Privacy Notice & Cookies Statement
Version: 17th October 2020
Changes to this privacy notice
From time to time, we may change this privacy notice. If there are any significant changes we will post updates on our website, applications, provided platforms or let you know by email. We keep our Privacy Policy under regular review in order to reflect changes in our services and privacy regulation. This privacy policy was last updated on 17th October 2020.
Privacy Notice
Tripamix respects your
privacy and is committed to protecting your personal data. This privacy notice
will inform you as to how we look after your personal data when you visit our
website (regardless of where you visit it from) or when you otherwise provide
personal data to us via other means (such as over the telephone) in order to
purchase travel arrangements from us, and tell you about your privacy rights
and how the law protects you.
Tripamix are committed to
protecting and respecting the privacy of your personal data. This privacy
notice will inform you how your data is collected, used, transferred and
disclosed by Tripamix. It applies to data being
collected when you use our website (regardless of where your visit from or what
operating system or device you are using).
Who is Tripamix?
Tripamix is a Travel &
Lifestyle platform with the focus of becoming the most visited website globally
for travel related trips, products and services by 2030. We work with the majority
of accommodation types available and businesses associated with travel or
retail. Tripamix handles travel related bookings for
accommodation.
Tripamix is a UK limited company, with the company registration number being 10827133 (collectively referred to as “Tripamix” , “we”, “us”, and “our” in this privacy notice) is the controller and responsible for your personal data collected through www.tripamix.com (collectively referred to as the “website”, “the platform”, “services”).
Details
for the nominated Data Protection Officer responsible for overseeing any
questions regarding personal data are Ravi Jassal-
Founder at Tripamix.
Our commitment
Tripamix takes the protection
of your personal data seriously and will assure the processing of your personal
data is done fairly, lawfully and transparently. The following privacy notice
describes the personal data we are collecting and how it is or will be used.
We will only collect and use your personal data for
the following purposes:
•
Improve
our services
•
Meet
our legal responsibilities
•
Fulfil
your order(s)
•
Give
you the best travel shopping experience
•
Keep
you up to date with new competitions, offers, tailored marketing campaigns
Data Security & Safety
We
have organisational safeguards and security measures in place to assure your
personal data is protected from being accidentally lost, used or accessed by
unauthorised users, altered or disclosed. Tripamix
uses a secure encrypted connection when engaging with your personal data
however it is key the user also assures they are using a secure connection too.
For example, be aware of using public networks such as internet café’s which
could be intercepted by other users on the same public network.
All third party entities Tripamix have
collaborated with and is involved in processing any personal data on your
behalf require having security measures in place to assure protection of your
data and assure the personal data is treated in accordance with the law.
In the
case of unfortunate events we do have a personal data breach, we will notify
you and the required regulators when we are required to do so.
The Personal data we collect about
you
Personal
data is any information about an individual which then that person can be
identified. Personal data does not include anonymised data, where the
identifying information has been removed.
The
types of personal data we collect about are the following:
Identity Data- This is data associating to your identity, first name, maiden name, last name, alternative identifiers, marital status, title, date of birth, age, gender, religion, photo
Contact data- this is data associating how to contact you, mobile number, landline number, delivery address, billing address, email address, alternative email address, user name, alternative social media id, membership number,
Financial data- This is data is associating to your methods of payment details, bank account details.
Transaction data- This is data associating to transactions carried out through Tripamix. This includes details about the payment(s), details of products purchased, details of services purchased.
Technical data- This is associating to technical data required to improve website performance and experience. This includes IP address, browser type and version, time zone setting, device version, operating system, browser plug-in(s), technologies used to access Tripamix platform, duration spent, your journey through the website, login data.
Usage data- This is associating to collection of information which informs Tripamix how you engage on the Tripamix website platform with our products and services on show and purchasing.
Marketing & Communications data- This is data associating to your preferences in regards to whether or not you want to receive marketing from Tripamix and our third parties.
We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.
