Privacy Policy
Last updated: 1 March 2026 · Version 2.0Plain English: TripHunt is a free flight comparison site. We only collect your email if you sign up for alerts. Analytics are anonymised and only run with your consent. We never sell your data. You can ask us to delete everything at any time by emailing privacy@triphunt.org.
1. Who we are — Data Controller
TripHunt is operated as a sole trader business running triphunt.org.
Contact: privacy@triphunt.org
For UK GDPR and the Data Protection Act 2018, the data controller is the operator of triphunt.org. We respond to all data requests within 30 days as required by law.
ICO Registration: TripHunt is registered with the Information Commissioner's Office. You can contact the ICO at ico.org.uk or call 0303 123 1113 if you have a concern about how we handle your data.
2. Personal data we collect and our lawful basis
We do not collect payment details, passport information, or booking reference numbers. All bookings are made directly with partner sites — we never see that data.
3. How we use your data
- Sending deal alert emails (only if you subscribed)
- Personalising your on-site experience
- Improving TripHunt via anonymised usage analytics
- Detecting and preventing abuse and security threats
- Complying with legal obligations
We do not sell, rent, or trade your data. We do not use your data for advertising profiling or behavioural retargeting.
4. Affiliate links and third-party data
TripHunt earns a commission when you book via our affiliate links — at no extra cost to you. When you click through to Aviasales, Booking.com, Klook, WelcomePickups, Yesim, or World Nomads, those sites set their own cookies and process your data under their own privacy policies. We have no control over third-party data practices. Links to their privacy policies: Aviasales · Booking.com · Klook · World Nomads.
5. Cookies
Full details are in our Cookie Policy. In summary: we use essential cookies to make the site work, and optional Google Analytics 4 cookies (anonymised) to improve it — but only if you consent. Affiliate partners may set their own cookies when you click their links.
6. International data transfers
Some service providers are based outside the UK/EEA:
- Google Analytics 4 — may process data in the USA; Google uses Standard Contractual Clauses (SCCs)
- Netlify — hosting infrastructure in the USA; covered by SCCs
- Supabase — database on AWS, EU regions preferred
- Resend — email delivery, USA-based, SCCs in place
Where data is transferred internationally, we ensure appropriate UK GDPR Chapter V safeguards are in place.
7. Data security
We use HTTPS encryption, access controls, and regular security reviews to protect your data. No internet transmission is 100% secure; we cannot guarantee absolute security but take reasonable precautions.
8. Children's data
TripHunt is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, email privacy@triphunt.org and we will delete it promptly.
9. Your rights under UK GDPR
Email privacy@triphunt.org to exercise any of the following rights. We will respond within 30 days.
🔍 Right of access
Request a copy of all personal data we hold about you (Subject Access Request).
✏️ Right to rectification
Ask us to correct inaccurate or incomplete data.
🗑️ Right to erasure
Ask us to delete your data ("right to be forgotten").
⏸️ Right to restrict
Ask us to pause how we use your data while a concern is resolved.
📦 Right to portability
Receive your data in a portable, machine-readable format.
🚫 Right to object
Object to processing based on legitimate interest at any time.
You may also withdraw consent at any time (unsubscribe from emails, or reject analytics in cookie settings). Withdrawal does not affect lawfulness of prior processing.
Complaints: You have the right to complain to the ICO at any time — ico.org.uk · 0303 123 1113. We would appreciate the chance to address your concern first.
10. Automated decision-making
TripHunt does not use automated decision-making or profiling that produces legal or similarly significant effects on individuals. Our deal-scoring algorithm determines which deals appear on the site — it does not affect any individual's rights or access to services.
11. Changes to this policy
We will update the "Last updated" date when we make changes. Material changes will be communicated to email subscribers. Continued use after changes constitutes acceptance.
12. Contact
Email: privacy@triphunt.org — we respond within 30 days.