Travelisto Ltd (“Travelisto”, “we”, “us” or “our”) is committed to protecting your privacy and handling your personal data openly and lawfully. This notice explains what personal information we collect, how we use and protect it, who we share it with, and the rights you have over it.

We are the data controller responsible for your personal data. Travelisto Ltd is a company registered in England and Wales (company number 11266800), with its registered office at 124 City Road, London EC1V 2NX. If you have any questions about this notice or how we handle your data, contact us at dataprotection@travelisto.com.

What this notice covers

This notice applies to personal data we collect through our website travelisto.com, and when you contact us or enquire about or book travel arrangements by phone, email, WhatsApp or in person. Where our website links to other websites (for example our suppliers’ sites), those sites have their own privacy policies and we are not responsible for them.

The personal data we collect

Depending on how you interact with us, we may collect:

  • Identity and contact details — your name, the names of others travelling on your booking, postal address, email address and telephone number.
  • Booking details — the names exactly as shown on travellers’ passports, dates of birth, passport details, nationality, and your travel preferences and itinerary.
  • Special category data — where relevant to your booking, any health, mobility, accessibility or dietary requirements you ask us to arrange. We collect this only where you provide it and use it solely to fulfil your request.
  • Payment information — details needed to take payment. Card payments are processed by our payment provider on their own secure systems; we do not store full card details on our own systems.
  • Marketing preferences — whether you have agreed to receive offers and updates from us.
  • Technical and usage data — information collected automatically when you use our website, such as IP address, device and browser type, and pages visited, through cookies and similar technologies (see our Cookie Policy).

How we collect it

We collect personal data directly from you when you make an enquiry, request a quote, make a booking, sign up to our newsletter or contact us. Some data is collected automatically through cookies when you use our website. Occasionally we may receive data from a third party — for example, another member of your party who makes a booking on your behalf.

How we use your data, and our lawful bases

  • To respond to your enquiry and prepare a quote — our legitimate interest in handling enquiries, and to take steps at your request before entering a contract.
  • To arrange and manage your booking — performance of our contract with you. As a travel agent, we pass the details needed to fulfil your booking to the relevant suppliers (such as tour operators, airlines, hotels, cruise lines and transfer or car-hire providers).
  • To take payment and provide financial protection — performance of our contract and compliance with our legal obligations.
  • To meet our legal and regulatory obligations — for example accounting, tax, and the requirements of our financial-protection arrangements.
  • To send you marketing about holidays and offers — your consent, which you can withdraw at any time. For existing customers we may contact you about similar arrangements on the basis of our legitimate interests, and you can opt out at any time.
  • To protect our business and website, prevent fraud and improve our services — our legitimate interests.

Where we rely on legitimate interests, we have satisfied ourselves that these are not overridden by your rights and freedoms.

Special category data

Some information you give us — such as health, mobility or dietary needs — is “special category” data under data protection law. We process it only to arrange the services you have requested, and only with your explicit consent, which you give by providing the information for that purpose. You can withdraw it by contacting us, although this may affect our ability to make those arrangements.

Who we share your data with

To provide our services we share your personal data with:

  • Travel suppliers — the tour operators, airlines, hotels, cruise lines, transfer and car-hire providers and other suppliers needed to fulfil your booking.
  • Our payment provider — Protected Payment Services, part of Protected Trust Services, which processes payments securely on its own systems.
  • Protected Trust Services (PTS) — for the financial protection of money held in trust on your behalf (we are PTS member 6035).
  • Our service providers — for example our IT, hosting, email and website-analytics providers, who act on our instructions.
  • Professional advisers and authorities — where required by law, or to establish, exercise or defend legal claims.

We do not sell your personal data to anyone.

Sending your data outside the UK

Because holidays often take place abroad, fulfilling your booking usually means transferring your data to suppliers in your destination country, which may be outside the UK and the European Economic Area. Where this happens, it is because the transfer is necessary to perform your contract — to provide the travel arrangements you have booked. Where we use other providers outside the UK, we take steps to ensure your data is protected by appropriate safeguards.

How long we keep your data

We keep your personal data only for as long as we need it. We keep booking and financial records for up to 6 years after your last transaction with us, to meet our legal, accounting and financial-protection obligations. Enquiry data that does not lead to a booking may be kept for up to 1 year. Marketing data is kept until you unsubscribe, withdraw consent, or ask us to stop contacting you.

How we protect your data

We take appropriate technical and organisational measures to keep your personal data secure and to guard against unauthorised access, loss, alteration or disclosure. Access to personal data within Travelisto is limited to staff who need it to do their job, and they are bound by confidentiality.

Your rights

Under UK data protection law you have the right to:

  • access the personal data we hold about you;
  • ask us to correct inaccurate or incomplete data;
  • ask us to delete your data in certain circumstances;
  • ask us to restrict or object to our processing in certain circumstances;
  • ask us to transfer your data to you or another provider (data portability); and
  • withdraw your consent at any time where we rely on consent.

To exercise any of these rights, contact us at dataprotection@travelisto.com. We will respond within the time limits set by law. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113 — though we would appreciate the chance to put things right first.

Cookies

Our website uses cookies and similar technologies. For a full list of the cookies we use and to manage your preferences, see our Cookie Policy.

Changes to this notice

We may update this notice from time to time. The current version is always available on this page. This notice was last updated on 1 January 2026.

Contact us

Travelisto Ltd, 124 City Road, London EC1V 2NX. Email: dataprotection@travelisto.com. Phone: 020 8126 1000.