How we collect your data
We may collect personal data in the following ways:
• Direct interactions – you may give us your identity, contact, financial, transaction, profile, and marketing and communications data (as described above) by filling in forms, entering information online or by corresponding with us by post, phone, email, telephone or otherwise. This includes personal data you willingly provide. For example, when you:
•
Create
an account, make a booking or purchase products on our website;
•
Subscribe
to our social sites, newsletters, discussion boards, forums, competitions;
•
Enter
a competition;
•
Join
a Tripamix loyalty programme;
•
Join
a Tripamix subscription programme;
•
Complete
a voluntary market research survey;
•
Contact
us with feedback or an enquiry or reporting a problem (by phone, email, social
media, or messaging service);
•
Use
the “refer a friend” function on our website; or
•
When
you log in to our website via social media.
• Third parties- we may receive personal data about you from various third parties, including:
•
Contact,
Financial and Transaction Data from providers of technical, payment and
delivery services.
•
Technical
data from affiliate networks through whom you have accessed our website;
•
Identity
and Contact data from social media platforms when you log in to our website
using such social media platforms;
•
Technical
Data from third parties, including analytics providers such as Google, please
further information in the section entitles “marketing preferences, adverts and
cookies”.
• Automated technologies or interactions- interacting with our website or mobile application- we may automatically collect the following types of data(all described as above); the technical data about your hardware, software, usage data about your browsing actions and patterns, and contact data where tasks are carried out via our website remain uncompleted, such as incomplete orders or abandoned transactions or baskets. We collect this data by using our cookies, server logs and other similar technologies. Please see our cookie policy for further details.
How we use your data
We
will only collect and process your personal data where we have a legal
obligation to do so. As a data controller, the legal basis for our collection
and use of your personal data may varies based on the manner and purpose for
which we collected it.
We will only collect personal data from you when:
•
We
have your consent to do so, or
•
We
need your personal data to perform a contract with you. For example, to process
a payment from you, fulfil a subscription, fulfil a booking and provide
customer support or support associated to Tripamix
related services.
•
We
need your data to share with the
•
We
have a legal obligation to collect or disclose personal data from you.
•
Processing
is legitimately in our interest and not overridden by your rights.
Failing to provide personal data
By law
or under the terms of a contract Tripamix has with
you we need to collect certain types of personal data as mentioned earlier. If
you fail to provide the data when requested Tripamix
may not be able to perform the contract we have with you or are trying to enter
with you.
In the
case of insufficient data being provided, we may not be able to process for
your subscription, booking or order and may have to cancel the process.
Uses made of your personal data
Your
personal data is used by Tripamix to support a range
of different activities we provide for example that various products and
services we offer. In the table below, we have listed the types of data used
together with types of activities and the legal bases we rely on when
processing them, including where appropriate, our legitimate interests. Please
be aware that we may process your personal data using more than one lawful
basis, depending on the specific activity involved. Please contact us if you
need details about the specific legal ground we are relying on to process your
personal data where more than one ground has been set out in the table below.
Purpose/Activity |
Type of Data |
Lawful basis for processing
including basis of legitimate interst |
To
create an account and register you as a new customer, property manager, or a
unique user type |
•
Identity •
Contact • Financial |
• Performance of a
contract with you. |
To
process a subscription, booking, order including: recording subscription,
booking, order details; keeping you informed about the subscription, booking,
order status and refunds/cancellations/additional charges if applied, collect
money owed to to us; and assist fraud prevention
and detection |
•
Identity •
Contact •
Financial •
Transaction • Techincal |
•
performance
of a contract with you • necessary for our
legitimate interest (to recover debts due to us) |
To
manage our relationship with you, including: providing you with any
information, products and services that you request from us; notifying you
about changes to our services, terms and conditions or privacy notice; asking
you to leave a review or take a survey. |
•
Identity •
Contact •
Profile • Marketing
& communication |
•
Performance
of a contract with you • Necessary for our
legitimate interests (to keep our records updated and to study how customers
use our products and services) |
To
enable you to take part in a competition, event, survey, or receive a reward
for shopping with us. |
•
Identity •
Contact •
Profile •
Usage • Marketing
& communications |
•
Performance
of a contract with you; • Necessary for our
legitimate interests (to keep our records updated and to study how customers
use our products and services) |
To
administer, protect and improve our business and our website/app, including:
