Privacy Policy

Last updated October 26, 2026

Chic Trip is operated by WANDERCHIC TRAVEL, SASU, a French company registered in Paris (RCS Paris 999 119 472), 50 avenue des Champs-Élysées, 75008 Paris, France, and registered with Atout France as a travel operator under number IM075260066. In this policy, "we", "us" and "Chic Trip" mean WANDERCHIC TRAVEL. We are the data controller for the personal information described here.

This policy explains what we collect, why, who we share it with, how long we keep it and what rights you have. It applies to the website chic-trip.com, the Chic Trip app (iOS, Android and web), our emails, calls and messages, and the trips we plan and book for you.

Questions or requests: contact@chic-trip.com, or use the privacy request form.

1. What we collect

What you give us.

Identity and contact details: name, email address, phone number, WhatsApp number, country, and the names and ages of the people travelling with you when you share them.
Your trip: destinations, dates, budget, the kind of trip you want, preferences, dietary requirements, accessibility needs, hotel and restaurant choices, questionnaire answers and anything you write to us.
Account details: the email and password you create, or the identity confirmed by Google or Apple when you sign in with them (name, email, account identifier). We never see your Google or Apple password.
Booking details needed by suppliers: passenger names as they appear on identity documents, dates of birth, passport or ID details when a supplier requires them (for example trains, flights or certain tickets), and special requests.
Payment information: payments are processed by Stripe. We receive the status of the payment, the last four digits of the card, the card brand and the billing details. We never receive or store full card numbers.
Documents and photos you upload or we add to your trip: tickets, vouchers, confirmations, pictures.
Reviews and testimonials you choose to give us.

What we collect when you use our services.

Communications: emails, WhatsApp and SMS messages, and messages sent in the app. Phone and video calls with us may be recorded and transcribed so that we can plan accurately from what you told us.
Usage and technical data: pages viewed, actions in the app, device type, operating system, browser, language, approximate location derived from your IP address, referring page and the campaign that brought you to us.
Cookies and similar technologies, as described in our Cookie Policy.
Data stored on your device: the app keeps a copy of your trip, documents and maps on your phone so that it works offline. That copy stays on your device until you sign out, delete the app or clear its data.

What we receive from others. Suppliers send us confirmations, booking references and sometimes changes to your reservation. Scheduling tools (Calendly) send us the appointment you booked. Advertising platforms tell us, in aggregate, which campaign a visit came from.

2. Why we use it and on what legal basis

Purpose	Legal basis (GDPR)
Answering your enquiry, preparing a proposal, designing your itinerary	Steps taken at your request before a contract, then the contract
Booking hotels, restaurants, tickets, guides, transport and experiences with suppliers	Performance of the contract
Running your account and the app, including offline access and the concierge chat	Performance of the contract
Taking payments, issuing invoices and keeping accounting records	Contract and legal obligation (French commercial and tax law)
Assisting you during the trip, including emergency contact and changes	Contract and our legitimate interest in looking after you
Following up on a proposal or an unfinished questionnaire, by email, phone or message	Our legitimate interest in responding to a request you started; you can opt out at any time
Measuring and improving our own website, app and itineraries (first-party usage measurement, error monitoring, testing)	Legitimate interest
Google Analytics cookies that count visits across sessions	Legitimate interest, with the right to opt out
Advertising measurement and audience building on Google, Meta, Microsoft and Pinterest	Legitimate interest, with the right to opt out
Security, fraud prevention, abuse prevention, defending claims	Legitimate interest and legal obligation
Complying with travel-operator obligations and responding to authorities	Legal obligation

We do not sell personal information, and we do not make decisions about you by automated means that have legal or similarly significant effects.

3. How we use AI tools

We use AI models (currently from Anthropic, OpenAI and Perplexity) to help draft itineraries, enrich descriptions of places, answer questions in the in-app chat and prepare replies. What you type in the chat, and relevant parts of your trip, may be sent to these providers to generate an answer. These providers process the content on our behalf and, under their business terms, do not use it to train their models. A human at Chic Trip remains responsible for every itinerary, price and booking: AI suggestions are proposals, not decisions.

Travel suppliers: hotels, restaurants, guides, drivers, museums, ticket platforms, rail and air carriers, insurers and local partners receive only what they need to deliver the service you booked (typically names, dates, party size, contact details and special requests). Each supplier processes that information under its own privacy terms.
Service providers working for us, under contracts that limit what they may do with your data: hosting and database (Supabase, Netlify, Cloudflare), payments (Stripe, and PayPal where offered), email (Google Workspace, Resend), calls and messages (OpenPhone, WhatsApp), scheduling (Calendly), customer relationship management (Attio), accounting (Pennylane), product analytics and error monitoring (PostHog, Sentry, Microsoft Clarity), maps and places (Google Maps), AI assistance (Anthropic, OpenAI, Perplexity), and advertising measurement (Google, Meta, Microsoft, Pinterest).
Professional advisers and authorities when the law requires it or to establish, exercise or defend legal claims.
A buyer or successor if our business is sold or reorganised, under the same commitments.

