Privacy Policy
How Holiday Calendar collects, uses, and protects your information. The short version: we collect very little, we never sell it, and you can delete it anytime.
Introduction
In short: What this policy covers and who we are.
Welcome to Holiday Calendar ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our holiday calendar website and services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.
Information We Collect
In short: Account basics from sign-in, your liked holidays, and standard log data.
2.1Information You Provide Directly
- Account Information: When you create an account using Google or Facebook OAuth, we collect your name, email address, and profile picture.
- Holiday Preferences: We track which holidays you "like" or mark as favorites to personalize your experience.
- Usage Data: Information about how you interact with our website, including pages visited and features used.
2.2Information Collected Automatically
- Log Data: We automatically collect certain information when you visit our website, including your IP address, browser type, operating system, and access times.
- Cookies and Similar Technologies: We use cookies and similar tracking technologies to enhance your experience and analyze usage patterns.
- Device Information: Information about your device, including device type, operating system, and browser version.
How We Use Your Information
In short: To run the service, personalize it, keep it secure, and improve it.
We use the information we collect to:
- Provide and maintain our holiday calendar services
- Personalize your experience by showing your liked holidays
- Process your authentication and maintain your account
- Send you important updates about our services
- Analyze usage patterns to improve our website
- Prevent fraud and ensure the security of our services
- Comply with legal obligations
Information Sharing and Disclosure
In short: We never sell your data. It is shared only in a few narrow cases.
We do not sell, trade, or otherwise transfer your personal information to third parties, except in the following circumstances:
- Service Providers: We may share information with trusted third-party service providers who assist us in operating our website and conducting our business (e.g., Cloudflare for hosting and database services).
- Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
- Consent: We may share your information with your explicit consent.
Data Security
In short: Encryption in transit and at rest, access controls, secure hosting.
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
Our security measures include:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication systems
- Secure hosting infrastructure through Cloudflare
Data Retention
In short: We keep data only as long as needed to run the service.
We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this privacy policy. When you delete your account, we will delete your personal information, except where we are required to retain it for legal or regulatory purposes.
Your Rights and Choices
In short: Access, correct, delete, or export your data at any time.
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request access to your personal information
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information
- Portability: Request a copy of your data in a portable format
- Objection: Object to certain processing of your information
- Withdrawal of Consent: Withdraw consent where processing is based on consent
To exercise these rights, please contact us using the information provided in the "Contact Us" section below.
Data Deletion and Account Removal
In short: One email deletes your account. Processed within 30 days.
Your Right to Data Deletion: You have the right to request that we delete your personal data from our systems. We provide multiple ways for you to request data deletion:
8.1How to Request Data Deletion
To request data deletion, please contact us at:
- Email: Send an email to support@holidaycalendar.io with the subject "Data Deletion Request" and include your email address associated with your account.
8.2What Data We Delete
When you request data deletion, we will remove:
- Your account information (name, email, profile picture)
- Your holiday preferences and likes
- Your usage data and analytics
- Any other personal information associated with your account
8.3Data Deletion Timeline
We will process your data deletion request within 30 days of receiving your request. You will receive a confirmation email once your data has been successfully deleted from our systems.
8.4Data Retention Exceptions
Please note that we may retain certain information for legal or regulatory purposes, including:
- Information required for tax or accounting purposes
- Information needed to resolve disputes or enforce our terms
- Anonymized data that cannot be linked back to you
8.5Third-Party Data
If you used Google or Facebook OAuth to create your account, you may also need to manage your data through those platforms. We only store the information provided to us by these services and will delete our copies upon your request.
Third-Party Services
In short: Google, Facebook, and Cloudflare have their own privacy policies.
Our website integrates with the following third-party services:
- Google OAuth: For user authentication. Google's privacy policy applies to data collected through their service.
- Facebook OAuth: For user authentication. Facebook's privacy policy applies to data collected through their service.
- Cloudflare: For hosting, security, and performance services. Cloudflare's privacy policy applies to their services.
We encourage you to review the privacy policies of these third-party services.
Children's Privacy
In short: Not for children under 13. We do not knowingly collect their data.
Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
International Data Transfers
In short: Transfers follow applicable data protection laws and safeguards.
Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.
Changes to This Privacy Policy
In short: Updates are posted here with a new "Last updated" date.
We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. You are advised to review this privacy policy periodically for any changes.
Contact Us
In short: Questions? Email support@holidaycalendar.io.
If you have any questions about this privacy policy or our privacy practices, please contact us:
- Email: support@holidaycalendar.io
- Website: https://www.holidaycalendar.io