Privacy & Cookie Notice

This notice explains what personal data Paso Libre collects when you visit this website or join a trip waitlist, why we collect it, and the rights you have over it. We keep things deliberately simple: we do not run advertising, we do not track you across the web, and we do not sell your data to anyone.

Who we are

This website is operated by Paso Libre ("we", "us"), organisers of small-group horseback expeditions. For any privacy question, or to exercise your rights below, contact us at contact@gypsyinsneakers.com.

What we collect

• Waitlist details. If a trip is sold out and you join the waitlist, we collect the email address you enter and the trip it relates to.
• Messages you send us. If you email or message us, we keep that correspondence so we can reply and help you.
• Basic technical data. Like any website, our host records standard server information such as your IP address, browser type and the pages you visit, for security and to keep the site running.

We do not collect payment details on this site — bookings are handled on our external Stan store, which has its own privacy terms.

Why we use it, and our legal basis

• To add you to a waitlist and email you when a place opens — based on your consent, which you give by submitting the form and can withdraw at any time.
• To respond to your enquiries and organise your trip — based on our legitimate interest in answering you, or on taking steps at your request before a booking.
• To keep the website secure and working — based on our legitimate interest in protecting the site.

Cookies

This site uses no advertising, analytics or tracking cookies. We do not profile visitors and we do not share browsing data with third parties for marketing.

The only thing we store on your device is a small, essential preference that remembers you have seen our cookie notice, so we don't show it on every visit. Under the ePrivacy rules this kind of strictly necessary storage does not require consent. You can clear it any time through your browser settings.

Fonts and third-party services

We rely on a few trusted services to run this site:

• Netlify — hosts the website and processes waitlist form submissions on our behalf. See Netlify's privacy policy.
• Google Fonts — we use Google Fonts for the site's typography. When a page loads, your browser requests the fonts from Google's servers, which means your IP address is shared with Google (which may process it in the United States).
• YouTube — some trip pages embed a film using YouTube's privacy-enhanced mode (youtube-nocookie.com). Loading the player shares your IP with YouTube/Google, but no cookies are stored about you unless you choose to press play, at which point YouTube's own terms apply.
• Stan store — our booking pages are hosted on Stan; visiting them is subject to Stan's own privacy terms.
• Instagram — our social links take you to Instagram, which is governed by Meta's privacy policy.

International transfers

Because of the services above (Google Fonts and, depending on region, Netlify), some data may be processed outside the European Economic Area, including in the United States. These providers rely on recognised safeguards such as the EU–U.S. Data Privacy Framework and Standard Contractual Clauses.

How long we keep it

We keep waitlist emails only for as long as the waitlist is relevant, and remove you promptly on request. Enquiry correspondence is kept only as long as needed to help you. Technical server logs are kept for a short period for security.

Your rights

Under the GDPR you have the right to access the data we hold about you, to have it corrected or deleted, to restrict or object to its use, to receive it in a portable form, and to withdraw consent at any time. To use any of these, email contact@gypsyinsneakers.com and we'll respond within a reasonable time.

If you believe we've mishandled your data, you also have the right to complain to your local data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens.

Children

This website and our trips are intended for adults. We do not knowingly collect data from children.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last revised.