Privacy Policy

Directory profiles are compiled from public professional sources: the IFMGA’s public register of certified guides and the public member directories of national guiding associations. A profile shows a guide’s name, association, certifications, operating regions and town, and a photo and links where the source published them.

We publish this on the legal basis of legitimate interest (GDPR Art. 6(1)(f)): a directory of certified professionals, built from what their own federations already make public. Imported contact details — email addresses, phone numbers, street addresses — are never displayed publicly. They are used only to verify a guide claiming their own profile and to deliver enquiries a guide has explicitly switched on.

If you are listed, claiming your profile is free and lets you edit or correct everything on it. If you would rather not appear at all, write to us through the contact form and we will delete the profile — including our copy of the photo — and add it to a suppression list so it is never re-created by a later import from the register. We answer erasure and access requests within one month (GDPR Arts. 15–21), and we will tell you exactly which source your data came from.

Registering stores your name, email address, username, chosen language, and a hashed password. Signing in with Google shares your name and email address with us from your Google account. We use these to run your account and never sell them or share them for advertising.

Paid memberships and placements are processed by Stripe. Card details go directly to Stripe and are never stored on our servers; Stripe processes them under its own privacy policy.

A message sent through a guide’s contact form — your name, contact details and the message itself — is delivered to that guide so they can reply, and is visible to them in their enquiry inbox.

Public pages are served without cookies. A session cookie is set only when you sign in. There are no advertising or cross-site tracking cookies. We measure traffic with Fathom Analytics, which is cookieless and does not build personal profiles.

The site is delivered through Cloudflare and runs on managed cloud infrastructure — hosting, database and email delivery providers process data solely on our behalf to run the service.

Account data is kept until you delete your account. Directory profiles are kept until the guide asks for removal. After a removal, the suppression list keeps only the minimum needed to honour it — the name and licence number — so the profile cannot come back.

Under the GDPR you can ask for access to, rectification or erasure of your personal data, restriction of or objection to its processing, and a portable copy. Write to us through the contact form and we will respond within one month. You also have the right to lodge a complaint with your data protection authority.

The contact form reaches the team directly — one form, read by a human, for everything. Last updated 5 August 2026.