Privacy Policy
Last updated: 23 July 2026
Who we are
Belvi is operated by IssamStories LLC (New Mexico, USA), the data controller. Reach us any time on WhatsApp or via the contact form.
What we collect
When you send a trip request, book a trip, join a waitlist or create an account, we collect the details you give us: name, email, WhatsApp number, gender, nationality, country or airport of departure, Instagram handle (optional), trip preferences, and anything you write in the notes. We also collect the technical basics from your browser (IP address, device, pages viewed) needed to run the site.
Why we use it and on what legal basis
We use your data to answer your request and deliver your trip (performance of the contract), to comply with tax and travel record-keeping obligations (legal obligation), to protect our business and prevent fraud (legitimate interests), and to tell you about new trips only if you asked for it (consent, withdrawable at any time). We do not sell your data. We do not use it for profiling or automated decision-making.
Who we share it with
Only the partners needed to run your trip and this site: our hotel and activity operators (hotels, guides, drivers, transfers), our payment processor Stripe, our form and hosting provider Netlify, and, if you asked us to help with flights, the airlines and booking tools involved. Some of these are outside the EU or UK, including the USA; when they are, we rely on standard contractual clauses or equivalent safeguards.
Payments
Payments are processed securely by Stripe on behalf of IssamStories LLC. We never see or store your full card details; Stripe handles them under its own security standards and privacy policy.
Photos and video
A photographer, videographer or drone pilot may travel with a group. We only use images or video in which you are identifiable to promote our trips if you gave consent when booking (a separate opt-in checkbox). You can withdraw that consent at any time by writing to us, and we will stop using new material featuring you.
How long we keep it
Trip and payment records for as long as needed to run the trip and to meet legal record-keeping obligations (typically 7 years). Waitlist and newsletter data until you unsubscribe. Account data as long as your account is active, then deleted on request.
Your rights
You have the right to access, correct, delete, restrict or port your data, to object to certain uses, and to withdraw consent at any time. Under GDPR you also have the right to complain to your local data protection authority. Message us on WhatsApp or via the contact form and we handle requests within 30 days.
Security
We keep your data on secured, reputable services with access limited to what we need to run the trip. No system is ever perfectly safe; if a breach affects you we will tell you and the competent authority as required by law.
Cookies
This site uses only the strictly necessary cookies needed to make it work. We do not use tracking or advertising cookies.