1. Data controller and contact
Peregrinia is the controller responsible for the processing described in this policy. You can raise any privacy question at hola@peregrinia.com or through the contact form.
2. Data we process
- Account and security: name, email address, encrypted password, verification, language preferences, sessions, sign-ins and, if enabled, encrypted 2FA information.
- Profile and community: bio, photo, preferences you choose to show, departures, requests, groups, comments, questions, answers, reports, blocks and reviews.
- My Camino: plans, stages, journal, photos, audio, saved places, members, reports and publishing or shared-link options.
- Professional services: business details, claimed listings, billing and subscription status. The payment provider processes card details; Peregrinia does not store them.
- Essential technical data: IP address, browser user agent, security logs, technical errors and metadata needed to deliver email or notifications.
3. Purposes and lawful basis
We process data to create and protect your account, provide the features you request, coordinate groups, publish what you choose, handle reports, send operational communications and meet legal obligations. The lawful bases are performance of the service, your consent where applicable, our legitimate interest in keeping it secure and applicable legal obligations.
We do not install product analytics, behavioural advertising or third-party tracking tools. Marketing remains disabled unless you provide separate consent.
4. What is public and what is private
New profiles are public by default and may be indexed. Before registering, we explain what can be seen, and you can hide your profile under Privacy. A departure and its public questions are visible; coordination marked ‘Group only’, a private journal, location and contact details are not published automatically.
Location is only requested when you open a feature that needs it. There is no background tracking, and your live location is not shared by default.
5. Providers and transfers
- Email provider: receives the recipient and content needed to deliver communications.
- Stripe: processes payments and returns identifiers and subscription status.
- OpenStreetMap: when the online map loads, your browser requests tiles from its servers and may transmit your IP address, browser user agent and referring page, depending on browser settings. We do not download tiles for offline use.
Photos, audio and files are stored on Peregrinia's local infrastructure, with limits and operational backups.
6. Retention
We retain data while the account or purpose remains active. Cancelled uploads and orphaned files are removed as soon as possible and no later than the daily clean-up. Moderated content can be restored for 30 days before it is purged, unless it must be retained as safety evidence or to meet a legal obligation. Billing records are kept for the periods required by law.
7. Your rights
You can request access, rectification, erasure, objection, restriction and portability by writing to hola@peregrinia.com. You may also lodge a complaint with the Spanish Data Protection Agency. aepd.es.
8. Security and automated decisions
We apply access controls, password encryption, email verification, usage limits, technical logs and moderation. No system is infallible: let us know if you identify a risk. We do not use automated profiling to make decisions with legal effects.
Questions? Write to us at hola@peregrinia.com or use the contact form. Open Contact.