Home / Privacy Policy
Privacy Policy
Last updated: 23 June 2026
skilicious! (“we”, “us”) takes your privacy seriously. This policy explains what personal data we collect, why we collect it, and what we do with it. Questions? contact@skilicious.com.
1. Who we are
skilicious! is a ski resort matching service operated from the United Kingdom. We are the data controller for the personal data described in this policy.
2. What we collect and why
| Data | Why we need it | Basis |
|---|---|---|
| Email address | Sending your magic-link sign-in; saving and retrieving your searches | Contract (providing the service) |
| Name, age band | Personalising result copy and enrichment suggestions | Legitimate interest (improving relevance) |
| Home location (label + coordinates) | Calculating the distance factor to each resort | Contract |
| Finder answers (sliders, weights, basket, month) | Calculating your resort matches; saving searches for your account | Contract |
| Marketing opt-in flag | Sending optional emails about new resorts or features | Consent |
| Server/access logs | Diagnosing errors and protecting against abuse | Legitimate interest (security) |
We never collect payment card details, government IDs, or health data.
3. Third parties
We share limited data with the following sub-processors:
- Supabase Inc. (US): database and authentication. Your data is stored in the AWS eu-west-2 (London) region. A data processing agreement is in place.
- OpenAI, L.L.C. (US): generates personalised result explanations and hotel/activity suggestions. We send resort names, match scores, and your stated preferences; we do not send your email address. Standard contractual clauses apply.
- OpenStreetMap Nominatim: geocodes your home town to coordinates. Only a place-name string is transmitted; no account or personal identifier is sent.
We do not sell your data or share it with advertisers.
4. Cookies and browser storage
We use the minimum necessary storage to run the service. See our Cookie Policy for full details.
5. How long we keep your data
Your account and saved searches are kept until you ask us to delete them. Server logs are retained for up to 90 days. To delete your account and all associated data, email contact@skilicious.com.
6. Your rights (UK GDPR)
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Erase your data (“right to be forgotten”)
- Portability: receive your data in a machine-readable format
- Object to processing based on legitimate interest
- Withdraw consent for marketing at any time
To exercise any of these rights, email contact@skilicious.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk).
7. Changes to this policy
If we make material changes we will update the “last updated” date above. Continued use of the service after changes constitutes acceptance.