troubleshooting, data analysis, testing, system maintenance, support, data
analysis, reporting and hosting of data; setting default options for you,
such as language and currency. |
•
Identity •
Contact •
Profile •
Technical •
Transaction • Marketing
& Communications |
•
Necessary
for our legitimate interests (for running our business, provision of
administration and IT services, network security, and to detect and prevent
fraud) • Necessary to comply
with a legal obligation |
To
deliver relevant website content, online advertisements and information for
you; and measure the effectiveness of the advertising provided. |
•
Identity •
Contact •
Profile •
Usage •
Marketing &
Communications • Technical |
• Necessary for our
legitimate interests (to study how customers use our products and services,
to develop them, to grow our business and to inform our marketing strategy) |
To
use data analytics to improve our website, products/services, marketing,
customer relationships and experiences |
•
Technical • Usage |
• Necessary for our
legitimate interests (to define types of customers for our products and
services, to keep our website updated and relevant, to develop our business
and to inform our marketing strategy) |
To
recommend products, services discounts and offers that may be of interest to
you, including to send you such information by email, post or SMS. |
•
Identity •
Contact •
Technical •
Usage •
Profile • Marketing
& communications |
•
Necessary
for our legitimate interests (to develop our products and services and grow
our business) or • Consent. |
To
inform or remind you by email of any task carried out via our website which
remains uncompleted, such as incomplete orders or abandoned baskets. |
•
Identity •
Contact • Usage |
• Necessary for our
legitimate interests (to improve the shopping experience of our customers) |
To
make suggestions and recommendations to you about goods or services that may
be of interest to you |
•
Identity •
Contact •
Technical •
Usage • Profile |
• Necessary for our
legitimate interests (to develop our products/services and grow our business) |
We
will only use your personal data for the purposes which we collected it, unless
we reasonably consider that we need to use it for another reason and that
reason is compatible with the original purpose. If we wish to use your personal
data for an unrelated purpose, we will notify you and explain the legal basis
which allows us to do so. Processing personal data without consent may occur in
compliance with the above rules where this is required or permitted by law.
If you
have any questions about how Tripamix use any of your
personal data, please contact our DPO.
How we share your data
We may disclose and share your personal data with
the parties set out below:
•
To
business partners, travel shops, suppliers, sub-contractors, other third
parties that are used in connection with running our business for the purposes
highlighted in the above table.
•
Third
party payment processing services.
•
Third
party service providers we engage with to provide IT systems, software and host
our domain.
•
Affiliate
networks through whom you may have accessed our website.
•
Analytics
and search engine providers that assist in improving and optimising our
website.
•
Third
party service providers who you may have engaged with through the use of our
website to deliver goods or a service you have ordered.
•
To
any third party to whom we may choose to sell, transfer, or merge parts of our
business or our assets. Alternatively, we may seek to acquire other businesses
or merge with them. If a change happens to our business, then the new owners
may use your personal data in the same way as set out in this privacy notice.
•
To
protect our customers and website from fraud and theft, we may share personal
data that is required to make identity checks and personal data that we obtain
from making identity checks (including data relating to your age, name and
location), together with account information, with organisations (including law
enforcement agencies), involved in fraud prevention and detection and credit
risk reduction. Please note that these third parties may retain a record of the
information that we provide to them for this purpose;
•
if
we are under a duty to disclose or share your personal data in order to comply
with any legal obligation; or
•
to
our professional advisers including lawyers, bankers, auditors and insurers who
provide consultancy, banking, legal, insurance and accounting services.
Marketing preferences, adverts and
cookies
Marketing- your preferences
It is likely we will send you marketing
communications and promotional offers:
•
If
you have signed up to us or opened any type of account with us or registered
for a competition, promotion, event or giveaway and you have not opted out of
receiving that marketing (in accordance with your preferences, as explained
below);
•
By
email and postage if you have signed up for receiving promotional material.
•
If
you have provided us with your details in regards to a competition or event and
you have consented to receiving such marketing.
Cookies
Our
website uses cookies to distinguish you from other users of our website and to
keep track of your visits. They help us to provide you with the very best
experience when you browse our website and to make improvements to our website.
They also help us and our advertising networks to make advertising relevant to
you and your interests.
We
collect information about your use of our online services we provide using cookies.
Cookies consist of small sized files that are sent by us to your computer or
other device which we are able to access when you visit our site in future.
