to the map-tile provider to deliver tiles) | Article 6(1)(f) — legitimate interests (providing map features you request) |
Where we rely on legitimate interests, we have considered your rights and freedoms and believe our processing does not override them. You can object to processing based on legitimate interests — see Your rights.
5. Who we share your data with
We do not sell your personal data. We share it only with the service providers ("processors") and partners needed to run the Site and deliver what you ask for:
- Netlify — hosts the Site, stores our form submissions and generates server access logs. Your form data and technical/log data are processed by Netlify on our behalf. Netlify privacy policy.
- Wix — provides the headless content management system that stores the Site's editorial content. This is used to build the pages; it does not, by itself, collect your personal data when you browse. Wix privacy policy.
- Stay22 — powers accommodation affiliate links across the Site; may set cookies for commission attribution. Stay22 privacy policy.
- Tiqets — attraction & activity booking partner; affiliate links/widgets may set attribution cookies. Tiqets privacy policy.
- Travelpayouts (including WeGoTrip links) — affiliate network used for some booking links; may set attribution cookies. Travelpayouts privacy policy.
- Viator — tours & experiences affiliate partner; affiliate links may set attribution cookies. Viator privacy policy.
- Kiwitaxi — airport transfers affiliate partner; its booking widget may set attribution cookies. Kiwitaxi privacy policy.
- Map tile providers (OpenFreeMap / MapLibre and related basemap sources) — deliver the interactive maps; your IP address is sent to the tile server so the map can load.
- Google (Search Console) and Pinterest — we use their site-verification meta tags to prove domain ownership. These do not track your browsing (see section 2c). Google privacy policy · Pinterest privacy policy.
Affiliate links. mynext.holiday earns commission when you book through some of the links and widgets on the Site. When you click such a link, the partner may set a cookie in your browser so that any resulting booking can be credited to us. This does not change the price you pay. Each partner processes your data under its own privacy policy, linked above.
We may also disclose personal data if required to do so by law, or to protect our rights, users or the public.
6. International data transfers
Some of our processors and partners are based outside the United Kingdom, including in the United States. Where your personal data is transferred outside the UK, we rely on appropriate safeguards recognised under UK GDPR, such as:
- transfers to countries covered by UK "adequacy" regulations; or
- contractual protections such as the UK International Data Transfer Agreement (IDTA), or the EU Standard Contractual Clauses (SCCs) together with the UK Addendum.
You can ask us for more information about the safeguards that apply to a particular transfer by emailing hello@mynext.holiday.
7. How long we keep your data
- Enquiry / "Plan my trip" data: kept for as long as needed to handle your enquiry and any resulting trip planning, and for a reasonable period afterwards for our records, then deleted.
- Newsletter data: kept until you unsubscribe or ask us to remove you, after which we delete it (we may keep a minimal suppression record so we don't email you again).
- Server / log data: retained only for a short period for security and troubleshooting, then rotated out.
Where a partner processes data under its own policy (for example affiliate cookies), that partner's retention periods apply.
8. Your rights
Under UK GDPR you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your data ("right to be forgotten"), where applicable.
- Restriction — ask us to limit how we use your data.
- Portability — receive certain data in a structured, commonly used, machine-readable format, or have it transferred to another controller.
- Objection — object to processing based on our legitimate interests, and to direct marketing at any time.
- Rights regarding automated decision-making — we do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
- Withdraw consent — where we rely on your consent (for example the newsletter), you can withdraw it at any time, without affecting processing carried out before you withdrew it.
To exercise any of these rights, email hello@mynext.holiday. We will respond within one month. That period may be extended by up to two further months for complex or numerous requests, in which case we will tell you and explain why. Exercising your rights is free of charge in most cases. We may need to verify your identity before acting on a request.
9. How to complain
If you have a concern about how we handle your personal data, please contact us first at hello@mynext.holiday so we can try to resolve it. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO):
- Information Commissioner's Office (ICO)
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Post: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom
10. Children's privacy
The Site is intended for a general adult audience and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us at hello@mynext.holiday and we will delete it.
11. How we protect your data
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. The Site is served over encrypted HTTPS connections, and we limit access to personal data to those who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to meet our legal obligations.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically. Significant changes may be highlighted more prominently on the Site.
13. Contact us
For any questions about this Privacy Policy or how we handle your personal data, please contact:
- SmartFold AI
- 3rd Floor, 86–90 Paul Street, London, England, EC2A 4NE, United Kingdom
- Email: hello@mynext.holiday