Privacy Policy
Last updated: April 2026
UNRUSH SAS ("UNRUSH", "we", "us") is committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable French data protection law.
1. Data Controller
The data controller is UNRUSH SAS, registered in France. For any questions regarding your personal data, contact us at: privacy@unrush.co
2. Data We Collect
We may collect the following categories of personal data:
- Identity data: first name, last name, email address
- Contact data: phone number, postal address
- Usage data: pages visited, time spent, referring pages
- Technical data: IP address, browser type, device information
- Communication data: content of messages sent via contact forms
3. How We Use Your Data
We process your personal data for the following purposes:
- Responding to your travel inquiries and requests
- Connecting you with certified travel agencies
- Sending service communications (trip confirmations, follow-ups)
- Improving our website and user experience
- Complying with our legal and regulatory obligations
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract performance: to fulfill services you have requested
- Legitimate interests: to improve our services and prevent fraud
- Consent: for marketing communications and non-essential cookies
- Legal obligation: to comply with applicable laws
5. Data Sharing
We do not sell your personal data. We may share it with:
- Certified travel agencies: when you submit a travel request, your contact details are shared with the relevant agency to prepare your proposal
- Service providers: hosting, analytics, and email delivery providers acting as data processors
- Authorities: when required by law
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, and in any event no longer than:
- Contact form inquiries: 3 years from last contact
- Travel request data: 5 years for contractual and legal compliance
- Analytics data: 13 months
7. Your Rights
Under the GDPR, you have the following rights:
- Right of access: obtain a copy of your personal data
- Right to rectification: correct inaccurate data
- Right to erasure: request deletion of your data
- Right to restriction: limit processing of your data
- Right to portability: receive your data in a portable format
- Right to object: object to processing based on legitimate interests
- Right to withdraw consent: at any time, where processing is based on consent
To exercise your rights, contact us at privacy@unrush.co. We will respond within 30 days. You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) at www.cnil.fr.
8. Cookies
For information about how we use cookies, please see our Cookie Policy.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. We encourage you to review this policy periodically.