Cookies help assist in remembering who you are and other information about your
visits. They can help display tailored information on a website in a way that
matches your interests. Most major websites use cookies.
You
can set your browser to refuse all or some browser cookies, or to alert you
when websites set or access cookies. If you disable or refuse cookies, please
note that some parts of our website may become inaccessible or not function
properly.
What are Cookies?
A cookie is
a text-only string of information that a website transfers to the cookie file
of the browser on your computer's hard disk so that the website can remember
who you are. Cookies will typically contain the name of the domain from which
the cookie has come, the "lifetime" of the cookie, and a value,
usually a randomly generated unique number.
Two types of
cookies are used on this web site - session cookies, which are temporary
cookies that remain in the cookie file of your browser until you leave the
site, and persistent cookies, which remain in the cookie file of your browser
for much longer (though how long will depend on the lifetime of the specific
cookie).
Cookies
essentially allow us to obtain information regarding users of our site which
essentially helps us to provide you with a better user experience and tailor
our services to your individual needs. We may collect information such as your
IP address, online activity, web browser details and online activity. We will
not however collect or store any of your passwords or other highly sensitive
data.
By using our
website with your browser settings adjusted to accept all cookies, we will take
this to mean that you want to use our products and services, and that you
consent to our use of cookies and other technologies as described in this
Policy.
The Cookies
that we use
We use the
following cookies:
- Strictly necessary cookies are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart, make use of e-billing services and manage bookings/orders.
- Analytical/performance cookies allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
- Functionality cookies are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
- Targeting cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.
Objecting to Cookies
Most
browsers have options that allow the visitor to control whether the browser
will accept cookies, reject cookies, or notify the visitor each time a cookie
is sent. You may elect to reject or block cookies by activating the setting on
your browser that allows you to refuse the setting of all or some cookies.
However,
if you use your browser settings to block all cookies (including essential
cookies) you may not be able to access all or parts of our site.
Lifetime of Cookies
Except
for essential cookies, all cookies will expire when the browsing session ends.
Use of analytics and targeted
advertising tools
We use a range of analytics and targeted advertising tools to display relevant website content on our website and online advertisements on other websites and apps (as described above) to you, deliver relevant content to you in marketing communications (where applicable), and to measure the effectiveness of the advertising provided.
In order to opt out of targeted advertising you need to disable your ‘cookies’ in your browser settings (see Cookie Policy for details) or opt-out of the relevant third-party Ad Settings. For example, you can opt-out of the Google Display Advertising Features.
The Digital Advertising Alliance (which includes companies such as Google, Responsys and Facebook) provides a tool called Web Choices that can perform a quick scan of your computer or mobile devices, find out which participating companies have enabled customised ads for your browser, and adjust your browser preferences accordingly.
If you would like any further information about the data collected by these third parties or the way in which the data is used, please contact us at customerservice@tripamix.com or our support section on Tripamix.com
Links to other websites and third
parties
Our
website may include links to and from the websites of our partner networks,
advertisers and affiliates, or to social media platforms. If you follow a link
to any of these websites, please note that these websites have their own
privacy policies and that we do not accept any responsibility or liability for
these policies. Please check these policies before you submit any personal data
to their websites.
Mobile services
When a
successful request our mobile services is activated, it is likely we will need
to keep your mobile phone number, the make and model of your phone, the
operating system used by your phone and details of your network operator, and
we will link a unique identifier to your mobile phone number. We’ll store your
device language, app language, country, We need this
information in order to provide the features and services enabled through our
mobile services and to administer our mobile service.
Comments and Reviews submitted to Tripamix
If you
wish to submit a comment or feedback on a blog or article featured on our
services, we may (but are not obliged to) publish your comment. We will collect
your name or username, country which will be displayed next to your comment and
e-mail address, which will not be published, but which we may use to contact
you in relation to your comment.
Social networks
If you
follow us or interact with us on any of our pages on third party social media
platforms, such as Instagram, Facebook, Twitter, Snapchat, Discord, Pinterest
and Google+, information you provide will be subject to the third party’s
privacy policy, as well as this privacy policy.
