URNXT Adventure Privacy Policy

This policy describes what URNXT Adventure actually collects and does today. Where a practice is not yet implemented, this policy says so rather than claiming it.

1. Information you provide We collect the information you enter into the platform: registration details, profile details, reservation details, messages, reviews, support requests, and anything you upload.

2. Account information Name, email address, password credentials handled by our authentication provider, account status, roles, and organization membership.

3. Provider business information Business name, contact details, business documentation, licences and permits, insurance references, staff and guide records, resource and asset records, and verification submissions.

4. Reservation information Adventure booked, dates, party size, pricing, payment status, add-ons, changes, cancellations, and reservation history.

5. Participant information Participant names, ages where required for eligibility or safety, emergency contacts, and any medical or dietary notes you choose to provide. Sensitive identifiers such as dates of birth and identity document references are redacted from provider-facing rosters.

6. Payment-related information Payments are processed by our payment partner. We store payment status, amounts in minor currency units, payment and refund identifiers, payout records, and dispute records. We never receive or store full card numbers or card security codes.

7. Location information Search locations, listing regions, and approximate map locations. Public map results use a deliberately reduced-precision centroid rather than exact coordinates.

8. Land use location privacy, exact coordinates, and access details Exact coordinates, gate codes, access routes, and private property instructions are withheld until the required payment conditions for a reservation are satisfied, and they are never included in waitlist offers, marketing, or public listing pages.

9. Uploaded documents Documents you upload are stored in private storage that is not publicly readable and is served only through short-lived signed links to authorized parties.

10. Waivers and signatures We store waiver templates, the version signed, the signature event, the signing timestamp, and the signer identity, so signed waivers remain verifiable.

11. Communications Messages between customers, providers, guides, and support, along with delivery records. Messages are automatically screened for payment card patterns, which are masked before storage.

12. Reviews Review content, ratings, criteria scores, provider responses, and moderation decisions.

13. Support cases Support tickets, case notes, attachments, and the internal decisions attached to them.

14. Device and technical information IP address, browser user agent, and request metadata, used for security, fraud prevention, rate limiting, and diagnosing errors.

15. Cookies We use strictly necessary cookies and local storage for authentication, session management, security, checkout, and core reservation functionality. Preference, analytics, and marketing storage is used only after you consent, and your consent choices are themselves recorded.

16. Analytics Product and marketplace analytics run only after analytics consent is granted. Aggregate operational metrics derived from your reservations are processed as operational data.

17. Marketing communications Promotional email is sent only to people who have opted in. Opting in is never a condition of booking, and joining a waitlist does not subscribe you to marketing. You can withdraw promotional consent at any time in your account settings.

18. Fraud prevention We evaluate payments, accounts, and listings for fraud signals and may record risk assessments, flags, and blacklist entries.

19. Security monitoring We log administrative access to sensitive records, privileged actions, and security-relevant events in append-only audit records.

20. Payment processors Stripe processes payments and provider payouts. Payment and identity information you enter into Stripe's hosted components is handled by Stripe under its own privacy terms.

21. Email providers Transactional email is delivered through our email infrastructure provider, which receives the recipient address and message content in order to deliver it.

22. Mapping providers Map tiles and geocoding are served by a mapping provider, which receives the map requests your browser makes.

23. Cloud hosting The application, database, and file storage are hosted with our cloud infrastructure provider.

24. Data sharing We share information with providers only as needed to deliver a booked adventure, with the processors listed above, and with parties you direct us to. We do not sell personal information.

25. Legal disclosures We may disclose information where required by law, legal process, or to protect the rights, property, or safety of users, providers, or the public.

26. Data retention We retain reservation, payment, waiver, dispute, and audit records for as long as needed to operate the marketplace and to meet legal, tax, and safety obligations. We do not currently operate an automated deletion schedule; deletion requests are handled individually on request.

27. Security practices Access to data is enforced at the database level by row-level security, privileged operations run only server-side, private files are served through expiring signed links, and administrative access to sensitive records is audited. No system is perfectly secure, and we do not claim that all data is encrypted at rest beyond the protections provided by our infrastructure providers.

28. Your rights Depending on your location, you may have rights to access, correct, export, restrict, or delete your personal information, and to object to certain processing. Contact service@urnxtadventure.com to exercise these rights.

29. Account deletion You can request account deletion by contacting service@urnxtadventure.com. Records we are required to keep are retained where legally required.

30. Marketing opt-out Every promotional email includes an unsubscribe link, and marketing preferences can be changed in account settings. Essential messages about an active reservation, a payment, a security event, or your account status will continue.

31. Cookie controls You can change or withdraw cookie consent at any time using the Cookie Settings link in the footer or in your account settings.

32. Children and minor participants The platform is not intended for use by children. Accounts require an adult. Minors may participate in adventures only when booked and supervised by a responsible adult, who provides any minor participant information.

33. International users The platform is operated from and hosted in the United States. If you access it from elsewhere, including the EU and UK, your information will be transferred to and processed in the United States.

34. Policy changes This policy is versioned. Each revision is published with its own version number and effective date, and prior versions remain available.

35. Contact information Privacy and general enquiries: service@urnxtadventure.com Legal entity: [PLACEHOLDER: legal business name] Registered address: [PLACEHOLDER: registered business address]

36. Security reporting Report suspected vulnerabilities or account compromise to security@urnxtadventure.com.