Privacy Policy

Privacy Policy (v2)

Last updated: 04/01/2026

This Privacy Policy applies to the collection, processing, and protection of personal data acquired through your use of the website accessible at https://yourtripguides.com (the “Platform”).

```
General
```

The term “personal data” means any information relating to an identified or identifiable natural person, as defined in Article 4(1) of the UK General Data Protection Regulation (“UK GDPR”). The UK GDPR, together with the Data Protection Act 2018, forms the applicable data protection law in the United Kingdom.

We process personal data only to the extent necessary to provide a functioning Platform and the services we offer. Personal data is processed where we have a lawful basis, including: performance of a contract, compliance with legal obligations, legitimate interests, and (where required) your consent.

If we process personal data for a purpose other than the purpose for which it was originally collected, we will provide information about that new purpose and, where required, obtain additional consent.

You are not legally obliged to provide personal data. However, certain personal data may be required to provide specific Platform functions (for example, account access or generation of Trip Plans/Reports). If you do not provide required data, we may not be able to provide certain features. Failure to provide voluntary information will not result in disadvantages, but may limit personalisation.

We may use third-party service providers (“processors”) to help us operate the Platform (for example, hosting, email delivery, analytics where used, and payment processing). These providers process personal data on our behalf under contractual terms designed to protect your data and in accordance with our instructions.

Where personal data is transferred to countries outside the UK and/or the European Economic Area (“EEA”), we ensure appropriate safeguards are in place in accordance with applicable data protection requirements.

```
Controller (Liable Party)
```

The controller (Article 4(7) UK GDPR) is:

TRIP A GO GO LTD (Company registration number: 15127689)

Legal address: Dept 6134a 126 East Ferry Road, Canary Wharf, London, United Kingdom, E14 9FP

For privacy requests and questions, contact: info@yourtripguides.com (or the contact details published on the Platform).

```
Your Rights
```

You have the following rights regarding personal data concerning you (subject to applicable law), including under the UK GDPR:

```
Right of access (Article 15 UK GDPR)
```

Right to rectification (Article 16 UK GDPR)

```
Right to erasure (Article 17 UK GDPR)
```

Right to restriction of processing (Article 18 UK GDPR)

```
Right to object (Article 21 UK GDPR)
```

Right to data portability (Article 20 UK GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority. In the United Kingdom, the relevant authority is the Information Commissioner’s Office (ICO).

```
Withdrawing Consent / Objecting
```

Where we rely on your consent, you may withdraw it at any time with effect for the future. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

Where we rely on legitimate interests, you may object to the processing. If you object, we will assess your request and either stop/adjust processing or explain our compelling legitimate grounds where applicable.


Please send requests, objections, or consent withdrawals to

info@yourtripguides.com (or the contact details published on the Platform).

Personal Data We Collect and How We Use It

Informational use of the Platform (log data)

If you access the Platform without registering or providing information (“informational use”), we may collect personal data your browser transmits to our server, such as:

```
IP address
```
```
date and time of the request
```
```
time zone difference relative to GMT
```
```
content of the request (specific page)
```
```
access status / HTTP status code
```
```
volume of data transferred
```
```
referring website
```
```
browser type/version
```
```
operating system and interface
```

language and version of browser software

This data may be stored in server log files for security and troubleshooting. We do not use these logs for direct marketing purposes.

Purpose: deliver the Platform to your device; ensure stability and security; prevent misuse.

Legal basis: legitimate interests (Article 6(1)(f) UK GDPR).

Retention: server logs are retained only for as long as necessary for security, troubleshooting, and legal compliance, and are then deleted or anonymised.

```
Cookies and similar technologies
```

We use cookies and similar technologies to provide and improve the Platform. Cookies are small text files stored on your device.


Cookie controls: You can manage cookies through your browser settings and, where available, through our cookie preferences/consent tool. If you disable cookies, some Platform functions may not work properly.

We may use:

Strictly necessary cookies (e.g., security, session/login, core functionality).

Legal basis: legitimate interests (Article 6(1)(f) UK GDPR) and/or necessity to provide the service you request.

Optional cookies (e.g., analytics/measurement, performance improvements, marketing cookies where used).

Legal basis: consent (Article 6(1)(a) UK GDPR), where required. Where optional cookies are used, you can choose them via our cookie banner/preferences tool (where available) or manage cookies through your browser settings.