Data Retention
we
will keep your personal data for no longer than is necessary for the purpose(s)
it was provided for and to meet our legal obligations. Further details of the
periods for which we retain data are are available
upon request.
Your data and countries outside of
Europe
The
personal data we collect from you may be transferred to, and stored at,
destinations outside the European Economic Area (“EEA”) using legally provided
mechanisms to lawfully transfer data across borders. Many of our external third
parties and teams are based outside of the EEA; therefore
data may be processed by staff operating outside the EEA who work for us or for
one of our third parties we are collaborating with. Staff outside of the EEA
may be engaged in the processing of payment, fulfilling an order, customer
support services and various other support mechanisms required to fulfil your
satisfaction. We will take all steps required to ensure that your data is
treated securely and in accordance with this privacy notice.
You
also acknowledge that where your personal data is transferred outside the EEA,
controls on data protection may not be as wide as the legal requirements within
the EEA.
If
data is transferred from within the EEA to a jurisdiction outside the EEA, it
is done so under a Data Transfer Agreement, which contain standard data
protection contract clauses. The European Commission has adopted standard data
protection contract clauses (known as the Model Clauses) which provide
safeguards for personal information that is transferred outside of Europe. We
use Model Clauses when transferring personal data outside of Europe.
Please
contact us if you want further information on the countries to which we may
transfer personal data and the specific mechanism used by us when transferring
your personal data outside the EEA.
Your Rights
Under
certain circumstances, you have rights under data protection laws in relation
to your personal data. Please click on the links below to find out more about
these rights:
Request access to your personal
data
You
have the right to obtain a copy of the personal data we hold about you and
certain information relating to our processing of your personal data.
Request correction of your
personal data
You are entitled to have your personal data corrected if it is inaccurate or incomplete. You can update your personal data at any time by logging into your account and updating your details directly, or by emailing us at DPO@Tripamix.com
Request erasure of your personal
data
This
enables you to request that Tripamix delete your
personal data, where there is no good reason for us continuing to process it.
Note, however, that we may not always be able to comply with your request of
erasure for specific legal reasons, which will be notified to you, if
applicable, at the time of your request.
Request restriction of
processing of your personal data
You
have a right to ask Tripamix to suspend the
processing of your personal data in certain scenarios, for example if you want
us to establish the accuracy of the data, or you have objected to our use of
your data but we need to verify whether we have overriding legitimate grounds
to use it. Where processing is restricted, we are allowed to retain sufficient
information about you to ensure that the restriction is respected in future.
Request the transfer of your
personal data
You
have the right to obtain a digital copy of your personal data or request the
transfer of your personal data to another company. Please note though that this
right only applies to automated data which you initially provided consent for
us to use or where we used the data to perform a contract with you.
Object to processing of your
personal data
You
have the right to object to the processing of your personal data where we
believe we have a legitimate interest in processing it (as explained above).
You also have the right to object to our processing of your personal data for
direct marketing purposes. In some cases, we may demonstrate that we have
compelling legitimate grounds to process your data, which overrides your rights
and freedoms.
Object to automated decision
making and profiling
You
have the right to object to the automated processing of your personal data
without human intervention. This form of processing is permitted where it is
necessary as part of our contract with you, providing that appropriate
safeguards are in place or your explicit consent has been obtained.
We
will try to respond to all legitimate requests within one month. Occasionally,
it may take us longer than a month if your request is particularly complex or
you have made a number of requests. In this case, we will notify you and keep
you updated. We may need to request specific information from you to help us
confirm your identity and ensure your right to exercise any of the above
rights. This is a security measure to ensure that personal data is not
disclosed to any person who has no right to receive it.
Response time
We will try to respond
within 28 days of you contacting us regarding any of your rights. Depending on
the complexity of what is being requested it may take longer. In this case, we
will notify you and keep you updated.
Complaints
If you
have any concerns or complaints regarding the way in which we process your
data, please contact us directly. You also have the right to make a complaint
to the ICO (the data protection regulator in the UK). We would appreciate the
chance to deal with your concerns before you approach the ICO, so please do
contact us in the first instance.
Contacting us
We
welcome feedback be it positive, negative or recommendations and are happy to
answer any questions you may have about your data.
Please forward any questions to customerservice@tripamix.com
Tripamix
Limited