Privacy Policy

This Privacy Policy explains how HexaRêve (TraveNexia Ltd, “we”, “us”) collects, uses and protects personal data when you use hexareve.com and book travel in France with us. We act as data controller for this website.

Who we are

HexaRêve is a trading name of TraveNexia Ltd. For any data-protection question or request, contact hello@hexareve.com.

What we collect

• Contact details (name, email, phone) you submit through enquiry and booking forms.
• Trip details such as dates, party size, pickup point, region, accommodation or campsite preferences and special requests.
• Payment confirmation data from our payment processors — we never see or store full card numbers.
• Account data if you create one: email, hashed password, saved trips and enquiries.
• Technical and usage data: pages visited, device type, approximate location, and cookies as described in our Cookie Policy.

Why we process it, and our legal basis

• Contract — to quote, confirm and deliver the tour, stay, transfer or crossing you booked and to provide customer care.
• Legitimate interest — to keep the site secure, prevent fraud and improve our France travel content.
• Consent — analytics and marketing cookies, and any newsletter or offer emails. You can withdraw consent at any time.
• Legal obligation — accounting, tax and consumer-protection record keeping.

Who we share it with

We share the minimum data needed with the supplier delivering your booking — guide, driver, hotel, château, villa or campsite operator, ferry, rail or activity partner — plus our payment processor, email provider and hosting/infrastructure providers acting as processors under contract. We do not sell your data or share it with advertisers without consent.

International transfers

Our providers are primarily in the EU/EEA or the UK. Where data reaches a country without an EU adequacy decision, transfers are covered by Standard Contractual Clauses.

How long we keep it

• Enquiries that do not lead to a booking: up to 24 months.
• Booking and invoice records: 10 years, as required for accounting purposes.
• Account data: until you delete your account, plus a short backup window.
• Cookie consent: 6 months; analytics identifiers: maximum 13 months.

Security

Traffic is encrypted in transit, access to booking data is restricted to staff who need it, and passwords are stored hashed. No system is perfectly secure, but we review our controls regularly.

Children

The site is not directed at children under 16. Children travel as part of a booking made by an adult, who provides their details.

Your rights

You may request access, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interest, by emailing hello@hexareve.com. See our GDPR Statement for detail. You also have the right to complain to your national supervisory authority — in France, the CNIL.

Changes

We update this policy as our service evolves; the “last updated” date above always reflects the current version.