This policy explains what personal data Trip Tides collects, why we collect it, how long we keep it and what rights you have. It applies to this website and to enquiries made through it.
Last updated: 25 August 2026
Who we are
Trip Tides is an independent travel agency based in Chatham, Kent, trading as a sole trader. For the purposes of UK GDPR the data controller is the proprietor of Trip Tides — as a sole trader there is no separate company. Our correspondence address is 11 Ordnance Street, Chatham, Kent ME4 6SF and our You can contact us about anything in this policy at contactus@triptides.co.uk or on 07415 279368.
For the purposes of UK GDPR we are the data controller for enquiries you make to us. Our
You can contact us about anything in this policy at contactus@triptides.co.uk or 07415 279368.
What we collect
| Data | Why | Lawful basis |
|---|---|---|
| Name, email, phone | To prepare your quote and contact you about it | Legitimate interests — responding to an enquiry you made |
| Travel dates, party size, ages of children | To price the holiday and match it to your needs | Legitimate interests |
| Budget and preferences | To recommend suitable options | Legitimate interests |
| Passport details, if you book | Required by airlines and our supplier to issue tickets | Performance of a contract |
| Accessibility or dietary needs, if you tell us | To arrange suitable travel | Explicit consent (special category data) |
| Website analytics and advertising cookies | To measure how our advertising performs | Consent — see our cookie policy |
Who we share it with
To arrange your holiday we pass the details needed to fulfil it to the travel supplier providing your holiday for your booking, and to the airlines, hotels and transfer operators involved. Which supplier that is depends on the holiday you choose, and we name them on your quote and confirmation. We share only what is necessary to make and service the booking.
We also use these processors:
- Web3Forms — delivers enquiry form submissions to our inbox
- Our website hosting provider — stores this website and its server logs
- Meta Platforms — advertising measurement, only if you accept cookies
Some of these providers may process data outside the UK. Where they do, transfers are covered by the UK International Data Transfer Agreement or an adequacy decision.
We never sell your data, and we do not pass it to third parties for their own marketing.
How long we keep it
- Enquiries that don't become bookings: 12 months, then deleted
- Bookings: 7 years after travel, to meet accounting and insurance requirements
- Marketing consent records: until you withdraw consent, plus 2 years
How we keep it safe
Your details are held on password-protected systems with access limited to the people who need it to arrange your holiday. Enquiry forms and this website are served over an encrypted connection. We do not store card details — payments are taken by the travel company providing your holiday, or through a regulated payment provider, and we never see the full card number.
If a breach occurs that is likely to risk your rights or freedoms, we will report it to the Information Commissioner's Office within 72 hours and tell you directly.
Automated decisions
We do not make any decision about you by automated means alone, and we do not profile you. Every quote is prepared by a person.
Where your data comes from
Almost always from you, through an enquiry form, an email or a phone call. If someone books on your behalf — a lead traveller booking for a family or group — we receive your details from them, and we rely on them having your permission to share them.
Your rights
Under UK GDPR you have the right to:
- Ask what we hold about you, and receive a copy
- Have inaccurate data corrected
- Ask us to delete your data, where we have no ongoing need for it
- Object to processing based on legitimate interests
- Withdraw consent at any time, where consent is the basis
- Ask us to restrict processing while a dispute is resolved
- Receive your data in a portable format
Email contactus@triptides.co.uk and we will respond within one month.
Marketing
We only send marketing if you have asked for it. Every message includes an unsubscribe link, and we act on it immediately.
Children
This site is not directed at children and we do not knowingly collect data from anyone under 16 except the names and ages of children included in a family booking, which are provided by the adult making it.
Changes
If we change this policy we will update the date at the top. Material changes affecting people who have already enquired will be notified by email.