Privacy policy
Last updated: 11 September 2026
Who is responsible?
The data controller is Alps with Sarah, based in Brussels, Belgium, represented by Sarah Declercq. Questions about your data: hello@alpswithsarah.com.
Which data and why
Contact form. When you fill in the 'Plan my trip' form, I process your name, your email address and the information you provide yourself (travel dates, party, wishes). I use this data solely to answer your enquiry and, if you wish, to prepare a proposal. Legal basis: taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
Direct contact. If you write to or call me by email, WhatsApp or Instagram, I process the data you provide in doing so, for the same purpose.
Technical data. On each visit, the hosting provider processes technical data (IP address, browser, requested page) in order to display and secure the website. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Visitor statistics. This website uses Cloudflare Web Analytics to obtain aggregated visitor figures: number of visits, pages viewed, country, device type and referral source. No cookies are placed for this purpose and visitors are not individually tracked or recognised; Cloudflare briefly processes technical data such as the IP address in order to carry out the measurement. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). This website does not use advertising trackers.
How long do I keep your data?
Enquiries that do not lead to an assignment are kept for a maximum of 12 months after the last contact. Client data is kept for as long as necessary to carry out the assignment and thereafter for as long as the statutory (accounting and tax) retention periods require.
Who do I share your data with?
Your data is not sold and not shared for commercial purposes. It only passes through the service providers needed to make the website and the service work:
- Netlify, Inc. (United States) — hosting of the website and processing of the contact form. Transfers outside the EU take place on the basis of the European Commission's standard contractual clauses.
- Google (Gmail) — Google Ireland Ltd., for the receipt and storage of emails. Data may be processed outside the EU, on the basis of the European Commission's standard contractual clauses.
- Cloudflare, Inc. (United States) — visitor statistics without cookies. Transfers outside the EU take place on the basis of the European Commission's standard contractual clauses.
When I make reservations for you with local partners (accommodation, restaurants, activities), I only pass on the data that is strictly necessary for that purpose, and only with your consent.
Your rights
You have the right to access, rectify, erase and port your data, to restrict processing and to object. To exercise these rights, send an email to hello@alpswithsarah.com; I will reply within one month. You can also lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35 (Drukpersstraat 35), 1000 Brussels, gegevensbeschermingsautoriteit.be.
Changes
This policy may be amended when the website or the service changes. The date at the top indicates the latest version.