Privacy Policy

Tipisty ("Tipisty", "we", "us", or "our") is committed to protecting your privacy and handling your personal information with transparency, responsibility, and care. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our travel-related services, or interact with Tipisty online.

By accessing or using Tipisty, you agree to the practices described in this Privacy Policy.

1. Information We Collect

We may collect and process the following categories of personal and non-personal information:

Full name
Email address
Phone number
Billing and payment information (when required)
Passport or travel-related details (if required to fulfil a booking)
User account information
Communication and marketing preferences

1.2 Automatically Collected Information

When you visit or use Tipisty, we may automatically collect:

IP address
Device type, browser type, and operating system
Cookies and similar tracking data
Pages viewed and time spent on the website
Travel searches (such as flights, hotels, or packages)
Referral and exit pages

1.3 Information from Third Parties

We may receive information from trusted third parties, including:

Airlines, hotels, car rental providers, cruise operators, and other travel suppliers
Affiliate and marketing partners
Payment processors
Analytics and advertising platforms

2. How We Use Your Information

We use the collected information for the following purposes:

To provide, operate, and improve Tipisty’s travel services
To process bookings, reservations, and payments
To send booking confirmations, travel updates, and service-related communications
To deliver promotional emails, newsletters, and deal alerts (with your consent)
To personalise content, recommendations, and travel offers
To monitor usage, analyse trends, and enhance website performance
To prevent fraud, security threats, and unauthorised activity
To comply with legal and regulatory requirements

3. Legal Basis for Processing (GDPR Compliance)

For users in the UK and EU, Tipisty processes personal data under the following legal bases:

Consent – when you opt in to receive marketing communications
Contractual necessity – when processing bookings, payments, or inquiries
Legitimate interests – for analytics, service improvements, and fraud prevention
Legal obligations – where processing is required by law

4. Cookies and Tracking Technologies

Tipisty uses cookies, pixels, web beacons, and similar technologies to:

Remember user preferences
Improve website functionality and search performance
Deliver relevant advertisements and offers
Measure traffic and website performance

You can control or disable cookies through your browser settings or via our on-site cookie consent tool. Please note that some features may not function properly if cookies are disabled.

5. Sharing and Disclosure of Information

We do not sell your personal data. We may share information only in the following circumstances:

5.1 Travel Partners

Airlines, hotels, car rental companies, cruise operators, tour providers, and booking platforms—solely to complete and manage your booking.

5.2 Service Providers

Trusted third-party vendors who assist us with:

Payment processing
Customer support services
Email communications
IT infrastructure and data hosting

5.3 Legal and Regulatory Requirements

When disclosure is required by law, regulation, court order, or government authority.

5.4 Business Transfers

In the event of a merger, acquisition, or business restructuring, customer data may be transferred in accordance with applicable data protection laws.

6. Data Retention

We retain personal information only for as long as necessary to:

Provide and manage our services
Meet legal and regulatory requirements
Resolve disputes and enforce agreements

After this period, data is securely deleted or anonymised.

7. Your Rights (UK & EU Users)

Under the UK GDPR and EU GDPR, you have the right to:

Access your personal data
Request correction of inaccurate or incomplete data
Request deletion of your personal data ("right to be forgotten")