Privacy

Information we collect

When you enquire, we collect your name, email address, message and any travel preferences you provide, such as dates, travelling party, budget and interests. We also record the submission date and whether the enquiry has been reviewed.

Our hosting services process technical information needed to operate and protect the website. The enquiry system uses a keyed hash derived from your IP address for spam prevention; it does not save your original IP address in the enquiry database.

Why we use it

We use your information to respond to your request and help plan your travel. For requests about our services, our lawful basis is taking steps at your request before entering into a contract. For general correspondence and website security, we rely on our legitimate interests in answering enquiries and preventing misuse. We handle data protection requests to meet our legal obligations.

Submitting an enquiry does not subscribe you to marketing emails.

Storage, access and service providers

Enquiries are stored in the website’s native database, hosted through OpenAI’s ChatGPT Sites infrastructure. The private dashboard and enquiry management endpoints require server-side owner authentication. Within the business, access is restricted to the operator; authorised service-provider personnel may process information as necessary to provide hosting, maintenance, support and security.

The form does not automatically send enquiries to Fora, hotels or other travel suppliers. Any further sharing needed to progress travel arrangements will be explained separately.

Hosted information may be processed outside the UK. OpenAI’s Sites Data Processing Addendum includes contractual safeguards for UK transfers, including standard contractual clauses and the UK Addendum.

How long we keep it

Website enquiries expire 365 days after submission. Expired enquiries are excluded from dashboard access and deleted from the active database when the dashboard is refreshed or a new enquiry is saved. There is no scheduled daily deletion task.

This period does not describe the retention of any subsequent advisory or booking records. Hosting-provider logs and backups are subject to their own arrangements.

Cookies and fonts

We do not use analytics or advertising trackers. The hosting infrastructure uses Cloudflare’s __cf_bm security cookie to help prevent automated abuse; Cloudflare describes its expiry as 30 minutes of inactivity. Platform-managed authentication may also use cookies for private dashboard access.

The website currently loads fonts from Google, which receives connection information when your browser requests them.

Your rights and privacy requests

Depending on the circumstances, you may request access, correction, deletion, restriction of processing or a portable copy of your information.

You can object to processing based on legitimate interests.

To contact us about privacy, use the website enquiry form and begin your message with “Privacy request”. Travel dates and budget are not required. We may need to verify your identity before responding.

You can also complain to the Information Commissioner’s Office.

Business information

Sardinia Unveiled is a specialist Sardinia travel advisory brand operated by a UK-based sole trader.

This website accepts enquiries only. It does not take payments or complete travel bookings. Any subsequent advice or booking arrangements are handled separately through the operator’s independent travel advisory business.