We respect your privacy and are committed to protecting your personal data. This privacy notice informs you about how we collect, use, and store your personal data when you visit our website, as well as your privacy rights and how data protection laws protect you.

1. WHO WE ARE AND IMPORTANT INFORMATION
Purpose of this Privacy Notice

This privacy notice explains how we collect and process your personal data when you use our website. The personal data we collect is limited to what is necessary to offer our services, such as signing up for our newsletter. Our website is not intended for children, and we do not knowingly collect data relating to children through it.

You must read this privacy notice together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy notice supplements the other notices and is not intended to override them.

Data Controller

TripPA Ltd is the controller and is responsible for your personal data (referred to as “we,” “us,” or “our” in this privacy notice). Our company address is 26 New Road, Bourne End, SL8 5BH.

For all data matters, please contact Amanda Valentine, our Data Protection Officer, at amanda@trippa.net.

Third-party Links

Our website may include links to third-party websites. We do not control these third-party websites and are not responsible for their privacy statements. When leaving our site, we encourage you to review their privacy notices.

2. THE PERSONAL DATA WE COLLECT ABOUT YOU

Personal data, or personal information, means any information about an individual from which that person can be identified. You can find out more about personal data from the Information Commissioner’s Office.

We only collect the personal data you provide directly or through cookies. This includes:

  • Identity Data: Name and Location (if you sign up for our newsletter).
  • Contact Data: Email address (from our newsletter sign-up form).

If you subscribe to our newsletter or engage with us to discuss potential use of our app service, we will collect additional personal data as needed.

We also collect aggregated data via cookies, such as statistical, technical, or demographic data, which does not directly identify you. This data is used for website performance and analytics purposes.

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

Where we need to collect your personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (e.g., to provide you with the service). In this case, we may have to cancel the service, but we will notify you if this is the case.

3. HOW WE COLLECT YOUR PERSONAL DATA

We collect your personal data through direct interactions. You may give us your identity, contact, and technical data by filling in forms or by corresponding with us by post, phone, email, or otherwise. This includes personal data you provide when you:

  • Subscribe to our newsletter.
  • Contact us through our contact form.
  • Enquire about our products and services.
4. HOW WE USE YOUR PERSONAL DATA

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • Performance of Contract: This means processing your data where it is necessary for the performance of a contract with you (e.g., providing access to our services).
  • Legitimate Interests: This means the interest of our business in conducting and managing our business to give you the best service/product and the most secure experience.
  • Legal or Regulatory Obligation: This means processing your personal data where it is necessary to comply with a legal or regulatory obligation.

We do not rely on consent as a legal basis for processing your personal data other than in relation to sending third-party direct marketing communications to you. You have the right to withdraw consent at any time by contacting us.

Purposes for which we will use your personal data:

We process your personal data for several lawful purposes, including:

  • To register you as a new customer.
  • To manage subscriptions to newsletters and responding to inquiries submitted through the “Contact Us” form.
  • For marketing communications, if you have opted-in or requested information.
Cookies

You can set your browser to refuse all or some browser cookies or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. For more information about the cookies we use, please see our [Cookies Policy].

Change of Purpose

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact the DPO.

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

5. WHO WE SHARE YOUR PERSONAL DATA WITH

We do not share your personal data with third parties except:

  • Service Providers: We may share data with our service providers (like sender.net for the newsletter) to help us deliver our services.
  • Professional Advisers: (acting as processors or joint controllers) such as lawyers, accountants, and insurers.
  • Regulatory Authorities and others as required by law or regulatory obligations.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

6. INTERNATIONAL TRANSFERS

We do not transfer your personal data outside the UK.

7. DATA SECURITY

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We also limit access to your personal data to those employees, agents, and contractors who need to know, and they will only process your personal data on our instructions.

8. DATA RETENTION

We will retain your personal data only for as long as necessary for the purposes we collected it for, including legal, accounting, or reporting purposes. You can request further details on retention periods by contacting us at amanda@trippa.net.

9. YOUR LEGAL RIGHTS

You have the following rights regarding your personal data:

  • Request a copy of your personal data.
  • Request the correction or erasure of your personal data.
  • Withdraw your consent where consent is the lawful basis for processing.
  • The right to request that we provide you with your personal data and where possible, to transmit that data directly to another data controller, (known as the right to data portability), where applicable (i.e., where our processing is based on consent or is necessary for the performance of our contract with you or where we process your data by automated means).
  • The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing.
  • The right to object to our processing of personal data, where applicable (i.e., where processing is based on our legitimate interests or in performance of a task in the public interest/exercise of official authority; direct marketing or processing for the purposes of scientific/historical research and statistics).

To exercise your rights, contact our Data Protection Officer at amanda@trippa.net.

No Fee Required – With Some Exceptions

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable admin fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

What We May Need from You

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time Limit to Respond

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

10. CHANGES TO THIS NOTICE AND YOUR DUTY TO INFORM US OF CHANGES

This version was last updated on 10th March 2025. Please keep us informed if your personal data changes during our relationship.

11. QUERIES, REQUESTS, OR CONCERNS

If you have any queries or concerns regarding this privacy notice or your personal data, please contact our Data Protection Officer at amanda@trippa.net. If this does not resolve your complaint to your satisfaction, you have the right to lodge a complaint with the Information Commissioner’s Office on 0303 123 113 or via email at https://ico.org.uk/global/contact-us/email/ or at the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, England, UK.