Privacy Policy

Who We Are

WickedCoolPlaces operates the wickedcoolplaces.com website platform. We provide the user interface, design, and website functionality. We store account authentication data (email and password) and booking data (guest information, hotel details, dates, pricing) for platform functionality such as displaying bookings to users, sending confirmation emails, and managing booking access. However, we do not process payments or handle booking confirmations — these are handled by Nuitee.

Nuitee Travel Limited is a company incorporated and registered in Ireland. Their registered office is located at 4 Waterloo Rd, Ballsbridge, Dublin, D04 A0X3, Ireland, Company Registration Number 570685. Nuitee handles all booking-related data, payment processing, and customer support.

What This Policy Covers

This Privacy Policy describes how WickedCoolPlaces collects, uses, processes, and shares personal information, including account authentication data and booking data stored for platform functionality. This policy also explains how Nuitee Travel Limited handles booking processing, payment processing, and customer support when you make a reservation through wickedcoolplaces.com.

This policy applies to all users of wickedcoolplaces.com and our services. When you make a booking, your booking data is also subject to Nuitee's Privacy Policy, as Nuitee handles the actual booking processing and payment transactions.

1. Information We Collect

1.1 Information WickedCoolPlaces Collects

WickedCoolPlaces collects and stores:

• Account information: Email address, password (hashed and encrypted)
• Booking data (for platform functionality): Guest names, contact details (email, phone), hotel information, travel dates, number of guests, room details, pricing information, special requests, booking status
• Website usage: IP address, browser type and version, device information, pages visited
• Cookies: Session management, preferences (currency, language)
• Location data: General location based on IP address (not precise location)

1.2 Information Nuitee Collects and Processes

When you make a booking through wickedcoolplaces.com, Nuitee Travel Limited collects and processes:

• Personal Identification Information: Guest names, email address, phone number, etc.
• Booking details: Travel dates, hotel selection, number of guests, room preferences, special requests
• Payment information: Credit card details, CVV codes, billing address (collected directly by Nuitee via Stripe — never touches WickedCoolPlaces servers)
• Technical Data: IP address, browser type and version, time zone setting, location, browser plug-in types and versions, operating system and platform
• Usage Data: Information about how you use the booking platform
• Marketing and Communications Data: Your preferences in receiving marketing from Nuitee and your communication preferences

1.3 Data Flow Clarification

When you book on wickedcoolplaces.com:

1. You create an account with WickedCoolPlaces (email + password) — stored by WickedCoolPlaces
2. You search hotels using Nuitee's API — search data goes to Nuitee
3. Booking data (guest names, dates, hotel selection) is sent to Nuitee for processing
4. WickedCoolPlaces stores a copy of booking data in our database for platform functionality (displaying bookings, sending confirmation emails, managing access)
5. Payment information is collected directly by Nuitee via Stripe — WickedCoolPlaces never receives, processes, or stores payment card data
6. Nuitee processes the booking and payment, then sends confirmation to both you and WickedCoolPlaces
7. WickedCoolPlaces uses the stored booking data to display your bookings in your account and send confirmation emails

2. How We Use Your Information

WickedCoolPlaces uses stored data for:

• Account authentication and login
• Storing and displaying bookings in your account
• Sending booking confirmation emails and vouchers
• Managing booking access (for guest access via secure tokens)
• Facilitating cancellations and amendments through our platform (which then calls Nuitee's API)
• Website functionality and improvement
• Analytics and usage patterns
• Security and fraud prevention

Nuitee uses booking data for:

• Processing and confirming bookings
• Managing cancellations and amendments
• Payment processing
• Customer support
• Sending booking confirmations and vouchers
• Maintaining booking records
• Compliance with legal obligations

Nuitee collects this data under the lawful bases set out in the GDPR, which include your consent, contract performance, legitimate business interests, and compliance with legal obligations.

We do NOT use your information for: Processing payment card data (handled by Nuitee via Stripe), processing bookings with hotels (handled by Nuitee), or handling refunds (handled by Nuitee). We store booking data for platform functionality only.

