1. Information we may collect
Depending on how you use the service, we may collect:
- Account and contact details such as name and email address.
- Trip information such as destinations, dates, flights, accommodation, costs, payment status, reminders and notes entered by the organiser or group.
- Invitation and group information needed to let invited people access the correct private trip.
- Photos, videos and other trip media uploaded when media features are used.
- Support information you send through the Contact page or by email, including screenshots you choose to attach.
- Technical information such as device/browser data, security logs and basic usage data needed to operate, protect and improve the service.
2. Payment information
Where you buy Full Trip, payment may be handled by a specialist payment provider. We do not need your full card number to provide the service. We may receive payment status, transaction references and limited billing information needed to confirm or support the purchase.
3. Why we use information
We use personal information to provide the trip service, authenticate and invite users, keep trips private, calculate and display trip information, process or confirm purchases, store and show media, send relevant service messages, respond to support requests, prevent abuse and improve reliability.
Our legal basis will depend on the activity. It may include performance of a contract, our legitimate interests in operating and securing the service, compliance with legal obligations, or consent where the law requires it.
4. Private and invitation-only trips
Trips are designed to be private by default and available only to the organiser and people invited to that trip. Organisers should invite only people who should have access. We may access or disclose information where reasonably necessary for support, security, fraud prevention, legal compliance or to protect users and the service.
5. Trip media and retention
Full Trip currently includes up to 20 GB of trip media for 12 months. It is not intended as permanent archive storage. Users should download anything they want to keep before that period ends. Some backups, logs or records may remain for a limited additional period where reasonably necessary for security, recovery, dispute handling or legal obligations.
6. Who we may share information with
We may use trusted service providers for hosting, databases, authentication, payments, email delivery, storage, security, analytics or technical support. They receive only the information reasonably needed to perform their role and are expected to protect it appropriately. We may also disclose information where required by law or in connection with a genuine business reorganisation, subject to appropriate safeguards.
7. International transfers
Some service providers may process information outside the UK. Where that happens, we use the transfer mechanism or safeguards required by applicable data-protection law.
8. How long we keep information
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including providing the trip, supporting users, resolving disputes, meeting legal obligations and protecting the service. Different categories of data may therefore have different retention periods.
9. Your rights
Depending on the law that applies to you, you may have rights to access, correct, delete or restrict use of your personal information, object to certain processing, request portability, or withdraw consent where processing relies on consent. You may also have the right to complain to the UK Information Commissioner's Office or another relevant supervisory authority.
10. Children
The service is intended to be organised and managed by adults. If information about a child is added to a trip, the organiser is responsible for ensuring they have an appropriate basis to provide it and for limiting it to what is genuinely needed.
11. Security
We use reasonable technical and organisational measures appropriate to the service. No online system can promise absolute security, so users should avoid uploading unnecessary highly sensitive information and should protect access to their own email and devices.
12. Contact
Privacy questions or rights requests can be sent through our Contact page or to [email protected].