Privacy policy

Last updated: May 24, 2026

Who we are

What we collect

Depending on how you use the site, we may process:

• Account & order data: name, email address, billing country, and transaction identifiers.
• Payment data: collected and processed by Stripe as our payment processor. We receive limited payment metadata (such as last four digits, card brand, and transaction status) but do not store full payment card numbers on our servers. See Stripe's Privacy Policy for how Stripe handles card data.
• Technical data: IP address, device/browser type, approximate location derived from IP, and cookies or similar technologies needed for security and basic analytics.
• Communications: content of emails or messages you send us.

Why we use your information

• To provide packages, fulfil bookings, and deliver confirmations, travel documents, and secure links.
• To process payments and prevent fraud.
• To respond to support requests and enforce our terms.
• To improve and secure our website (including limited analytics where enabled).
• To comply with legal obligations and defend our rights where necessary.

We rely on performance of a contract, legitimate interests (balanced against your rights), and legal obligation as applicable.

Sharing

We share data only as needed with:

• Stripe and other payment processors and fraud-prevention partners to process charges and protect against abuse.
• Hosting, email delivery, and infrastructure providers.
• Travel partners and suppliers where needed to fulfil your booking.
• Professional advisers where required by law.

We do not sell your personal information.

Retention

We keep order and accounting records as long as needed for legal, tax, and dispute-resolution purposes, then delete or anonymise data where appropriate.

International transfers

Processors may operate outside your country. Where required, we use appropriate safeguards (such as standard contractual clauses) compatible with applicable law.

Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing, and to lodge a complaint with a supervisory authority. Contact us using the details in Contact or the information at the top of this policy.

California residents (CCPA/CPRA)

If you are a California resident, you may have the right to know what personal information we collect, to request deletion or correction, and to opt out of certain sharing. We do not sell your personal information. To submit a request, contact us as above. We will verify your request before responding.

Cookies

We use cookies and similar technologies that are strictly necessary for site operation and security. If we add non-essential analytics or marketing cookies, we will update this policy and, where required, obtain consent.

Children

Our services are not directed at children under 16. We do not knowingly collect their personal data.

Related policies

• Terms of service
• Refund & cancellation policy

Changes

We may update this policy from time to time. Material changes will be reflected by updating the date above. For questions, see Contact.