Last Updated: August 12, 2026

Quick Summary

Beyond the Coast collects only the personal data reasonably needed to operate this website, communicate with readers, manage newsletter subscriptions, respond to personalized trip planning enquiries, provide agreed trip planning services, and support digital product purchases where those services or products are made available.

We do not sell personal data. We do not request or intentionally collect passport details, identity document numbers, payment card details, health information or other sensitive personal data through our trip planning enquiry process. Payments, when enabled, are handled by an independent payment platform, and Beyond the Coast does not receive or store complete payment card details.

You may ask to access, correct or delete your personal data and exercise the other rights described in Section 15.

1. About This Privacy Policy

This Privacy Policy explains how Beyond the Coast (“Beyond the Coast”, “we”, “us” or “our”) collects, uses, shares and protects personal data when you:

  • visit beyondthecoast.world (the “Site”);
  • subscribe to a newsletter or request a free resource;
  • contact us or leave a comment;
  • submit a personalized trip planning enquiry;
  • become a personalized trip planning client; or
  • purchase or access a digital product, where purchasing is available.

This Policy also explains the choices and legal rights available to you. It should be read together with our Terms of Use, Disclosure Policy and cookie settings.

2. Who We Are and How to Contact Us

Beyond the Coast is a travel content website created and operated by Őz Enikő, an independent content creator based in Hungary.

For the purposes of the EU General Data Protection Regulation (“GDPR”), Őz Enikő, operating Beyond the Coast, is the data controller for the personal data for which Beyond the Coast determines the purposes and means of processing.

Privacy enquiries and requests may be sent to:

If the legal status or official contact details of the operator change, this section will be updated before paid sales or services are activated.

3. Personal Data We Collect

The information we collect depends on how you interact with the Site.

3.1 Information you provide directly

We may collect:

  • your name;
  • your email address;
  • the content of messages submitted through a contact form or sent by email;
  • information included in a comment you choose to publish;
  • newsletter subscription choices;
  • responses submitted through an enquiry or client questionnaire; and
  • customer support correspondence.

Please provide only information reasonably necessary for your request.

3.2 Personalized trip planning enquiries and services

If you enquire about personalized trip planning or later purchase an available planning service, we may request ordinary planning information such as:

  • your name and email address;
  • intended destination or destinations;
  • approximate travel dates or date flexibility;
  • number of travellers and whether the trip is for adults, couples or a family group;
  • approximate travel budget;
  • preferred travel pace and style;
  • accommodation preferences;
  • interests, desired activities and experiences;
  • previous destinations or experiences relevant to your request;
  • feedback on a draft itinerary; and
  • the agreed package, order status, correspondence and delivery records.

We do not require or intentionally collect:

  • passport details or copies;
  • identity card or other government identification numbers;
  • complete payment card or bank authentication details;
  • medical or health information;
  • disability or accessibility information;
  • religious beliefs, political opinions or biometric information; or
  • other sensitive or special-category personal data.

Do not include this information in free-text fields, emails or uploaded documents. If sensitive information is submitted without being requested, we may delete it and ask you to resend the relevant part of your request without that information.

Information about another traveller should be provided only where necessary and with that person’s knowledge. Whenever possible, describe shared travel preferences without identifying another traveller by full name.

3.3 Digital product and service transaction information

Where digital products or paid services are made available through an external commerce platform such as Gumroad, the platform may collect your:

  • name;
  • email address;
  • billing address or country;
  • tax or VAT information, where applicable;
  • payment information;
  • product or service purchased;
  • transaction date, price, currency and order status;
  • download or access information; and
  • refund, chargeback and customer-support information.

Beyond the Coast does not receive or store your complete payment card details. We may receive limited order information such as your name, email address, item purchased, transaction status and payment confirmation where needed to deliver the product or service, maintain business records and provide support.

3.4 Newsletter and free-resource information

If you subscribe to the newsletter or request a free resource, we may collect your email address, name where requested, signup source, consent record, subscription status and engagement information such as email delivery, opens and link clicks where permitted.

3.5 Comments

If comments are enabled and you leave a comment, WordPress may collect the information entered in the comment form, your IP address and browser user-agent information to support moderation, security and spam detection. Information submitted in a public comment, including the displayed name and comment text, may be visible to other visitors.

Do not publish personal, confidential or sensitive information in comments.

