Privacy Policy

WeLove.Travel ("WeLove.Travel", "we", "us", "our") is a curated travel marketing platform operated by Flight Club Ltd, a company registered in England & Wales. We act as the data controller for the personal data described in this policy. For any privacy enquiry, write to privacy@welovetravel.co.uk.

We value the trust of our members and partners. This statement describes the personal data we gather, what we do with it, how we protect it, how long we keep it, who we share it with, and the rights you have under UK GDPR and the Data Protection Act 2018.

We collect personal data that you voluntarily provide to us when you subscribe to our emails, take the Inspire quiz, create a member or partner account, submit a deal, request a brochure, enter a competition, click an offer, or contact us by email, phone or post. This may include:

• Name, email address, postal address and (optionally) phone number
• Travel preferences, holiday types, destinations, budget, party size and travel dates
• Account credentials (for members, salesmen, partners and admins)
• Deal interactions: emails opened, links clicked, deals viewed and shortlisted
• Device, browser, IP-derived approximate location and referrer information
• Company / brand details where you sign up as a partner or supplier

You can browse welovetravel.co.uk without providing personal data, but we'll need some details to send you deals, match you to relevant trips or process a partner submission. We do not take payment card details on our systems — bookings are completed on the partner's website under their own card processing.

Under UK GDPR we rely on the following lawful bases:

• Consent — when you opt in to our deal emails, newsletter, partner promotions or marketing cookies. You can withdraw consent at any time.
• Legitimate interests — to operate the platform, prevent fraud, secure our systems, measure aggregate performance for brand partners, and (where permitted by the soft opt-in rules under PECR) send similar travel offers to existing subscribers.
• Contract — to deliver services you have requested as a member, salesman, creator or partner.
• Legal obligation — to comply with tax, accounting and regulatory requirements.

WeLove.Travel is a travel marketing platform. With your consent (or under the soft opt-in where applicable), we use the personal data you give us to:

• Send curated holiday, flight, cruise, sports, wellness and lifestyle deals by email
• Personalise the deals you see based on your Inspire quiz answers and engagement
• Promote offers, products, services and content from our brand partners (OTAs, tour operators, airlines, cruise lines, hotels, creators and lifestyle brands) that we believe are relevant to you — these may include any travel-related purpose
• Invite you to competitions, giveaways, surveys and members-only events
• Notify you about service updates, ticketing, bookings made through partners, account security and transactional communications
• Operate referral and rewards programmes you've joined
• Measure campaign performance for our partners — wherever possible using aggregated or pseudonymised reporting (e.g. total opens, clicks, bookings per campaign slot)

You can update your preferences or unsubscribe at any time using the one-click links in every email, your email preferences page, or by emailing us.

We do not sell, rent or trade your personal data. We share it only in the following circumstances:

• Service providers who help us run the platform — email delivery (Amazon SES), hosting and database (Supabase), analytics, customer support, payment and invoicing tools. These providers process data only on our instructions under written agreements.
• Brand partners running a campaign you've engaged with — when you click through to a partner deal, the partner receives standard web data (referrer, campaign ID, deal ID). Where you've explicitly opted in to a partner offer, lead or brochure request, we may also pass your name and email to that partner so they can fulfil it. We make this clear at the point of collection.
• Aggregated reporting — partners receive aggregated performance metrics (e.g. opens, clicks, bookings, attributed revenue). These reports do not identify individual users.
• Legal & safety — where we're required to by law, regulation, court order, or to protect our rights, users or the public.
• Corporate transactions — in the event of a merger, acquisition or sale of assets, your data may be transferred subject to the same protections set out in this policy.

A current list of our key processors and partners is available on request from privacy@welovetravel.co.uk.

Your data is stored on secure cloud infrastructure within the UK / EEA and protected by encryption in transit (TLS) and at rest. Access is limited to authorised personnel under role-based controls and audit logging. We never store payment card numbers.

Where data is processed by service providers outside the UK / EEA, we rely on the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an adequacy decision to safeguard your data.

• Marketing subscribers — until you unsubscribe, plus up to 24 months of inactivity, after which we remove or anonymise your profile.
• Member & partner accounts — for as long as the account is active, plus up to 7 years where required for tax, accounting or legal reasons.
• Suppression list — we keep a minimal record (hashed email) of unsubscribed addresses indefinitely so we can honour your opt-out.
• Engagement logs — typically 24 months, then aggregated.

Like most professional websites, we use cookies — small files stored on your device — to run the site, remember your preferences, measure performance and tailor marketing. You can control cookies via the on-site cookie banner and your browser settings. Disabling cookies may break parts of the site.

Strictly necessary

Analytics

Advertising & marketing

Email tracking

Our marketing emails include a 1×1 tracking pixel and unique link IDs so we can see which campaigns are opened and clicked. This helps us send you more of what you like, less of what you don't, and report aggregate performance to our brand partners.

If you choose to sign in with Google or Facebook, we receive your name, email address and public profile from that provider so we can create and authenticate your account. We don't post on your behalf or access your contacts. To delete data associated with a social login, email privacy@welovetravel.co.uk from the address you signed in with.

You have the right to:

• Be informed about how we use your data (this policy)
• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten")
• Restrict or object to processing, including direct marketing
• Data portability — receive your data in a portable format
• Withdraw consent at any time
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, email privacy@welovetravel.co.uk. We'll respond within one month.

WeLove.Travel is intended for adults aged 18 and over. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

We may update this policy from time to time to reflect changes in our service or the law. The "last updated" date at the top tells you when it was last revised. Material changes will be notified by email or a notice on the site.

Data Controller: Flight Club Ltd (trading as WeLove.Travel)
Email: privacy@welovetravel.co.uk
General enquiries: hello@welovetravel.co.uk

See also our Terms of Service and email preferences.