ZeroCrowds Privacy Notice & Cookie Policy

1. Title & Purpose

This document explains how ZeroCrowds collects, uses, stores, and shares personal data. It also describes how we use cookies on our website. Our aim is to be transparent and help you understand your rights under the GDPR.

2. Introduction & Context

ZeroCrowds is an adventure travel booking platform based in the Netherlands. We collect personal data from website visitors, customers, and hosts. This Privacy Notice and Cookie Policy explains what information we collect, why we collect it, and how we protect your data.

3. What Data We Collect

  • Website Visitors:

    • Data such as IP addresses, device identifiers, geolocation, referral data, and demographic information collected via Google Analytics.

  • Customer Contact & Sign-Up Forms: Data such as your name, email address, phone number, and travel interests.

  • Host Registration & Request Forms: Data such as your name, contact details, tour information, certifications, and experience.

  • Payment Information: Necessary payment details and personal identification required for processing transactions, handled by our third-party payment processor.

  • CRM Data: Interaction records, communication logs, and other details maintained in our CRM system.

4. How We Use Your Data

  • To provide and improve our services.
  • To manage bookings and host arrangements
    • Note: We share your travel details (such as name, contact information, and itinerary) with your host once your booking is confirmed. In some cases, your data may also be forwarded to service partners (e.g., hotels) strictly for facilitating your travel arrangements.
  • To process payments and manage financial records.
  • To analyze website usage and tailor marketing efforts.
  • To communicate with you about our services, promotions, and support.
  • To comply with legal and contractual obligations.

5. Legal Bases for Processing

  • Consent: When you voluntarily agree (e.g., through checkboxes on our forms or cookie consent banners).
  • Contractual Necessity: When processing is required to fulfill your booking or host agreement.
  • Legitimate Interest: When processing is necessary for our business interests (e.g., website analytics and marketing), as long as your rights are not overridden.
  • Legal Obligation: When processing is necessary to comply with laws or regulatory requirements.

6. Data Retention

  • Website Analytics Data: Retained for 26 months.
  • Customer & Host Data: Generally kept up to 3 years after the last interaction or as needed to fulfill our contractual obligations.
  • Payment & Financial Records: Retained for up to 7 years.

7. Your Rights Under GDPR

You have the right to:

  • Access your personal data.
  • Request corrections to inaccurate data.
  • Ask for deletion or restriction of your data.
  • Object to data processing or withdraw consent at any time.
  • Request data portability.

To exercise these rights, please contact us using the information provided in Section 10.

8. Cookies Policy

  • What Are Cookies? Cookies are small text files stored on your device that help us understand how you use our website.
  • How We Use Cookies:
    • Essential Cookies: Necessary for the website to function.
    • Analytics Cookies: Used by Google Analytics to collect data such as IP addresses, device types, and browsing behavior.
    • Marketing Cookies: May be used for re-marketing and targeted advertising.
  • Your Choices: You can manage your cookie preferences through our cookie consent banner on the website. You may also adjust your browser settings to block cookies, but this may affect site functionality.

9. Third-Party Processors

We use trusted service providers (“processors”) to help run ZeroCrowds—such as hosting/infrastructure, payments and fraud prevention, analytics (see Cookies), communications (email/SMS/push), CRM/support, and booking tools. They only process your data on our instructions and under a written Data Processing Agreement (DPA). They must keep it secure and confidential and delete/return it when services end.

For confirmed bookings, we share only what’s needed with your host to deliver your trip. Where necessary, your host may share that information with their travel partners (e.g., accommodation) solely to fulfill the booking.

Some providers may be outside the EU. When data is transferred internationally, we use GDPR-compliant safeguards (see Section 11).

We do not sell your personal data.

10. Data Security

We take the security of your personal data seriously by using technical and organizational measures to protect it from unauthorized access, disclosure, or loss.

11. Data Transfers

Data is processed primarily within the EU. Where personal data is transferred outside the EU, appropriate safeguards will be in place to ensure GDPR compliance.

12. Contact Information

If you have any questions or wish to exercise your rights regarding your personal data, please contact our Data Protection Officer at:

For all data protection inquiries, please use the above email address.

13. Changes to This Policy

We may update this Privacy Notice & Cookie Policy periodically. Any changes will be posted on our website along with the updated effective date.

14. Effective Date

This policy is effective as of Aug 12, 2025.