3.6 Information collected automatically

When you visit the Site, we or our technology providers may automatically receive:

  • IP address;
  • browser type and version;
  • device and operating system information;
  • approximate location derived from an IP address;
  • referring website or campaign;
  • pages viewed and links selected;
  • date, time and duration of a visit;
  • cookie identifiers and consent choices; and
  • diagnostic, security and performance data.

Non-essential analytics, advertising and similar tracking technologies are used only in accordance with the choices provided through our cookie consent system, where consent is legally required.

We use personal data only where we have a valid legal basis.

Purpose Types of data GDPR legal basis
Operating, maintaining and securing the Site Technical, device, log and security information Legitimate interests, Art. 6(1)(f)
Remembering cookie and privacy choices Consent record and necessary cookie identifiers Legal obligation, Art. 6(1)(c), and legitimate interests, Art. 6(1)(f)
Measuring readership and Site performance using non-essential analytics Cookie identifiers, usage, referral and approximate location information Consent, Art. 6(1)(a)
Sending newsletters, free resources and marketing messages Name, email, consent and engagement information Consent, Art. 6(1)(a)
Responding to general questions and contact messages Name, email and message content Legitimate interests, Art. 6(1)(f)
Responding to a specific request for personalized trip planning and preparing an offer Contact and trip-preference information Steps requested before entering into a contract, Art. 6(1)(b)
Delivering an agreed personalized trip planning service Contact, planning, correspondence, order and delivery information Performance of a contract, Art. 6(1)(b)
Supplying or supporting a digital product purchase Contact, order, access and support information Performance of a contract, Art. 6(1)(b)
Keeping records required for tax, accounting, consumer protection or dispute handling Transaction, invoice, consent and correspondence records Legal obligation, Art. 6(1)(c), and where appropriate legitimate interests, Art. 6(1)(f)
Moderating comments and preventing spam, fraud, abuse and security incidents Comment, IP, device, log and diagnostic information Legitimate interests, Art. 6(1)(f)
Measuring affiliate referrals through non-essential tracking Cookie identifiers and referral information Consent, Art. 6(1)(a), where required
Establishing, exercising or defending legal claims Relevant correspondence, transaction and technical records Legitimate interests, Art. 6(1)(f)

Where processing is based on legitimate interests, we consider the necessity of the processing and its potential effect on your rights. You may object to processing based on legitimate interests as explained in Section 15.

We do not use personal data for solely automated decision-making or profiling that produces legal or similarly significant effects.

5. Personalized Trip Planning Enquiry Process

Submitting an enquiry does not itself create a paid contract or payment obligation. We use the submitted information to understand your request, communicate with you, assess whether the requested service can be offered and, where appropriate, prepare a proposal or next steps.

Until paid booking is activated and a contract is separately accepted, trip planning enquiries are handled as preliminary communications only.

If an external form platform such as Tally is used, that provider processes form information on our behalf or for its own necessary service purposes in accordance with its applicable privacy terms. The form will link to this Privacy Policy and display a warning not to submit passport details, payment card information, health information or other sensitive personal data.

We do not use enquiry information to make travel bookings in your name. You remain responsible for making bookings directly with airlines, accommodation providers, tour operators and other independent travel suppliers.

6. Digital Products and Payment Platforms

If digital products or paid personalized planning services are offered through Gumroad or another identified commerce platform, selecting a purchase button will take you to a checkout controlled by that provider.

The commerce platform processes payment, billing, fraud-prevention, tax, receipt, refund and transaction information under its own privacy notice and may act as an independent data controller for those activities. Beyond the Coast is not responsible for deciding how that provider processes information for its independent legal and commercial obligations.

Where Gumroad is used, its privacy information is available at gumroad.com/privacy.

Beyond the Coast may receive limited customer and order information necessary to:

  • confirm a purchase;
  • provide or support access to a digital product;
  • communicate about a purchased trip planning service;
  • respond to customer support requests;
  • manage refunds or disputes where relevant; and
  • maintain records required by law.

Purchasing a product or service does not automatically subscribe you to marketing emails. Marketing messages are sent only where you have separately consented or another lawful basis clearly applies.

7. Email Newsletter and Free Resources

We use MailerLite to manage newsletter subscriptions and, where relevant, deliver free resources. MailerLite may process your name, email address, subscription source, consent record and email engagement information.

The newsletter may include travel inspiration, new articles, destination advice, service updates, digital product information and occasional promotional or affiliate content.

Every marketing email contains an unsubscribe link. You may withdraw consent at any time without charge. Withdrawal does not affect the lawfulness of processing completed before withdrawal.

