Privacy Policy

1. Who we are

Travel Signals is operated by TRAVELSIGNALS LTD, registered in England and Wales under company number 17399582.

TRAVELSIGNALS LTD is the controller responsible for personal information collected through Travel Signals unless we clearly state otherwise.

2. Information we collect

Information you give us

Depending on how you use Travel Signals, this may include:

• name and email address;
• account or membership information;
• preferred departure airports and airport clusters;
• destinations and travel windows;
• budget and expected trip length;
• party composition, including the number and approximate ages of children where relevant;
• holiday type, board basis and hotel preferences;
• direct-flight and other travel preferences;
• school-holiday or local-council information you choose to provide;
• watchlists and trips you ask us to monitor;
• optional notes, feedback and support messages;
• marketing and communication preferences.

Information collected automatically

• IP address and approximate location;
• browser, device and operating-system information;
• pages visited and actions taken on the website;
• referring source and campaign information such as UTM parameters;
• dates, times and technical logs;
• cookie and consent choices;
• advertising attribution information where you have provided the required consent.

3. How we use your information

We may use personal information to:

• create, update and manage your Travel Profile;
• match travel information to your preferences;
• monitor destinations, routes, prices, hotels and travel windows relevant to you;
• generate and send Personal Travel Signals and Travel Snapshots;
• operate watchlists and paid-plan features;
• manage subscriptions, purchases and customer support;
• send essential service, account and legal communications;
• send marketing where we have a lawful basis to do so;
• measure and improve the performance of Travel Signals;
• protect the service against misuse, fraud and security threats;
• maintain business, tax and compliance records;
• comply with legal obligations.

We do not sell your personal information.

4. Our lawful bases

Contract and steps before entering a contract

We use information needed to provide the Travel Signals service you request, create your profile, operate paid features and manage your membership.

Consent

We rely on consent where required for optional marketing communications, non-essential cookies and advertising or measurement technologies such as Meta Pixel. You can withdraw consent at any time.

Legitimate interests

We may use limited information where necessary to operate, secure, test, understand and improve Travel Signals, prevent misuse and maintain business records, provided those interests are not overridden by your rights.

Legal obligation

We may use or retain information where necessary to comply with tax, accounting, consumer-protection, regulatory or other legal obligations.

5. Travel Profiles and personalisation

Travel Signals uses the preferences in your Travel Profile to filter and prioritise travel information. This can involve automated matching, scoring and ranking of travel opportunities against the preferences you provide.

We may also use artificial intelligence (AI) and other automated tools to help analyse travel data, summarise information, generate or assist with Travel Signal content, and personalise the information we send to you.

These processes are designed to personalise and support the service. They do not make legal or similarly significant decisions about you.

6. Payments and subscriptions

Paid Travel Signals plans may be processed through Stripe or another payment provider shown at checkout.

We may receive transaction information such as your email address, customer identifier, payment status, subscription status, amount, currency, plan purchased and transaction identifiers.

We do not receive or store your full payment-card number or card security code. Payment providers process that information under their own privacy terms and security requirements.

7. Emails and communications

We may send operational emails necessary to provide the service, including account confirmations, Travel Signals, Travel Snapshots, billing messages, security notices and important changes to the service or legal terms.

Marketing emails are sent only where permitted. Where an email contains an unsubscribe link, you can use it to stop that category of marketing. Unsubscribing from marketing does not prevent us from sending essential service or transaction messages.

8. Cookies, analytics and advertising technologies

We use technologies necessary to operate and secure the website. With the required consent, we may also use analytics and advertising technologies to understand website performance, measure campaigns and advertising conversions, and build or measure advertising audiences.

This may include technologies provided by Meta Platforms and other providers identified in our Cookie Policy.

You can change or withdraw cookie choices through the consent controls available on the website.

9. Service providers and recipients

We use trusted suppliers to run Travel Signals. Depending on the feature you use, these may include:

• Hostinger — website and server hosting;
• Supabase — database, authentication and application infrastructure;
• MailerLite — email delivery and communication management;
• n8n — workflow automation;
• Stripe — payment and subscription processing;
• Meta Platforms — advertising measurement where consent is provided;
• security, monitoring, analytics and professional-service providers where reasonably required.

Providers receive only the information reasonably necessary for the services they perform and are subject to applicable data-protection obligations and contractual controls where required.

We may also disclose information where required by law, regulation, court order or a valid authorised request.

10. International transfers

Some suppliers may process personal information outside the United Kingdom. Where UK data-protection law requires safeguards for a transfer, we use an appropriate mechanism such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful safeguard.

11. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, security and dispute-resolution obligations.

• Active account and Travel Profile data is normally retained while you use the service.
• When an account is deleted, profile data scheduled for deletion is normally removed or anonymised within 60 days, subject to backups and information we must retain for legal reasons.
• Payment, accounting and transaction records may be retained for the period required by applicable law.
• Unsubscribe or suppression records may be retained as long as necessary to respect your communication choice.
• Security and technical logs are retained only for a proportionate period needed for security, diagnostics and abuse prevention.

12. Security

We use reasonable technical and organisational measures intended to protect personal information. Measures may include access controls, authentication, encrypted connections, restricted administrative access, monitoring, backups and security controls at our service providers.

No online service can guarantee absolute security, but we review our controls as the service develops.

13. Your data-protection rights

Depending on the circumstances, UK data-protection law may give you the right to:

• ask for access to your personal information;
• ask us to correct inaccurate or incomplete information;
• ask us to erase information in certain circumstances;
• ask us to restrict certain processing;
• object to certain processing based on legitimate interests;
• withdraw consent where processing relies on consent;
• request data portability where applicable;
• object to direct marketing at any time;
• make a complaint to the Information Commissioner's Office.

To exercise a right, email hello@travelsignals.co.uk. We may need to verify your identity before completing a request.

14. Children

Travel Signals accounts and paid plans are intended for adults aged 18 or over. We do not ask children to create accounts or submit information directly to us.

A parent or guardian may provide limited family information, such as the number or approximate ages of children, where this is useful for matching family travel. Please do not provide children's names, exact dates of birth, contact information or other unnecessary identifying information.

15. Third-party websites

Travel Signals may link to airlines, hotels, travel agents, booking platforms and other external services. Their handling of personal information is governed by their own privacy notices. Travel Signals does not control those third-party privacy practices.

16. Complaints

If you have a privacy concern, please contact us first at hello@travelsignals.co.uk so we can investigate it.

You also have the right to complain to the UK Information Commissioner's Office (ICO). The ICO's website is ico.org.uk.

17. Changes to this Privacy Policy

We may update this policy when our service, suppliers, technology or legal obligations change. The latest version will be published on this page and the "Last updated" date will be changed.

18. Contact