Privacy.

Munga Expeditions AG
Schindellegistrasse 73
8808 Pfäffikon SZ, Switzerland
info@mungaplains.com

Transactional data. When you submit a form or send yourself an email summary, we collect the information you provide (e.g. name, email address, form responses).

Analytics data. We collect device type, browser, approximate location (country), UTM campaign parameters, and navigation events (which screens you visit) to understand how people use our site.

Partner attribution data. When tracking is allowed, we record the Alongside referral ID, page path, referrer, booking reference, booking value, and currency. We do not share payment details or booking access credentials.

Newsletter opt-in.If you check the “Keep me informed” box, we record your consent so we can send you updates about Munga Plains retreats and experiences.

• Legitimate interest(Art. 6(1)(f) GDPR · Art. 31 nDSG) — analytics to improve the site and partner attribution for visitors outside regulated regions. You can decline tracking on this page.
• Consent(Art. 6(1)(a) GDPR · Art. 31 nDSG) — newsletter communications and tracking in regulated regions. You can withdraw consent at any time.
• Contract performance(Art. 6(1)(b) GDPR) — processing enquiry responses and sending email summaries you request.

• Supabase(AWS eu-central-1) — database and serverless functions
• Resend— transactional email delivery
• Vercel— website hosting and edge network
• Cloudinary— image and video CDN
• HubSpot— CRM and marketing automation
• Mailchimp— newsletter distribution
• Plausible(EU-hosted) — cookie-free website analytics. No personal data collected.
• Alongside— partner referral and booking attribution. When allowed, Alongside uses the listed partner attribution data to verify a referral and its commission. Its referral cookie expires after 60 days.
• Google Analytics 4 & Google Ads (Google LLC) — analytics and advertising attribution. We require consent in regulated regions. Elsewhere, these services run unless you decline tracking.
• Meta Pixel & Conversions API(Meta Platforms, Inc.) — advertising attribution and remarketing on Instagram and Facebook. We require consent in regulated regions. Elsewhere, these services run unless you decline tracking. We can send hashed contact details to Meta when you submit a form.

All processors are bound by data processing agreements. Data may be transferred to the US under EU Standard Contractual Clauses or equivalent safeguards.

We keep cookies to the minimum needed. Visitors in regulated regions see a consent banner. Every visitor can use the controls below.

• Always on.Plausible analytics — no cookies, no personal data, just aggregated page counts.
• Choice-based tracking. Google Analytics, Google Ads, Meta Pixel, and Alongside set cookies to measure campaigns and partner referrals. We require consent in regulated regions. Elsewhere, these services run unless you decline them.

You can change your mind at any time by clearing your browser’s site data for mungaplains.com. This resets your saved choice.

You can also change your tracking choice here at any time.

We retain transactional data for the duration of our business relationship and up to 10 years thereafter for legal compliance. Analytics and partner conversion records are retained for 24 months. The Alongside referral cookie expires after 60 days. You can request earlier deletion at any time.

Under the GDPR and Swiss nDSG you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Request erasure (“right to be forgotten”)
• Data portability (receive your data in a structured format)
• Object to processing based on legitimate interest
• Withdraw consent at any time, without affecting prior processing
• Lodge a complaint with your local data protection authority

For any privacy-related request, contact us at info@mungaplains.com.