3. Information Sharing and Disclosure

3.1 WickedCoolPlaces Shares With:

• Nuitee: Booking data is sent to Nuitee for processing. Nuitee also receives booking data directly when you make a booking through our platform
• Cloud hosting services: Vercel (for website hosting) — account and booking data is stored securely
• Email service providers: For sending booking confirmation emails and transactional emails
• Analytics services: For website performance (e.g., Vercel Analytics)
• Authentication services: For account management

3.2 Nuitee Shares Booking Data With:

• Hotels/accommodation providers: Guest information for reservation fulfillment
• Payment processors: Stripe (payment information collected directly by Stripe)
• Third-party service providers: Who perform functions on Nuitee's behalf (web hosting, data analysis, customer service, marketing assistance)

Nuitee ensures that their third-party service providers respect your personal data and comply with GDPR and other relevant data protection laws. Please refer to Nuitee's Privacy Policy for full details.

3.3 Legal Requirements

We may disclose your information if required by law or to:

• Comply with legal obligations, court orders, or government requests
• Protect our rights, property, or safety
• Prevent fraud, abuse, or security issues
• Protect the rights or safety of our users or the public

3.4 We Do NOT Sell Your Data

WickedCoolPlaces does not sell, rent, or trade your personal information to third parties for marketing purposes. Nuitee also does not sell your booking data. Please refer to Nuitee's Privacy Policy for their data sharing practices.

4. Data Security

WickedCoolPlaces: We implement appropriate technical and organizational security measures to protect account authentication data and stored booking data:

• Encryption of data in transit (SSL/TLS)
• Password hashing and secure storage
• Secure data storage and access controls for booking data
• Regular security assessments and updates
• Access tokens for secure guest access to bookings

Nuitee: Nuitee uses appropriate technical and organizational measures to protect the personal information they collect and process about you. Please refer to Nuitee's Privacy Policy for details on their security practices.

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Payment Information

6. Cookies and Tracking Technologies

WickedCoolPlaces uses cookies for:

• Session management and keeping you logged in
• Remembering your preferences (currency selection, language)
• Understanding how you use the Platform
• Improving Platform functionality and user experience
• Analyzing traffic and usage patterns

Nuitee may use cookies for booking process, payment security, and booking-related functionality. Please refer to Nuitee's Privacy Policy for details on their cookie usage.

Types of Cookies We Use:

• Essential Cookies: Required for Platform functionality (e.g., session management)
• Performance Cookies: Help us understand usage patterns
• Functional Cookies: Remember your preferences

You can control cookie settings through your browser. However, disabling cookies may limit your ability to use certain features of the Platform.

7. Your Rights and Choices

Under the GDPR, you have rights in relation to your personal data:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Objection: Object to the processing of your personal information
• Portability: Request transfer of your data to another service
• Withdraw Consent: Withdraw consent for data processing at any time

For account data and booking data stored by WickedCoolPlaces: Contact support@wickedcoolplaces.com to exercise your rights regarding account authentication data and booking data stored in our database.

For booking data processed by Nuitee: Contact vip.support@nuitee.com or contact@nuitee.com to exercise your rights regarding booking data processed by Nuitee. These rights are subject to Nuitee's Privacy Policy and GDPR rights.

8. Third-Party Websites and Services

WickedCoolPlaces uses Nuitee Travel Limited as our booking technology provider. When you make a booking, you are entering into a contract with Nuitee, not WickedCoolPlaces. Your booking data is subject to:

• Nuitee's Privacy Policy
• Nuitee's Terms and Conditions
• Stripe's Privacy Policy (payment processing)

We are not responsible for the privacy practices or content of these external services. We strongly encourage you to review the privacy policies of Nuitee Travel Limited and any accommodation providers you book with.

9. Children's Privacy

Our Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child under 18, please contact us immediately at privacy@wickedcoolplaces.com, and we will take steps to delete such information.

10. Data Retention

WickedCoolPlaces: We retain account data while your account is active, and delete it upon request (subject to legal obligations). Booking data stored in our database is retained for platform functionality and may be retained for legal, tax, and accounting purposes (typically 7 years from booking date). Usage data is typically retained for up to 2 years for analytics purposes.

Nuitee: Nuitee retains booking data for as long as necessary to fulfill the purposes they collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Booking data is typically retained for 7 years from booking date for legal, tax, and accounting purposes. Please refer to Nuitee's Privacy Policy for details.

You can request deletion of your personal information at any time, subject to legal obligations to retain certain records.

11. International Data Transfers

Your account data may be transferred to and processed in countries other than your home country, including countries where data protection laws may differ. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

Your booking data is processed by Nuitee, which is based in Ireland (EU GDPR compliant). When you make a booking, your data may be processed internationally by Nuitee, Stripe, and accommodation providers according to their respective privacy practices.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Platform after changes constitutes acceptance of the updated policy.