Effective Date: June 30, 2026
Last Updated: June 30, 2026
At WorldsWaiting.com (referred to as "we," "us," or "our"), protecting your Personal Data is a fundamental priority. Because the world is waiting for you to explore it, we want you to feel entirely secure while navigating our platform. This Privacy Policy outlines how we collect, use, process, and safeguard your Personal Data when you visit our website, use our mobile applications, or book travel experiences through our platform.
1. Information We Collect
We collect information to provide better services to our users and to streamline your travel journeys. The types of data we collect include:
A. Information You Provide Voluntarily
Identity & Contact Data: Your full name, email address, physical address, phone number, and date of birth.
Travel Documentation: Passport information, nationality, or visa details when strictly required by activity providers or transportation authorities.
Account Details: Username, password, and profile preferences if you create an account.
User Feedback: Ratings, reviews, travel photos, or customer support inquiries you share with us.
B. Information Collected Automatically
When you visit WorldsWaiting.com, our servers automatically log standard technical data:
Device Data: Your IP address, browser type, operating system, and device-specific settings.
Usage Data: Latency metrics, URLs visited, clickstream data, and the date and time of your interactions.
Cookies & Tracking: We use session cookies, persistent cookies, web beacons, and tracking pixels to optimize site performance and manage our marketing strategies.
C. Financial Data
Payment Details: When booking an activity, your payment is processed securely via encrypted third-party payment gateways. We do not store your full credit card numbers or financial passwords on our servers.
2. Legal Basis and How We Use Your Data
We process your data strictly under valid legal frameworks outlined in the General Data Protection Regulation (GDPR) and other applicable privacy laws:
Performance of a Contract (Art. 6 para. 1 lit. b GDPR): To fulfill, manage, and confirm your travel bookings, and to transmit your reservation details to chosen Activity Providers.
Legitimate Interests (Art. 6 para. 1 lit. f GDPR): To protect our platform from fraud, improve network latency, analyze user experiences, and send marketing materials regarding similar travel services (unless you opt out).
Consent (Art. 6 para. 1 lit. a GDPR): For targeted marketing cookies, newsletter subscriptions, or recording customer service calls for quality assurance. You may withdraw consent at any time.
3. Data Sharing and International Transfers
Because the world's waiting, providing global travel experiences requires us to share necessary information with specific trusted partners:
Activity & Travel Providers: Independent local tour operators, hotels, or agencies responsible for executing your booked itinerary. They act as independent data controllers under their own respective privacy policies.
Technical & Infrastructure Vendors: Secure hosting providers, global payment processors, customer support platforms, and fraud prevention services.
Legal Compliance: When required by law, subpoenas, or regulatory authorities to protect our legal rights or ensure user safety.
International Transfers: If your data is transferred outside the European Economic Area (EEA) or the United Kingdom, we guarantee proper safeguards are implemented, such as the European Commission's Standard Contractual Clauses (SCCs) or relying on recognized data privacy frameworks.
4. Your Rights and Choices
Depending on your jurisdiction (such as the EU, UK, or states like California), you possess specific legal rights regarding your Personal Data:
Right of Access & Portability: Request a copy of the personal data we hold about you in a structured format.
Right to Rectification: Request corrections to inaccurate or incomplete personal profile records.
Right to Erasure ("Right to be Forgotten"): Request that we permanently delete your data, subject to valid legal retention requirements (e.g., financial tax records).
Right to Object or Restrict Processing: Object to direct marketing or opt out of non-essential cookie tracking by adjusting your preferences in our website footer.
To exercise any of these rights, please contact our Data Protection Team at the email address provided in Section 7.
5. Data Security and Retention
Security Measures: We implement rigid technical and organizational safety measures—including tokenization, firewalls, and SSL/TLS encryption—to mitigate risks of unauthorized access, destruction, or alteration of your personal data.
Retention Policy: We retain your data only for as long as necessary to complete your travel contracts, fulfill customer service interactions, or satisfy corporate tax and regulatory holding periods.
6. Children's Privacy
Our platform is built for adult travelers and coordinates travel for minors only with direct parental or guardian consent. We do not knowingly collect personal data from individuals under the age of 16 without explicit parental verification.
7. Contact Us and Controller Details
For questions regarding this policy, or to manage your profile options, you can reach out directly to our Data Controller:
Data Controller: Salto di Domenico Paolillo
Postal Address: Corso Umberto I, n° 57 Cava de' Tirreni Salerno
Contact Email: hello@worldswaiting.com
Disclaimer: While this text covers core privacy standards (GDPR, CCPA, and standard e-commerce logic), data regulations vary significantly by specific operational jurisdiction and precise backend tools. It is recommended to have a legal professional review this final draft alongside your actual technical architecture before deployment.
