Privacy Policy

The data controller is HelpAnExpat.com, reachable at [email protected].

Data provided voluntarily: email address and username upon registration; published content (posts, comments, votes, reports); any information added to the user profile.

Data collected automatically: IP address, browser type, operating system, pages visited, date and time of access, session duration. This data is collected through the services described in the "Third-party Services" section.

Personal data is processed for the following purposes: (a) service delivery — account management, content publishing, community interaction; (b) security — protecting the platform from abuse, spam and unauthorised access; (c) analysis and improvement — understanding platform usage to improve features and content; (d) service communications — technical notifications related to the account (no marketing communications).

Processing is based on: (a) performance of a contract — to provide the service requested by the user upon registration (Art. 6.1.b GDPR); (b) legitimate interest — for platform security and aggregate usage analysis (Art. 6.1.f GDPR); (c) consent — for the installation of non-essential analytical cookies (Art. 6.1.a GDPR).

Technical cookies (essential): required for the platform to function (session, authentication, language preference). No consent required.

Analytical cookies: Google Analytics is used to collect anonymous, aggregated data on site usage. IP addresses are anonymised. Analytical cookies are only installed with the user's consent. Consent can be revoked at any time through browser settings or the cookie banner.

The platform relies on the following third-party services that may process personal data as data processors:

Cloudflare, Inc. (USA) — CDN, security and DDoS protection services. Cloudflare may process IP addresses and browsing data. Privacy policy: cloudflare.com/privacypolicy.

Google Analytics (Google Ireland Ltd / Google LLC) — statistical analysis of site usage with IP anonymisation. Privacy policy: policies.google.com/privacy.

Google Gemini API (Google Ireland Ltd / Google LLC) — AI guide generation. Data sent to the API is limited to non-personal parameters (nationality, city, category). No personal user data is transmitted.

OpenAI API (OpenAI, LLC, USA) — artificial intelligence features. As with Gemini, data sent is limited to non-personal parameters. No personal user data is transmitted.

Data transfers to the USA are carried out on the basis of the EU-US Data Privacy Framework or, where applicable, Standard Contractual Clauses approved by the European Commission.

Account data is retained for the duration of the registration and deleted within 30 days of an account deletion request. Published content (posts and comments) is anonymised upon account deletion. Browsing data collected through Google Analytics is retained for a maximum of 26 months in anonymous, aggregated form.

Under Articles 15–22 of the GDPR, users have the right to: (a) access their personal data; (b) obtain rectification or updating; (c) request erasure; (d) restrict processing; (e) object to processing; (f) request data portability; (g) withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, users may write to [email protected]. Users also have the right to lodge a complaint with the competent supervisory authority.

HelpAnExpat implements appropriate technical and organisational measures to protect personal data from unauthorised access, loss, destruction or alteration. All communications use the HTTPS protocol. User passwords are stored in hashed form and are never accessible in plain text.

The platform is not intended for users under the age of 16. We do not knowingly collect personal data from minors. If a parent or guardian believes a minor has provided personal data, they may contact us to request its deletion.

HelpAnExpat reserves the right to update this policy at any time. Changes will be published on this page with an updated date at the top. In the event of substantial changes, registered users will be notified by email.