Privacy Policy

1. Who we are

Alpage is a practical guide to the Haute Tarentaise, operated by COCO Software Ltd, a company registered in England and Wales (company number 13387646), whose registered office is at 56 Cowleigh Bank, Malvern, England, WR14 1PH.

In this policy, "Alpage", "we", "us" and "our" mean COCO Software Ltd trading as Alpage.

We are the controller of the personal data described in this policy, which means we decide how and why it is used. The one exception is data that a business customer uploads about their own guests, where we act on that business's behalf. Section 7 explains how that works.

If you have any questions, email hello@alpageapp.com.

2. The short version

The rest of this policy explains each of these in more detail.

3. When you visit the site

We use analytics tools to understand how people use Alpage, so we can make it better. These only run if you accept analytics cookies in the cookie banner, and you can change your choice at any time using the cookie settings link at the bottom of every page.

• Google Analytics records pages visited, time on page, approximate location (country or city level), device and browser type, and how you arrived at the site.
• Microsoft Clarity records how you interact with pages: clicks, scrolling and mouse movement, which it can replay as a session recording. We use it to find parts of the site that are confusing or broken.
• Lovable, our hosting platform, collects basic usage data such as page requests and error logs to keep the site running.

These tools process your IP address and device information. We use them to look at patterns across all visitors, not to identify you.

Strictly necessary cookies, such as the ones that keep you signed in, are set without consent because the site cannot work without them.

4. If you create an account

When you sign in with Google, we receive and store your name, email address, profile picture and Google account identifier. We also store the places you save and the lists you create or share.

We use this to provide your account. Our legal basis is contract: we need the data to give you the service you've signed up for.

5. If you have a Business subscription

For Business accounts we also hold:

• your business name, and the name, email address and phone number of the people who manage the account
• your billing address and VAT number
• the logo, colours, text and other branding you upload
• the lists and guide content you create for your guests
• if you use guest lists, the guest data covered in section 7

Our legal basis is contract.

6. Payments

Payments are handled by Stripe. When you subscribe, you enter your card details directly into Stripe's secure payment form. We never see or store your full card number.

From Stripe we receive and keep: your Stripe customer ID, your subscription status and payment history, your billing name, email and address, your VAT number, and your card brand, last four digits and expiry date so we can tell you which card is on file.

Stripe also acts as an independent controller for some processing, such as fraud prevention and meeting its own legal and regulatory obligations. That processing is covered by Stripe's privacy policy.

We keep billing records for six years because UK tax law requires it. This applies even if you ask us to delete your account: we will delete everything else, but we are legally required to keep the financial record. Our legal basis for that retention is legal obligation.

7. When we act for a business customer

Some businesses that use Alpage, such as chalet companies and property managers, can upload details about their own guests, for example names, email addresses and stay dates, so they can share a branded guide with them.

For that data, the business is the controller and we are its processor. We only use it to provide the service to that business, under the data processing terms set out in our Terms.

If you are a guest and want to know what data a business holds about you, or want it corrected or deleted, please contact that business directly. If you contact us, we will pass your request on to them.

8. Affiliate links

Some links on Alpage are affiliate links, which means we may earn a commission if you book or buy something after clicking them. It never changes the price you pay, and it doesn't decide what we recommend.

When you click an affiliate link, you are taken through our affiliate network, Kwanko, to the retailer's site. Kwanko and the retailer may set cookies or use similar technology to record that the booking came from Alpage. They do this as independent controllers under their own privacy policies.

9. Emailing us

If you email us, we use your email address and anything you tell us to reply. Our legal basis is legitimate interests: we have a genuine interest in answering the people who contact us. We keep correspondence only as long as we need to deal with it, and no more than two years.

10. Who we share data with

We don't sell your data. We share it only with the service providers who help us run Alpage, who act on our instructions:

We may also share data if the law requires it, or to protect our rights, for example in a payment dispute.

11. International transfers

Some of our providers process data outside the UK and the European Economic Area, mainly in the United States. Where they do, the transfer is protected by one of the following:

• the UK's adequacy regulations, including the UK Extension to the EU-US Data Privacy Framework, for providers certified under it
• the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum

You can ask us for more detail on the safeguard that applies to any provider.

12. How long we keep data

• Analytics: up to 14 months, then deleted automatically.
• Personal accounts: until you delete your account.
• Business accounts: while your subscription is active or paused. If you cancel, we keep your account, branding and lists for 24 months so you can come back without setting everything up again, then delete them. You can ask us to delete them sooner.
• Guest data uploaded by a business: deleted 90 days after that business cancels, or sooner if the business deletes it.
• Billing records: six years, as required by UK tax law.
• Emails: as long as needed to deal with them, and no more than two years.

13. Your rights

You have the right to:

• access the personal data we hold about you
• correct anything that's wrong
• delete your data, subject to the billing records we must keep
• restrict or object to how we use your data
• receive your data in a portable format
• withdraw consent at any time, for example by changing your cookie settings

To use any of these rights, email hello@alpageapp.com. We'll respond within one month.

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk. If you live in France, you can complain to the CNIL at cnil.fr.

14. Children

Alpage isn't aimed at children under 13, and Business accounts are only for adults acting on behalf of a business.

15. Changes to this policy

If we change this policy, we'll update the date at the top. If a change affects how we use data you've already given us, we'll tell account holders by email before it takes effect.