MailerLite’s privacy information is available at mailerlite.com/legal/privacy-policy.

8. Cookies and Similar Technologies

The Site uses cookies and similar technologies, which may include pixels, tags and local storage. These technologies may be grouped as follows:

  • Strictly necessary cookies: needed for security, core functions and remembering privacy choices. These do not require consent where they are strictly necessary.
  • Functional cookies: support optional website features and preferences.
  • Analytics cookies: help us understand readership, traffic sources and Site performance.
  • Advertising and affiliate technologies: may help attribute visits, purchases or bookings and measure campaigns.

We use CookieYes to present and record cookie choices. Where required, non-essential technologies are not intended to be activated until you provide consent. You can accept, reject or customize non-essential cookies through the banner and change your choice later through the cookie settings available on the Site.

You may also restrict cookies in your browser, although this may affect some functions. Withdrawal of cookie consent does not affect processing that occurred lawfully before withdrawal.

For current cookie names, providers, purposes and durations, please refer to the detailed cookie settings presented through the Site’s consent tool.

9. Analytics, Search Performance and Pinterest

We use Google Site Kit to connect selected Google services, which may include Google Analytics and Google Search Console. Analytics may help us understand aggregated readership patterns such as pages viewed, referral sources, device categories and approximate geographic regions. Google Search Console provides information about how the Site appears in search results and does not require us to identify individual visitors.

Where Google Analytics or another non-essential analytics service uses cookies or comparable identifiers, it is used subject to the visitor’s cookie choice where consent is required. Google’s privacy information is available at policies.google.com/privacy.

The Site may contain Pinterest links, embedded Pinterest content or a Pinterest tag used to understand referrals and campaign performance. Pinterest may collect device, cookie, interaction and referral information under its own privacy terms. Non-essential Pinterest tracking is used only in accordance with the cookie choices offered on the Site where consent is required. Pinterest’s privacy information is available at policy.pinterest.com/privacy-policy.

Beyond the Coast participates in affiliate marketing programs. If you select an affiliate link and later purchase or book from an independent partner, the partner or affiliate network may use cookies or similar identifiers to attribute the transaction to Beyond the Coast.

Affiliate partners and networks may include Travelpayouts, AWIN, CJ Affiliate, Booking.com affiliate programs, Viator and GetYourGuide, together with other partners identified in our current Disclosure Policy.

Once you follow a link to a third-party site, that provider’s own privacy notice and terms apply. Beyond the Coast does not receive complete payment card details or complete booking information from an affiliate travel provider merely because you selected an affiliate link.

Affiliate relationships do not permit us to add you to our newsletter without separate consent.

11. Embedded Content and External Websites

Articles may include embedded maps, videos, social media posts or other third-party content. Embedded content may behave as though you visited the provider’s website directly. The provider may collect technical and usage information, use cookies and record your interaction, particularly if you are logged into an account with that provider.

Where required, non-essential embedded content may be blocked until you provide the relevant cookie consent. External websites are governed by their own privacy notices.

12. Service Providers and Other Recipients

Depending on the features you use, personal data may be processed by the following categories of recipients:

  • Website hosting and infrastructure providers, including Namecheap: hosting, domain and technical operation;
  • WordPress and website tools: content management and Site functionality;
  • CookieYes: cookie consent management;
  • Google: analytics and search-performance services;
  • MailerLite: newsletter delivery and free-resource distribution;
  • Gumroad or another checkout provider identified at purchase: payment, transaction, tax, receipt, refund and product-access services;
  • Tally or another form provider identified on the form: enquiry and questionnaire collection, where used;
  • Wordfence and other security providers: malicious traffic detection and Site protection;
  • LiteSpeed and caching or performance providers: Site delivery, caching and technical performance;
  • Grow by Mediavine or another subscription/content recommendation provider: subscription or content features where enabled;
  • Affiliate networks and partners: referral tracking after you interact with an affiliate link;
  • Professional advisers and public authorities: where reasonably necessary for accounting, legal compliance, claims or a lawful authority request; and
  • A successor operator: if the Site or relevant business assets are lawfully transferred, subject to appropriate safeguards and notice where required.

Some providers act as processors on our instructions. Others, particularly payment platforms, affiliate networks and independent websites, may act as separate controllers for processing they determine. Each provider’s own privacy information should be reviewed when you use its service.

We do not sell or rent personal data.

13. International Data Transfers

Some service providers may process information outside Hungary or the European Economic Area, including in the United States.

