WHITE DUNES EXPERIENCE

Privacy policy

We keep this simple: we collect only what you choose to send us, we use it only to reply to you and prepare your trip, and we don't track you.

Updated 12 October 2026.

What we collect

When you send the enquiry form, we receive what you give us in it: your name, dates, resort, group size, the services you're interested in, your budget range if you choose one, your preferences, preferred language, how to reach you (email, phone or WhatsApp) and, if you ask for it, your chalet shortlist. If you contact us on WhatsApp or by email, we receive what you send there. Like any website, our server also records a few technical details of each visit: see "Server logs" below.

What we use it for

We use these details to reply to you and to prepare the trip you asked about, which is the legal basis for handling them: the steps you ask us to take before any agreement. We keep your enquiry in our client file so we can follow your trip, and an AI assistant helps us sort enquiries and prepare our replies. A member of our team always reviews and sends them: no decision about you is made automatically. We don't send marketing without your agreement, and we never sell your details.

Who sees it

Our small team, and the providers that run this site and our office tools for us: our hosting provider (OVH, France), Google (our email, documents and client file), Cloudflare (our domain name and email routing), the email service that delivers our messages, and OpenAI (the AI assistant that helps us prepare replies). They process your details for us and for nothing else. Some of them are based in the United States: when your details leave the European Union, the transfer is covered by the safeguards the GDPR requires, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep it

We keep enquiry details for as long as we need them to handle your trip, and up to two years after our last exchange, unless the law requires specific records to be kept longer.

Server logs

Our server keeps a technical record of each visit (IP address, page requested, date and time, browser type) for 30 days, to keep the site secure and fix problems. That's our legitimate interest in running a safe site. We don't use it to profile you, and it's deleted automatically after 30 days.

Cookies and tracking

This site sets no cookies and runs no analytics or advertising trackers. Your browser's session storage is used only to hold your chalet shortlist while you browse; it stays on your device and clears when the tab closes.

Your rights

You can ask us at any time to see, correct or delete the details we hold about you, to restrict or object to how we use them, or to receive them in a portable format. Write to contact@whitedunesexperience.com. If you think we've handled your details badly, you can complain to your data protection authority, such as the CNIL in France (cnil.fr).

Who's responsible

White Dunes Experience Ltd, 12, Narodno Sabranie Square, Sofia, Bulgaria, is the data controller for this site.