On this page
01Scope and contact#
This notice covers the Traby website, its waitlist, enquiries and optional website analytics. Traby is the brand used throughout this notice. Contact contact@traby.co for privacy questions or requests.
The app may process booking emails, files, account details and trip information. This notice covers the website, not that app processing. An app-specific notice must be available before you provide that information in the app. Do not send passports, payment details or booking documents through the website contact form.
02Delivering and protecting the website#
When you visit, technical information such as your IP address, requested page, browser information, request time and response status may be processed to deliver the website, diagnose faults and prevent abuse. Vercel provides website hosting; Google Cloud and Firebase support the configured backend services.
The legal basis is our legitimate interest in providing a reliable and secure website under Article 6(1)(f) GDPR. We do not use operational logs to build advertising profiles.
03The waitlist and email updates#
If you join the waitlist, Resend stores your email address, language, subscription preferences and consent record in the Traby waitlist. Signup is completed on this website; you do not need to confirm an email. No signup email is sent. We use the list for the early-access, launch and product updates you requested.
This processing is based on your consent under Article 6(1)(a) GDPR. Submitting the form joins the list; you do not have to confirm a second email. This does not subscribe you to unrelated marketing. You can withdraw consent using the unsubscribe link in an update or by emailing contact@traby.co. Withdrawal does not affect earlier lawful processing.
We retain an active subscription while you wish to receive these updates. After withdrawal, we remove the address from active sending lists and retain only the limited consent or suppression record needed to demonstrate your choice, prevent unwanted messages or meet legal obligations.
04Enquiries and support#
If you contact us, we process your email address, enquiry category, subject, message and any guide reference you include. The contact form uses Resend to deliver the message to the Traby team and retain the delivery record. We use this information to answer and manage your request.
For requests about a possible or existing contract, the legal basis is Article 6(1)(b) GDPR. For other enquiries, it is our legitimate interest in responding under Article 6(1)(f) GDPR. We retain correspondence for as long as the enquiry requires, then delete it unless a legal retention duty or the establishment, exercise or defence of legal claims requires limited further retention.
05Preferences and optional analytics#
The website can remember the language and appearance you choose in local storage on your device. These preferences help provide the experience you requested. You can clear them in your browser. See the Cookies and storage page for the keys and controls.
PostHog is the selected service for optional website analytics. Analytics must remain off until the relevant configuration is complete and you choose to allow it. Refusing analytics does not affect access to the website or waitlist. Where analytics is enabled, it is based on consent under Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG. You can change your choice through Privacy choices.
We do not send form contents, email addresses or booking documents to website analytics. Session replay, advertising tracking and automatic form capture are not enabled by this website implementation.
With your permission, PostHog receives page paths, language, device category and basic website actions, such as section visits, download clicks and form outcomes. An anonymous identifier in sessionStorage connects these events within your visit; it is renewed after 30 minutes of inactivity and cleared when you withdraw consent. Analytics does not receive form values or URL query strings.
06Service providers and international processing#
The selected service providers are Vercel for hosting, Resend and Mailgun for email, Google Cloud and Firebase for backend infrastructure, and PostHog for optional analytics. They receive only the information needed for the configured purpose. Their own privacy notices explain processing for which they are independently responsible.
Some providers or their subprocessors may process information outside the European Economic Area. The applicable service configuration, processing agreements and transfer mechanism must be recorded before that processing is enabled. Where required, safeguards may include an adequacy decision or the European Commission’s standard contractual clauses. Contact contact@traby.co for information about safeguards relevant to your data. We do not claim that all processing stays in the EU.
07Your rights#
Subject to the applicable conditions, you may request access, correction, deletion, restriction and data portability. You may object to processing based on legitimate interests, particularly where your circumstances justify an objection. You may withdraw consent at any time and complain to a competent data protection supervisory authority.
Write to contact@traby.co to exercise your rights. We may request proportionate information to verify that the request concerns your data. You do not have to provide optional analytics consent or join the waitlist to browse the website. There is no automated decision-making with legal or similarly significant effects in this website implementation.
08Changes to this notice#
We update this notice when the website’s processing changes. The version date identifies the text you are reading. Material new uses that require consent will not be enabled on the basis of an earlier, unrelated consent.