Last updated: July 14, 2026
This Privacy Policy explains how fortheworld OÜ ("we") processes personal data on sustainable.deals, in accordance with the EU General Data Protection Regulation (GDPR).
1. Data controller
fortheworld OÜ, registry code EE102641749, Estonia. Contact: sustainable@development.city
2. What we collect — and what we deliberately don't
The Platform is designed for data minimalism. No account or registration is required to search.
We process:
Search parameters — origin, destination, dates, passenger count. Processed to return results via our travel-technology partners; not linked to your identity by us.
Technical data — IP address, browser type, device data, approximate location. Used for security, fraud prevention, and service operation (legal basis: legitimate interest, Art. 6(1)(f) GDPR).
Chat messages — if you contact us via the chat widget, we process the content you send and any contact details you provide (legal basis: Art. 6(1)(b), steps taken at your request).
Payment data for consultation fees — payments are processed by Stripe; we do not store your card details. Stripe processes data under its own privacy policy.
We do not collect: passenger names, passport data, or payment details for flight bookings. Those are collected by the Vendor you book with, on their website, under their privacy policy.
3. Third-party processing
Search functionality is provided in partnership with established travel-technology providers, which process anonymized search parameters to return fare results and may set cookies for affiliate attribution (see Cookie Policy). Bookings occur entirely on Vendor websites.
4. We do not sell your data
Ever. We also do not use your data to build third-party advertising profiles.
5. Retention
Technical logs are kept for the limited period necessary for security and diagnostics. Chat conversations are kept as long as needed to handle your request plus a reasonable follow-up period. Payment records are retained as required by Estonian accounting law (7 years).
6. Your rights (GDPR)
You have the right to access, rectify, erase, restrict, or object to processing of your personal data, the right to data portability, and the right to withdraw consent at any time where processing is based on consent. To exercise any right, contact: sustainable@development.city You may also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or your local supervisory authority.
7. International transfers
We operate from the EU. Where third-party providers process data outside the EEA, transfers rely on adequacy decisions or Standard Contractual Clauses.
8. Changes
We will update this policy as the Platform evolves; the "Last updated" date reflects the current version