Privacy Policy

Who we are

TripPace is a Namibia self-drive trip planning tool. Our website is trippacenamibia.com. For privacy matters, contact us at privacy@trippacenamibia.com.

We are the data controller for personal data collected through this website. This policy applies to all users of TripPace worldwide. We comply with GDPR (EU/UK) and other applicable privacy laws. Where laws differ, we apply the strictest standard.

What data we collect

We collect only what we need to operate the service. Here is exactly what we collect and why:

• Email address — when you join our waitlist or sign up for launch notifications. Used only to send you the update you requested.
• Consent record — whether you opted in to marketing communications, and when.
• Source page — which part of the site you signed up from. Used to understand which features people are interested in.
• Your planned departure date — if you join the waitlist from within a trip, we store the departure date you entered alongside your email, so we can time our launch reminder usefully. Nothing else from your trip is sent with it.
• Messages you send us — if you submit feedback, ideas, or a note through our forms, we store the text you write (and your email, if you provide one) so we can read it and respond. Please don't include sensitive personal information in free-text fields.
• Trip data — the destinations, dates, and route you build in the planner are processed in your browser. If you create an account and save your trip, we store it on our servers under your email so you can pick it up on another device; otherwise it stays only on your device. You can delete a saved trip at any time.
• A session identifier — a random per-browser ID used to avoid recording duplicate feedback. It is not linked to your email or identity.
• Usage data — with your consent, we use Google Analytics (a Google service) to collect data on how the site is used, including pages visited, interactions, approximate location, and device/browser information. Google Analytics sets cookies and processes this data on Google's servers, which may be outside your country. We use it only to understand and improve the service — not for advertising. See Google's privacy policy for how Google handles this data.

We do not intentionally request or require sensitive personal data. You must be 18 or older to use TripPace. We do not knowingly collect personal data from anyone under 18, and will take reasonable steps to delete such data promptly if we become aware of it.

How we use your data

We use your data only for the purpose it was collected:

• To send you the launch update or notification you requested
• To deliver the trip planning service you use
• To process your payment if and when paid plans become available
• To improve the service based on anonymous usage patterns
• To respond to your support or privacy requests

We will never sell your data to third parties. We will never share your data with advertisers. We will never use your data for purposes beyond what is listed above without asking you first.

Legal basis for processing (GDPR)

Under GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:

• Consent — for sending waitlist and marketing emails. You can withdraw consent at any time by emailing us or clicking unsubscribe.
• Contract performance — for delivering the service you use and, when paid plans become available, processing payments and delivering what you paid for.
• Legitimate interests — for server logs and fraud prevention. We have assessed these interests and they do not override your rights.

How long we keep your data

• Waitlist emails — kept until 12 months after TripPace Build My Trip launches, then deleted unless you become a customer.
• Customer account data — kept for the duration of your relationship with us plus 7 years for legal and tax purposes.
• Server logs — 30 days.
• Trip planning data — trip data held in your browser is cleared when you clear your session. A trip you save to your account is kept on our servers until you delete it or ask us to remove it.

You can request deletion of your data at any time. See your rights below.

Who we share data with

We use a small number of trusted services to operate TripPace. Each acts as a data processor on our behalf and is bound by appropriate data processing agreements:

• Base44 — our application platform, providing infrastructure hosting and contact data storage. Base44 acts as a data processor compliant with applicable data protection laws.
• SendGrid (Twilio) — email delivery for waitlist updates and transactional emails. SendGrid is GDPR-compliant under Twilio's Data Protection Addendum. SendGrid Privacy Policy
• Stripe — payment processing, once paid plans become available. Stripe is PCI-DSS compliant and GDPR-ready; we do not store your card details. Stripe Privacy Policy
• Mapbox — map rendering. Map interactions may be logged by Mapbox. Mapbox Privacy Policy
• Google Analytics — website usage analytics, to measure and improve how the site performs. Google processes this data on its own infrastructure. Google Privacy Policy

We do not share your data with any other third parties. We will update this list if that changes.

Affiliate relationships

TripPace works with third-party partners, including Expedia and other advertisers, who may track, collect, use, store, share, and disclose data about your visit, and who may serve advertisements and use cookies, pixels, and similar tracking technologies as part of that relationship.

Some links on this site — including links to Expedia, Booking.com, and Amazon — are affiliate links. If you click through and complete a qualifying purchase or booking, TripPace Namibia may earn a commission from that partner, at no additional cost to you. This does not affect the price you pay, and it does not influence which properties or products we choose to feature. We may add or remove affiliate partners over time; this section covers our affiliate relationships generally, regardless of which specific partners are active at any given time.

International data transfers

Data is stored securely using cloud infrastructure providers with appropriate safeguards in place. Where required by applicable law, we ensure Standard Contractual Clauses or equivalent protections are in place for international data transfers.

Your rights

You have the following rights over your personal data. To exercise any of them, email privacy@trippacenamibia.com. We will respond within 30 days.

• Right of access — you can request a copy of all data we hold about you.
• Right to correction — you can ask us to correct inaccurate data.
• Right to erasure — you can ask us to delete your data. We will do so unless we have a legal obligation to retain it.
• Right to withdraw consent — if we are processing your data based on consent, you can withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.
• Right to data portability — you can request your data in a machine-readable format.
• Right to object — you can object to processing based on legitimate interests.
• Right to restrict processing — you can ask us to pause processing of your data in certain circumstances.

If you are in the EU or UK and believe we have not handled your data correctly, you have the right to lodge a complaint with your local supervisory authority. In the EU this is your national Data Protection Authority. In the UK this is the ICO (ico.org.uk).

Cookies

TripPace uses essential cookies required to operate the service (session management and security). These are always active because the site cannot work without them. We do not use advertising cookies or run cross-site advertising of any kind.

We also use Google Analytics to understand how the site is used. Google Analytics sets cookies, but only if you accept them — on your first visit a banner asks for your choice, and analytics cookies are not set unless you select "Accept". If you decline, no analytics cookies are set and the site works exactly the same.

To change your choice, clear this site's cookies and stored data in your browser settings; the banner will appear again on your next visit so you can choose differently. You can also opt out of Google Analytics across all sites using Google's opt-out browser add-on.

Data security

We use industry-standard technical and organisational measures to protect your data — including encrypted connections (HTTPS), access controls, and trusted infrastructure providers. While no system can guarantee absolute security, we take data protection seriously and act promptly on any identified risks. If we become aware of a data breach that affects your rights, we will notify you and the relevant supervisory authority as required by law.

Changes to this policy

We may update this policy as the service evolves. We will notify waitlist subscribers of material changes by email. The updated policy will always be available at trippacenamibia.com/privacy with the date it was last updated.

Contact us

For any privacy questions or requests:

• Email — privacy@trippacenamibia.com
• Response time — we aim to respond within 5 business days and will always respond within 30 days as required by law.