Privacy Policy
Last updated: June 2025
This Privacy Policy explains how bestthingstodoinparis.com ("we", "us", "our") collects, uses, and protects information when you use our website.
Who we are
Website operator: [SITE_OWNER_NAME]
Contact: [CONTACT_EMAIL]
For the purposes of the UK GDPR and the EU GDPR, we are the data controller for personal data collected through this site.
What data we collect
Data collected automatically
When you visit our website, certain information is automatically collected by third-party services we use:
- Google Analytics 4 (GA4): We use GA4 to understand how visitors use our site. GA4 collects anonymised data including pages visited, time spent, approximate location (country/city level), device type, and browser type. This data is processed by Google LLC. Your IP address is anonymised. You can opt out via Google's opt-out browser add-on at tools.google.com/dlpage/gaoptout.
- Cloudflare: Our site uses Cloudflare as a content delivery network and security service. Cloudflare may process your IP address and HTTP request data for the purpose of providing this service and protecting against malicious traffic. See Cloudflare's privacy policy at cloudflare.com/privacypolicy.
Cookies
We use the following cookies:
- Analytics cookies (GA4): _ga, _ga_[ID], _gid — used to distinguish users and sessions for Google Analytics. Expire after 2 years / 24 hours respectively.
- Preference cookies: cookie-consent — stores your cookie consent preference. Expires after 1 year.
- Cloudflare cookies: __cflb, __cf_bm — used by Cloudflare for load balancing and bot management.
You can manage cookies through your browser settings or by clicking "Decline" on our cookie consent banner.
Affiliate links
This website contains affiliate links to third-party services including GetYourGuide, Booking.com, and Viator. When you click these links and make a purchase, we may earn a commission at no additional cost to you. This is disclosed at the top of every page.
When you click through to these sites, you become subject to their own privacy policies and terms of service. We recommend reviewing their policies before making a booking:
- GetYourGuide: getyourguide.com/privacy
- Booking.com: booking.com/content/privacy.html
- Viator: viator.com/support/privacyPolicy
We do not receive any personal data you provide to affiliate partners and we are not responsible for how they handle your data.
Legal basis for processing
We process personal data on the following legal bases under the UK GDPR / EU GDPR:
- Consent (Article 6(1)(a)): For analytics cookies and tracking, which we only activate after you provide consent via our cookie banner.
- Legitimate interests (Article 6(1)(f)): For security purposes and to maintain the technical operation of the website.
Data retention
Google Analytics data is retained for 14 months as configured in our GA4 property. Cloudflare logs are retained in accordance with Cloudflare's standard policies (typically up to 7 days). Cookie consent preferences are stored locally in your browser for up to 1 year.
Your rights
Under the UK GDPR and EU GDPR, you have the following rights regarding your personal data:
- Right of access: You can request a copy of the personal data we hold about you.
- Right to rectification: You can ask us to correct inaccurate data.
- Right to erasure ("right to be forgotten"): You can ask us to delete your personal data where there is no legitimate reason to continue processing it.
- Right to restrict processing: You can ask us to restrict how we process your data in certain circumstances.
- Right to data portability: You can request your data in a structured, machine-readable format.
- Right to withdraw consent: Where processing is based on consent, you can withdraw consent at any time by declining cookies via the banner or your browser settings.
- Right to complain: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk (UK) or your national supervisory authority (EU).
To exercise any of these rights, contact us at: [CONTACT_EMAIL]
Third-party links
Our website contains links to external sites (tourist attractions, transport providers, etc.). We are not responsible for the privacy practices of those sites and recommend you review their policies independently.
Children's privacy
Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data about a child, please contact us and we will delete it promptly.
Changes to this policy
We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the website after changes constitutes acceptance of the updated policy.
Contact
For any privacy-related questions or requests:
Email: [CONTACT_EMAIL]