1. Who We Are
This policy applies to all products, services, websites, and sub-brands operated by CreatorCraft Ltd, registered at 71-75, Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. We operate under the brand name Tripaway.
For the purposes of UK data protection law (including the UK GDPR and the Data Protection Act 2018), CreatorCraft Ltd is the “data controller” of your personal data unless otherwise stated.
2. Personal Information We Collect
Depending on how you engage with us, we may collect:
- name, email address, phone number, organisation, job title.
- city, timezone, interests, travel preferences.
- membership status, subscription details, invoices, payment confirmations (processed by third parties).
- feedback, support requests, emails.
- device and browser type, IP address, usage data.
3. How We Collect Your Information
- Directly from you when you fill out forms, subscribe, or communicate with us.
- Automatically through cookies and analytics tools.
- From third parties such as payment processors and marketing providers.
4. Legal Bases for Processing (UK GDPR)
We process personal data only where we have a lawful basis to do so, including:
- to provide the Service to you and manage subscriptions.
- to operate, secure, and improve our Service, and to communicate with you about it (balanced against your rights).
- where required for certain marketing or cookies.
5. How We Use Your Data
- Provide access to Tripaway platforms and flight deals.
- Create and manage your account or subscription.
- Communicate with you by email or in‑product messaging.
- Personalise your flight alerts.
- Process payments.
6. Sharing of Information
We share personal data with vendors and service providers that support our operations (e.g., hosting, analytics, email delivery). We do not sell your personal data. We may also share information when required by law or in connection with corporate transactions.
Where we use processors (service providers), we require them to protect your data and only use it for the purposes we specify, in line with applicable law.
7. Cookies & Tracking
We may use cookies and similar technologies to support essential site functionality (for example, security and preferences). You can control cookies in your browser settings.
Cookies may include strictly necessary cookies (required for the site to work) and, if enabled, analytics or marketing cookies. You can disable non-essential cookies through your browser settings. If we implement a cookie banner/consent tool, your preferences will be respected where required by law.
8. Email Marketing
If you opt in or if otherwise permitted by law, we may send you updates about deals and services. You can opt out at any time using the “unsubscribe” link in our emails.
9. Payment Information
If you make a purchase, we use third‑party payment processors. We do not store full card numbers. Payment providers process your information securely.
10. International Transfers
Our service providers may process data outside the UK. Where we transfer personal data internationally, we use appropriate safeguards (such as contractual protections) as required by applicable law.
11. Data Retention & Security
We retain personal data as long as necessary. We implement industry‑standard safeguards, though no method is completely secure.
Retention periods depend on the purpose and legal requirements (for example, retaining transaction records for accounting and compliance). We delete or anonymize data when it is no longer needed, unless we are required to keep it longer.
12. Your Rights
You may have rights under data protection laws to access, correct, delete, or restrict processing of your personal data, and to object to certain processing. You may also have the right to data portability and the right to withdraw consent where processing is based on consent.
To exercise these rights, contact us at info@tripaway.io. We may need to verify your identity before responding.
If you are unhappy with our response, you may have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local regulator.
13. Children’s Privacy
Our Service is not intended for children. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us so we can take appropriate steps.
14. Changes to This Policy
We may update this Privacy Policy. Material changes will be notified by email or through our websites.
15. Contact Us
71-75, Shelton Street
Covent Garden, London
United Kingdom, WC2H 9JQ