Privacy policy

We are the data controller for personal data collected through this website.

Waitlist signup (required): your email address, and your first name if you provide it. Purpose: confirming your signup (double opt-in) and, with your consent, sending you news about ʻOhana until launch and your launch invitation. Legal basis: your consent (GDPR art. 6(1)(a)). You can withdraw it at any time via the unsubscribe link in every email or by writing to us.

Optional questions: where you live, dream destinations, who you travel with, and whether you have local travel knowledge to share. Purpose: understanding who is joining and shaping the product before launch. Legal basis: consent. Answering is entirely optional and skipping changes nothing about your signup.

Technical data: our systems log basic technical information (such as a hashed IP address) solely to prevent spam and abuse of the signup form. Legal basis: legitimate interest (art. 6(1)(f)) in keeping the service secure. These logs are not used for profiling or marketing.

Analytics: we use self-hosted, cookieless analytics that count visits without identifying you. No advertising trackers, no cross-site tracking, no data shared with ad networks.

Your data is stored in our own database on servers in the EU, operated by our hosting provider, Hetzner Online GmbH.

We work with a small number of processors under data processing agreements: Hetzner Online GmbH (hosting, EU), Brevo / Sendinblue SAS, Paris, France (sending your confirmation and update emails), and GlitchTip (error monitoring, so we can catch and fix bugs quickly). Where a processor operates outside the EU/EEA, it does so under EU-approved safeguards such as standard contractual clauses.

• Unconfirmed signups: deleted automatically after 30 days.
• Confirmed waitlist data: kept until you unsubscribe or ask us to delete it, or until 6 months after launch, whichever comes first - at launch we will ask before moving anything into a member account.
• Abuse-prevention logs: 90 days.

Under the GDPR you can ask us at any time to: access the data we hold about you, correct it, delete it, hand it over in a portable format, restrict or object to processing, and withdraw any consent you have given. Write to privacy@ohana.place and we will respond within 30 days.

You can also complain to the Danish Data Protection Agency (Datatilsynet, www.datatilsynet.dk), though we would appreciate the chance to fix things first.

We do not sell, rent, or trade personal data. Not anonymised, not aggregated, not to anyone. This is a founding commitment of ʻOhana, not a policy that may change with a business model - subscriptions are our only revenue.

If this policy changes, we will update this page and, for material changes affecting you, tell you by email. This version covers the pre-launch waitlist; a fuller policy covering member accounts and payments will replace it at launch.