Effective Date: 01 August 2026
This Non-User Policy explains how HolidayBuddie® ("HolidayBuddie", "we", "our", "us") handles limited personal information relating to people who do not hold an account with us ("Non-Users"), and the restrictions that apply to unauthorised access.
We hold very little non-user data. We have no contact-upload or address-book import feature, so we do not collect contact lists, and we never receive your details simply because someone you know uses HolidayBuddie.
1. Data Controller
The data controller responsible for your personal information is HolidayBuddie, operated by Naturforsker, No 108 / 12 A, Bhagavan Nagar, Tiruvannamalai – 606603, Tamil Nadu, India. For any question about this policy, contact support@holidaybuddie.com.
2. When we process non-user information
We may hold limited information about a non-user only in these situations: when we investigate a suspected violation of our rules, fraud, or a security incident, and a phone number or email address involved belongs to someone without an account; when someone reports that their phone number or email has been used to register an account without their permission; or when we are required to by law.
The information involved is limited to a mobile phone number and/or email address. We do not seek or collect any further data about non-users.
3. Why we process it
Non-user information is used only to investigate and prevent fraud and abuse, protect the security and integrity of the platform, respond to reports of misused contact details, and meet legal or regulatory obligations. We never use non-user information for marketing, advertising, or profiling.
4. How long we keep it
We keep non-user information only as long as necessary for the purpose above. Security or fraud investigation data is deleted within six months of the investigation closing. Data held for a legal obligation is kept only for as long as the law requires, then deleted. Where no legitimate security or legal purpose remains, the data is deleted.
5. Lawful basis
Where data protection laws such as the GDPR apply, we process non-user data on the basis of our legitimate interest in keeping the platform safe and preventing fraud, and/or compliance with a legal obligation. We do not rely on consent for non-user data, because non-users have no account relationship with us.
6. Non-user rights
Where local data protection law provides them, non-users may request access to any personal data we hold about them, request correction or deletion, object to certain processing, or lodge a complaint with their data protection authority. To make a request, contact support@holidaybuddie.com. We may need to confirm your identity before we can act, to protect against fraudulent requests.
7. Someone used my phone number or email
If you believe your phone number or email address has been used to open a HolidayBuddie account without your permission, contact support@holidaybuddie.com. We'll investigate and, where appropriate, remove the affected registration.
8. Unauthorised access
Access to HolidayBuddie is for registered users, under our Terms of Service. The following are strictly prohibited: accessing user profiles or platform content without authorisation; scraping, data mining, or automated extraction of content; using bots, scripts, or automated tools to collect data; impersonating registered users; and circumventing security measures.
Unauthorised access or misuse may result in IP blocking, legal action, and reporting to the relevant authorities.
9. Reporting a concern
To report misuse of the platform, or if you have any concern covered by this policy, contact support@holidaybuddie.com. We investigate all reports in line with applicable laws and our internal procedures.
10. Regulatory alignment
This policy is designed to align with applicable data protection frameworks, including the GDPR, UK GDPR, the California Consumer Privacy Act (CCPA/CPRA) where applicable, and India's Digital Personal Data Protection Act, 2023.