We do not share your contact details with other travellers or publish them. Reviews are published only with your agreement and with the name you approve.

5. Where your data goes

We are based in France. Some of the providers above process data in the United States or other countries outside the European Economic Area. Where that happens we rely on the European Commission's adequacy decisions (including the EU-US Data Privacy Framework for certified providers) or on the Standard Contractual Clauses, together with technical safeguards such as encryption in transit and at rest. You can ask us for details of the safeguards used for a particular provider.

6. How long we keep it

Your account and trips: for as long as your account exists. You can delete your account yourself in the app settings; this removes your account, trips, uploaded documents and preferences, except what we must keep by law.
Invoices, payments and booking records: ten years after the end of the financial year, as required by French accounting law.
Proposals, questionnaires, correspondence, call recordings and transcripts: for as long as necessary to answer your request, plan and operate your trip and handle any follow-up or claim, then deleted or anonymised.
Analytics and advertising data: the periods set out in the Cookie Policy.
Security and technical logs: for as long as necessary to keep the service secure.

7. How we protect it

Data is encrypted in transit (TLS) and at rest with our hosting providers. Access to client data inside Chic Trip is limited to the people who plan and operate your trip, protected by individual accounts and multi-factor authentication. Database access rules are enforced row by row, so that an account can only read its own trips. Payment data is handled by Stripe, which is PCI-DSS certified. No system is perfectly secure; if a breach affects you, we will tell you and the competent authority as the law requires.

8. Children

Our services are for adults. Parents and guardians give us the details of children travelling with them (name, age, needs) so that we can plan and book for the family. We do not knowingly collect information directly from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.

9. Your rights

Wherever you live, you can ask us to:

access the personal information we hold about you and receive a copy;
correct it if it is inaccurate or incomplete;
delete it, subject to what we must keep by law;
receive it in a portable format (for information you gave us, processed by automated means);
restrict or object to certain processing, including direct marketing at any time;
withdraw consent where processing is based on consent, without affecting what was done before.

To exercise these rights, use the privacy request form or email contact@chic-trip.com. We may ask you to confirm your identity. We answer within one month, extendable by two months for complex requests, and we will tell you if that happens. You can also delete your account directly in the app, and record your cookie preference at any time from the "Cookie Preferences" link in the footer.

If you are in the European Economic Area, you can complain to your local data protection authority; in France this is the CNIL (cnil.fr). If you are in the United Kingdom, the Information Commissioner's Office. We would appreciate the chance to resolve your concern first.

10. Residents of the United States

Most of our clients live in the United States. Depending on your state (for example California, Colorado, Connecticut, Virginia, Texas, Oregon and others), you may have rights to know, access, correct, delete and port your personal information, to opt out of the "sale" or "sharing" of personal information and of targeted advertising, and not to be discriminated against for exercising these rights. The rights listed in section 9 and the request form cover these requests, and we apply them to everyone regardless of where they live.

We do not sell personal information. We use advertising cookies and pixels from Google, Meta, Microsoft and Pinterest to measure our advertising and to reach people who visited our website; some state laws treat this as "sharing" or "targeted advertising". To opt out, use the request form (choose "Do not sell or share my personal information"), the opt-out settings of the platforms listed in our Cookie Policy, or your browser's cookie settings; you can also record your preference under Cookie Preferences in the footer. We do not knowingly sell or share the personal information of people under 16. You may authorise an agent to make a request for you; we will ask for proof of the authorisation.

Categories of personal information collected in the last twelve months: identifiers and contact details, trip and preference information, commercial information (proposals, bookings, payments), internet and device activity, approximate geolocation, audio recordings of calls, and inferences used to tailor a proposal. Sources, purposes and recipients are described in sections 1, 2 and 4.

11. Do Not Track and Global Privacy Control

Our website does not currently respond to the "Do Not Track" or Global Privacy Control browser signals. To opt out of advertising measurement, use the methods described in section 10 and in our Cookie Policy.

12. Changes to this policy

When we change this policy we update the date at the top. If a change materially affects how we use your information, we will tell you by email or in the app before it takes effect.

13. Contact

WANDERCHIC TRAVEL, SASU
50 avenue des Champs-Élysées
75008 Paris, France
contact@chic-trip.com · +33 6 75 33 51 39 · +1 (646) 201-8285

Chic Trip is operated by WANDERCHIC TRAVEL, SASU, 50 avenue des Champs-Élysées, 75008 Paris. Travel operator registered with Atout France under number IM075260066. Financial guarantee: Groupama Assurance-Crédit & Caution, 8-10 rue d’Astorg, 75008 Paris. Professional liability insurance: Hiscox SA, 49 avenue de l’Opéra, 75002 Paris.

IATA TIDS registered · 96249694. Verify on IATA CheckACode by entering this code and completing the security check. TIDS identifies our business to travel suppliers; it is not IATA accreditation or a payment guarantee.