Privacy
How HIOCS handles information
What we collect
- Travel advisor. The trip preferences you enter, including children's ages if you add them and any optional notes, and the recommendations you receive. We do not ask for your name or email, and you do not need an account. Your results page has an unlisted link: anyone who has it can see those results, so share it with care.
- Flight searches. Departure city, destination airport, dates, passengers and the results shown. These do not include your name or email.
- Enquiries. When you send an enquiry, we collect your name, email, dates, group size and note, plus any example schedule or trip preferences you choose to send. We email this to the golf destination, which replies to you directly, and keep a copy ourselves.
- Newsletter. Your email address and country, only if you subscribe. Every email has an unsubscribe link.
- Account (optional). Your email address, sign-in sessions, an optional name and home country, and the searches and schedules you save. Your profile and saved items are private. You can delete your account from your profile.
- Technical data. Your IP address, browser and device details and error logs, used to run and protect the site. We store only a hashed form of your IP address with enquiries and newsletter signups, to prevent abuse. We also keep anonymous counts of destination page views and clicks to destinations' own websites.
Please do not enter passport, payment, health or other sensitive details in free-text fields.
Why we use it
To give you recommendations, flight options and example schedules, pass on your enquiries, send the newsletter and sign-in codes you ask for, improve matching, keep the site secure and meet legal obligations. Depending on the context, the basis is providing the service you requested, our legitimate interest in running and securing the service, your consent, or a legal obligation.
Who else handles it
We use a small number of service providers.
- Cloudflare for hosting, our database, bot protection, visit statistics and sending email.
- OpenAI receives your advisor preferences and our destination facts to generate recommendations and example schedules. It does not receive your name or email.
- SearchAPI.io receives your flight search details to fetch Google Flights results.
- Mapbox serves our interactive maps and may receive technical request data from your browser.
- Golf destinations receive the enquiries you send them, and handle them under their own privacy practices.
These providers may process data outside the EU/EEA. Where required, we rely on appropriate safeguards for those transfers. We do not sell your personal data.
How long we keep it
Only as long as needed for the purpose it was collected for, for security and troubleshooting, or to meet legal obligations. Deleting your account removes your profile, saved items and sessions. Sign-in codes expire after 10 minutes and sessions after 30 days. Newsletter records are kept while you are subscribed, and briefly afterwards so we can honour your unsubscribe. Advisor searches and enquiries are stored separately from accounts; ask us if you want them removed.
Your rights
You may have the right to access, correct or delete your personal data, restrict or object to its processing, withdraw consent and receive a copy of your data. Contact us using the details above. You can also complain to the Finnish Office of the Data Protection Ombudsman at tietosuoja.fi.