Details of cookies (where required/available) may be provided on a cookie information page and/or within the cookie preferences tool.

```
Registration and account management
```

If you register for an account, we process the data you provide during registration and account use (for example, email address and account settings). Mandatory fields are marked as such; without them, we may not be able to register you.

Purposes: create and manage your account; provide access to features available to registered users; security and fraud prevention; service messages related to your account.

Legal bases: performance of a contract (Article 6(1)(b) UK GDPR) and legitimate interests (Article 6(1)(f) UK GDPR) (e.g., Platform security and abuse prevention).

Service-related communications (security notices, important updates) are processed on the basis of contract necessity and/or legitimate interests, depending on the context.

Additional Services (Account, Trip Planning Inputs, Wallet)

When you create an account or use our trip planning features, we process additional personal data to provide the Platform and generate Trip Plans/Reports. This may include account data (such as your email address), trip planning inputs you submit (such as destination, preferences, budget ranges, travel dates if provided, transport and food preferences, and interests), and Wallet/payment-related metadata (such as transaction status, amount, currency and transaction identifiers).

We do not store full payment card details; payment processing is handled by third-party payment providers.

We use this data to:

```
create and manage your account;
```

generate, deliver and store your Trip Plans/Reports in your dashboard;

```
provide customer support;
```

prevent fraud, misuse and secure the Platform; and

process Wallet top-ups and paid features via third-party payment providers.

Legal bases: performance of a contract (UK GDPR Article 6(1)(b)) and legitimate interests (UK GDPR Article 6(1)(f)) (for example, to operate, secure and improve the Platform and prevent fraud). Where processing is necessary to comply with a legal obligation (e.g., accounting/tax record-keeping), the legal basis is UK GDPR Article 6(1)(c). Where we rely on consent (UK GDPR Article 6(1)(a))—for example for optional cookies or marketing—you can withdraw your consent at any time.

```
AI Processing
```

Trip Plans/Reports and recommendations are generated using automated processing (including artificial intelligence) based on the trip planning inputs you provide.

To support this process, our team maintains a curated library of travel information, templates, and planning logic based on publicly available and appropriately licensed sources, combined with internal structuring and quality checks. Output may change over time and may differ depending on your inputs.

Training and improvement: We do not use your trip planning inputs to train AI models in a way that identifies you, unless we have a lawful basis to do so


and, where required, obtain your explicit consent or use anonymised/aggregated data.

```
Contacting us
```

If you contact us by email, we process the personal data you provide in your message.

Purposes: respond to your enquiry; provide support; maintain appropriate records; prevent abuse.

Legal bases: legitimate interests (Article 6(1)(f)) and, where the enquiry relates to providing services or a contract, performance of a contract (Article 6(1)(b)).

Retention: enquiry data is retained only for as long as necessary to handle your request, comply with legal obligations, and maintain appropriate records, and is then deleted or anonymised.

```
Sharing of Personal Data
```

We may share personal data with:

hosting and infrastructure providers (to operate the Platform);

payment processors (to process Wallet top-ups and payments);

email/communication providers (to send transactional messages and support replies);

analytics providers (where used and where consent/other lawful basis applies);

professional advisers (legal/accounting) where necessary; and

authorities where required by law or to protect rights, security, and prevent fraud.

We share only what is necessary and apply contractual safeguards with processors where required.

We do not sell your personal data.

```
International Transfers
```

Your personal data may be processed in countries outside the UK and/or the EEA. Where international transfers occur, we use appropriate safeguards required by applicable law (for example, adequacy decisions and/or contractual safeguards).

```
Data Retention
```

We keep personal data only for as long as necessary for the purposes described in this Policy, including to provide the Platform, comply with legal obligations, resolve disputes, enforce agreements, and maintain security. Retention periods may vary depending on data type and legal requirements.

```
Security
```

We use appropriate technical and organisational measures to protect personal data. However, no online service can be guaranteed to be completely secure, and you should protect your account credentials and devices.

```
Children
```

The Platform is not intended for persons under 18. We do not knowingly collect personal data from children.

```
Changes to this Policy
```

We may update this Privacy Policy from time to time. The latest version will be published on the Platform and will apply from the “Last updated” date shown above.