Your privacy matters to us. This policy explains what personal data we collect, why we collect it, and how we protect it.
Dornyx Travel (Barcelona, Spain) is the data controller for personal data collected through this website and our story services. For any data-related enquiries, contact us at [email protected].
We collect the following categories of data. Purchase data: your email address and the story you purchased. Payment data: transactions are handled by Stripe — Dornyx does not store card numbers or payment credentials. Technical data: IP address, browser type, device model, and pages visited, collected via server logs.
We use your data to fulfil your purchase and deliver your story; to send purchase confirmations, digital vouchers, and support emails; to improve our service through anonymised usage analysis; and to comply with our legal and tax obligations.
Purchase and delivery data is processed on the basis of contractual necessity. Technical and analytics data is processed on the basis of our legitimate interest in improving the service. If we send you marketing communications, we will only do so with your explicit consent, which you may withdraw at any time.
We share your data only with trusted partners who help us deliver our service: Stripe (payment processing) and Google (Gmail API for transactional email). We do not sell your personal data or share it for third-party advertising purposes.
We use session cookies required for the purchase and payment flow. We may also use analytics cookies to understand how visitors navigate our site. You can manage or disable cookies through your browser settings at any time, though this may affect the functionality of the purchase flow.
If you are based in the EU or EEA, you have the right to access, correct, delete, or export your personal data; to restrict or object to certain types of processing; and to lodge a complaint with Spain's data protection authority (AEPD — www.aepd.es). To exercise any of these rights, email [email protected] and we will respond within 30 days.
Purchase records are retained for 4 years to meet our tax and legal obligations under Spanish law. Marketing consent records are kept until you withdraw your consent. Server and technical logs are deleted after 90 days.
We may update this policy periodically. The "last updated" date at the top of this page reflects the most recent revision. For significant changes we will notify users via email or a site notice.
Data protection or privacy queries: [email protected].
