Privacy Policy

Who we are

TripSage ("we", "us", "our") is a hotel intelligence platform operated at tripsage.ai. We are the data controller for personal data collected through this website.

If you have any questions about this policy or how we handle your data, contact us at privacy@tripsage.ai.

Data we collect

Information you provide

• Email address — if you subscribe to stay alerts for a hotel. This is entirely optional. No account or sign-up is required to use TripSage.
• Hotel and stay dates — when you subscribe to alerts, we store the hotel name, check-in date, and check-out date alongside your email so we can send relevant notifications.

Information collected automatically

• Usage data — when you click affiliate links on our site, we record an anonymised click event (hotel identifier, affiliate type, timestamp). No personal data is stored with these events.
• Server logs — our hosting provider (Cloudflare) automatically logs IP addresses, request paths, and response codes as part of standard web server operation. These logs are retained by Cloudflare under their own privacy policy and are not accessible to us for individual tracking.

Information we do not collect

• We do not require account registration or passwords.
• We do not collect payment information.
• We do not track your activity across other websites.
• We do not build advertising profiles.
• We do not sell your data to any third party.

How we use your data

Legal basis for processing

We process your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

• Consent (Article 6(1)(a) UK GDPR) — we rely on your consent when you subscribe to stay alerts. You can withdraw consent at any time by replying "unsubscribe" to any alert email or emailing privacy@tripsage.ai.
• Legitimate interests (Article 6(1)(f) UK GDPR) — we rely on our legitimate interest in maintaining and improving our service when recording anonymised affiliate click analytics. We have assessed that this processing does not override your rights or interests given the anonymous nature of the data.

Third parties we share data with

We do not sell your data. We share data only with the service providers necessary to operate TripSage:

Affiliate partners (GetYourGuide, Trainline, Discover Cars, etc.) receive standard referral parameters in URLs when you click their links. This is industry-standard practice and no personal data is passed to them by us. Their privacy policies govern how they process any data collected after you arrive on their sites.

Cookies & Analytics

Strictly necessary cookies: Cloudflare may set technical cookies required for security and performance, and we store your cookie-consent choice and language preference. These do not require consent under UK PECR.

Analytics cookies (consent required): we use Google Analytics (GA4) to understand how visitors use the site so we can improve it. In line with UK PECR, EU GDPR and Google Consent Mode, analytics and advertising storage are denied by default — Google Analytics only stores cookies and collects identifiable analytics data after you click “Accept” on our cookie banner. IP addresses are anonymised. If you click “Reject”, no analytics cookies are set.

You can change your choice at any time by clearing your browser cookies for this site, which will make the consent banner reappear. We do not sell your personal data. Google’s use of data is governed by the Google Privacy Policy.

Data retention

• Email subscribers — your email address and stay details are retained until you unsubscribe or request deletion. After your check-out date passes, we no longer send alerts but may retain a record for up to 90 days before deletion.
• Affiliate click data — anonymised click records are retained for up to 12 months for analytics purposes.
• Server logs — managed by Cloudflare, typically retained for up to 30 days.

Your rights under UK GDPR

You have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion of your data ("right to be forgotten").
• Right to restrict processing — request that we limit how we use your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to withdraw consent — at any time, without affecting the lawfulness of prior processing.
• Right to object — object to processing based on legitimate interests.

To exercise any of these rights, email privacy@tripsage.ai. We will respond within 30 days. If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Contact us

For any privacy-related queries or requests:

This policy was last updated on 30 May 2026. We will notify email subscribers of any material changes.