Privacy Notice

1. Who we are

TravelSearch.io ("TravelSearch", "we", "us" or "our") provides tools that let creators publish hotel recommendations and lets visitors follow links to third-party booking providers. We are the controller of the personal information described in this notice.

You can contact us about this notice or our use of personal information at privacy@travelsearch.io. If you need our registered business name or postal address, please request it using that address.

2. Information we collect

Depending on how you use TravelSearch, we may collect:

• account information, such as your name, email address, profile image and account identifier, supplied through our sign-in provider;
• creator profile and storefront information, including your display name, biography, social-media handles, country, audience information, hotel selections and content you publish;
• activity and device information, such as referral page, browser or device information, approximate request time, a pseudonymous visitor identifier, storefront visits and affiliate-link clicks;
• booking attribution and commission information received from affiliate and booking partners, such as an affiliate reference, booking status, value and commission. We do not receive the payment-card details you give to a booking provider; and
• information you give us when you contact us or ask for support.

We collect some information directly from you, some automatically from your device, and some from service providers and affiliate partners such as Clerk, Travelpayouts and the relevant booking provider.

3. Why we use information and our lawful bases

• Contract: to create and administer accounts, provide creator tools, publish storefronts, track eligible commissions and respond to service requests.
• Legitimate interests: to operate, secure and improve the service; prevent fraud and misuse; understand service performance; attribute visits and affiliate activity; and protect our legal and commercial interests. We balance these interests against your rights and expectations.
• Legal obligation: to keep records, respond to lawful requests and meet tax, accounting, consumer-protection and data-protection duties.
• Consent: where the law requires consent, including for non-essential storage or access technologies and optional direct marketing. You may withdraw consent at any time without affecting earlier lawful processing.

Where information is required to open or administer an account, not providing it may mean that we cannot provide the relevant part of the service.

4. Public information

Published storefronts are public. Your display name, profile image, biography, social-media handles, recommendations and other content you choose to publish may be viewed, copied or shared by anyone. Do not publish information that you want to keep private.

5. Cookies and local storage

TravelSearch and our sign-in provider use cookies or similar technologies that are needed for sign-in, security and core site functions. We also use browser local storage to remember your colour theme, keep draft or onboarding state, create a pseudonymous visitor key and avoid counting the same storefront visit repeatedly. Affiliate links also carry an attribution reference so a booking can be credited correctly.

Where a technology is not strictly necessary, we will ask for consent before using it as required by law. You can remove local storage and cookies using your browser controls, although doing so may sign you out, remove saved preferences or cause a visit to be counted again. A third-party site you visit through a link applies its own cookie notice.

6. Who we share information with

We may share relevant information with:

• Clerk, which provides authentication and account services;
• Supabase, which provides database, storage and server-function services;
• Travelpayouts, Trip.com and other relevant affiliate or booking providers, so links, bookings and commissions can be attributed and reconciled;
• hosting, security, communications, professional-adviser and support suppliers acting under appropriate obligations;
• regulators, courts, law enforcement or other parties where disclosure is required by law or reasonably necessary to establish, exercise or defend legal rights; and
• a buyer, investor or successor in connection with a proposed or completed business reorganisation, subject to appropriate confidentiality safeguards.

We do not sell your personal information.

7. International transfers

Some providers may process information outside the United Kingdom. Where UK data law requires it, we use a UK adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful safeguard. Contact us if you would like information about the safeguard used for a particular transfer.

8. How long we keep information

We keep account and storefront information while your account is active and then only as long as reasonably needed for the purposes above. Contract, transaction, commission and tax records may normally be kept for up to six years after the relevant relationship or transaction. Security records, visit and click data are retained for a shorter period where practicable, unless needed to investigate abuse or resolve a dispute. Information stored only in your browser remains until you or your browser removes it.

We consider the nature and sensitivity of the information, legal limitation and record- keeping periods, risk of harm, and whether we can achieve the purpose with aggregated or anonymised information.

9. Your data-protection rights

Depending on the circumstances, UK data law may give you rights to access, correct, erase or restrict use of your information; receive certain information in a portable format; and withdraw consent. You may also object to processing based on legitimate interests or to direct marketing.

You have an absolute right to object to the use of your personal information for direct marketing. You may also object to processing based on our legitimate interests.

Email privacy@travelsearch.io to exercise a right. We may need to confirm your identity and may lawfully refuse or limit a request in some circumstances. There is normally no fee.

10. Complaints

Please contact us first so we can try to resolve your concern. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data-protection regulator. Visit ico.org.uk/make-a-complaintor telephone 0303 123 1113.

11. Security and children

We use proportionate technical and organisational measures designed to protect personal information. No online service is completely secure, so please use a strong password and protect your account credentials.

TravelSearch is not intended for children under 18. If you believe a child has provided us with personal information, please contact us.

12. Changes to this notice

We may update this notice to reflect changes to the service or the law. We will post the updated version here and change the date above. If a change materially affects how we use information, we will take reasonable steps to bring it to your attention.

Please also read our Terms of Service.