Where GDPR requires safeguards for such a transfer, we rely on a legally recognized transfer mechanism applicable to the relevant provider and transfer. This may include an adequacy decision, participation in the EU-US Data Privacy Framework where applicable, or European Commission Standard Contractual Clauses together with supplementary measures where required.

Information about a particular provider’s transfer arrangements is available in that provider’s privacy notice or may be requested from us where we control the transfer.

14. Data Retention

We retain personal data only for as long as reasonably necessary for the relevant purpose, including legal, accounting, security and dispute-resolution requirements.

The general retention approach is:

  • Newsletter information: until you unsubscribe or we discontinue the list, subject to retaining a minimal suppression record where needed to honour your opt-out.
  • Cookie consent records: for the period reasonably necessary to demonstrate and respect your choice, according to the consent platform’s configured retention period.
  • General contact enquiries: ordinarily for up to 12 months after the enquiry is resolved, unless continued retention is reasonably necessary.
  • Unsuccessful or inactive trip planning enquiries: ordinarily for up to 12 months after the last meaningful communication, unless you request earlier deletion or a legal reason requires longer retention.
  • Trip planning client files and correspondence: for the duration of the service and ordinarily for up to 5 years after completion where needed to handle contractual questions or legal claims, unless a shorter or longer period is required by law.
  • Purchase, transaction and accounting records: for the period required by applicable tax and accounting legislation. Records held independently by the checkout provider are retained according to its policies and legal obligations.
  • Digital product support information: while needed to provide access or support and thereafter for the applicable transaction-record or limitation period.
  • Comments: while the comment remains published or until moderation, deletion or anonymization is appropriate.
  • Security logs and backups: for limited rolling periods determined by security, hosting and backup settings, unless an incident requires longer retention.

When data is no longer needed, we delete or anonymize it, unless continued retention is required or permitted by law.

15. Your Data Protection Rights

Subject to the conditions and exceptions in applicable law, you may have the right to:

  • request confirmation of whether we process your personal data and obtain access to it;
  • request correction of inaccurate or incomplete data;
  • request deletion of personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • object at any time to direct marketing;
  • receive certain data in a structured, commonly used and machine-readable format and, where applicable, request its transmission to another controller;
  • withdraw consent at any time where processing is based on consent, without affecting earlier lawful processing; and
  • lodge a complaint with a competent data protection authority.

To exercise a right, email beyondthecoast88@gmail.com and describe your request. We may ask for information reasonably necessary to verify that the request relates to you, but we will not request excessive identification information.

We generally respond within one month, although the period may be extended where legally permitted for a complex or numerous request. We will inform you if an extension is required.

In Hungary, the supervisory authority is:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Website: https://www.naih.hu

You may also contact the supervisory authority in the EU or EEA country of your habitual residence, place of work or the alleged infringement.

16. Children’s Privacy

The Site and its paid offerings are intended for adults and are not directed to children. We do not knowingly request personal data directly from anyone under 16.

An adult planning family travel should provide only the minimum general information necessary, such as the number and broad age group of children travelling. Do not provide children’s full names, identification details, health information or other sensitive information.

If you believe a child has submitted personal data directly to us, contact us so that we can take appropriate action.

17. Data Security

We use reasonable technical and organizational measures designed to protect personal data, including access restrictions, reputable hosting and service providers, security tools, updates and appropriate account protections.

Payment card details are entered directly into the checkout provider’s controlled payment environment and are not intentionally collected through the Site’s contact or planning forms.

No internet transmission or storage method can be guaranteed to be completely secure. If a personal data breach occurs, we will assess and address it in accordance with applicable legal requirements.

18. Your Responsibilities

Please do not submit unnecessary personal data or confidential information through comments, forms or email. In particular, do not send passport copies, identity document numbers, payment card information, login credentials, health information or other sensitive personal data.

If you provide information about another adult, you should ensure that you are entitled to share it and that the person is aware of this Privacy Policy. We may ask the other person to communicate directly with us if individual information is genuinely necessary.

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in the Site, service providers, products, legal requirements or our data practices. The current version will be published on this page with an updated date.

Where a change materially affects how we use personal data, we will provide additional notice where required. Earlier versions may be retained for legal and administrative purposes.

20. Contact Us

For privacy questions, requests or concerns, contact:

Őz Enikő / Beyond the Coast
Email: beyondthecoast88@gmail.com
Contact page: https://beyondthecoast.world/contact/