Privacy Policy

Last updated: January 28, 2026

1. Introduction

LowSeven (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us, including:

  • Account information (name, email address, password)
  • Profile information (profile picture, bio, preferences)
  • Booking information (travel details, special requests)
  • Payment information (processed securely through our payment partners)
  • Communication data (messages, reviews, feedback)
  • Identity verification documents (if required)

2.2 Automatically Collected Information

When you use our Platform, we automatically collect:

  • Device information (IP address, browser type, operating system)
  • Usage data (pages visited, time spent, interactions)
  • Location data (with your permission)
  • Cookies and similar tracking technologies

2.3 Information from Third Parties

We may receive information from:

  • Social media platforms (if you choose to connect your account)
  • Activity providers and tour guides
  • Payment processors
  • Analytics providers

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our Platform
  • Process bookings and transactions
  • Communicate with you about your bookings and account
  • Send marketing communications (with your consent)
  • Personalize your experience and provide recommendations
  • Detect, prevent, and address fraud and security issues
  • Comply with legal obligations
  • Analyze usage patterns and improve our services
  • Facilitate communication between users and providers

4. Legal Basis for Processing

We process your personal data based on:

  • Contract performance: To fulfill our obligations under our Terms of Service
  • Consent: For marketing communications and optional features
  • Legitimate interests: To improve our services and prevent fraud
  • Legal compliance: To meet regulatory requirements

5. How We Share Your Information

We may share your information with:

5.1 Activity Providers

We share necessary booking information with activity providers to facilitate your reservations.

5.2 Service Providers

We work with third-party service providers for:

  • Payment processing
  • Email communications
  • Analytics and performance monitoring
  • Customer support
  • Fraud detection and prevention

5.3 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and audits
  • Access controls and authentication mechanisms
  • Employee training on data protection

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

7. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. When your data is no longer needed, we securely delete or anonymize it.

Typical retention periods:

  • Account data: Until account deletion plus legal retention period
  • Booking records: 7 years for accounting and legal purposes
  • Marketing communications: Until you opt out
  • Usage logs: 2 years

8. Your Rights and Choices

You have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data (subject to legal obligations)
  • Restriction: Limit how we use your data
  • Portability: Receive your data in a machine-readable format
  • Object: Object to processing based on legitimate interests
  • Withdraw consent: Opt out of marketing communications

To exercise these rights, please contact us at privacy@lowseven.com.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. Types of cookies we use:

  • Essential cookies: Required for Platform functionality
  • Performance cookies: Help us understand how users interact with the Platform
  • Functionality cookies: Remember your preferences
  • Advertising cookies: Deliver relevant ads (with your consent)

You can control cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your data during international transfers.

11. Children's Privacy

Our Platform is not intended for children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Third-Party Links

Our Platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and updating the “Last updated” date. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or how we handle your personal data, please contact us:

Email: privacy@lowseven.com
Address: [Your Company Address]
Data Protection Officer: [DPO Contact Information]

15. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your local data protection authority.