Privacy policy
Written to be read, not survived. This describes what Sunny Days Travel collects, who else touches it, how long we keep it, and how to make us delete it.
1. Who is responsible
Sunny Days Travel is a trading name of The Digital Carpenter, operating the site at sunnydays.thedigitalcarpenter.com. We are the controller of the personal data described here. Reach us at joshua@nichewaterproofing.com or 516-423-2002.
2. What we collect
When you simply browse and search
- Your origin city or airport — the metro or IATA code you select, so we can compute flight times to each destination.
- Your search parameters — arrival date, number of travellers, minimum star rating, hotel brand and designation filters, and your chosen sort order.
- Standard server logs — IP address, timestamp, requested URL, referrer and user agent, written by our web server for security and debugging.
When you make a booking
- Traveller details — the names, dates of birth and contact details required by the property.
- Booking details — property, room, dates, occupancy, rate and confirmation reference.
- Contact details — email address and phone number, used to send your confirmation and to reach you if the supplier changes something.
We do not store card numbers. Payment details are handled by the payment processor and never held on our systems.
We do not ask for, and have no use for, your race, health, religion, political views, sexuality or any other special-category data. Do not send it to us.
3. Cookies and local storage
We use no advertising cookies and no third-party tracking pixels. What we do use:
- localStorage — your watchlist. When you save a destination, that list is stored in your own browser. It never leaves your device and we cannot read it from our servers. Clearing your browser data deletes it permanently, and we have no copy to restore.
- localStorage — your preferences. Your last-used origin city and filter settings, so the site does not forget them between visits. Also local to your browser.
- A session cookie during checkout, strictly to keep your booking in progress attached to your browser. It expires when the booking completes or the session ends.
4. Who else processes your data
- LiteAPI / Nuitée — our hotel inventory and booking supplier. When you book, the traveller and booking details necessary to create the reservation are passed to LiteAPI and on to the property. Without this the booking cannot exist.
- Open-Meteo — our weather forecast source. We query it for destination coordinates on a schedule, not per user. No personal data of yours is sent to Open-Meteo — it never learns that you exist, let alone what you searched for.
- Pexels — destination photography. Images are served from Pexels' CDN, which means your browser makes a request to them and they see your IP address as any image host would.
- Our hosting provider — Hetzner, in Germany, where the server and its logs physically live.
We do not sell your data. We do not share it with advertisers. We do not build profiles on you for resale, and there is no data-broker relationship of any kind.
5. How long we keep it
- Server logs — 30 days, then deleted.
- Booking records — 7 years, because tax and consumer-protection law requires records of completed transactions to be retained.
- Support correspondence — 2 years from the last message.
- Watchlist and preferences — until you clear your browser storage. We hold no copy, so there is nothing on our side to expire.
6. Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Where a booking record must be retained for the legal period above, we will tell you that plainly rather than silently keeping it. You may also object to processing or ask for it to be restricted.
Email joshua@nichewaterproofing.com with the subject line "Privacy request". We acknowledge within one business day and respond substantively within 30 days.
7. Security
The site is served over HTTPS only. Access to booking data is restricted to the operators who need it to run the service. If we ever suffer a breach affecting your personal data, we will tell affected users directly and promptly — not by quietly amending this page.
8. Children
This service is not intended for anyone under 18, and we do not knowingly collect data from children. Children can of course be named as travellers on a booking made by an adult.
9. Changes to this policy
If we change this policy materially, we will update the date at the top and note the change on this page. We will not make a material change retroactively without telling you.
10. Complaints
Complain to us first at joshua@nichewaterproofing.com. If you are not satisfied with our response, you may complain to your local data protection authority.