Privacy Policy
What Travel Rinse Repeat collects, why, how long it is kept, who it is shared with, and the rights you have over it — including how affiliate and card referral links work.
Last updated: 15 September 2026
This policy explains what personal data Travel Rinse Repeat collects when you use travelrinserepeat.com, why we collect it, how long we keep it, who we share it with, and what rights you have. We are the controller of the data described here. It covers this website only, and not the card issuers, booking platforms, hotels or airlines we link to — each of those applies its own policy from the moment you reach it.
1. What we collect
1.1 Data you give us
- Correspondence. If you email us or use a form, we receive your address, your message and anything you include in it.
- Tips and corrections. What you send about a devaluation, a terms change or an offer, and the contact details you send with it.
1.2 Data collected automatically
- Technical and usage data. Your IP address, browser and version, operating system, device type, referring page, the pages you view, and the date and time of each request.
- Cookies and similar technologies, including affiliate tracking cookies. See section 4 and our Cookie Policy.
1.3 What we do not collect
We are a publication, not a broker, agent or lender. We do not take bookings and we do not process applications. We never ask for passport numbers, payment card numbers, card security codes, bank details, income, credit scores or any other information used to assess a credit application. Nobody acting for this site will ask you for them.
2. Why we use it, and our lawful basis
- Serving the site and keeping it available — technical data, on our legitimate interest in operating the service you requested.
- Security, abuse prevention and diagnosing faults — technical data, on our legitimate interest in protecting the site and its readers.
- Understanding which guides are read — aggregated usage data and analytics cookies, on your consent where cookies require it.
- Attributing referrals so we are paid — affiliate cookies, on your consent.
- Replying to correspondence — your message and address, on our legitimate interest in answering an enquiry you began.
- Meeting legal obligations — as required by law.
3. Affiliate and card referral links
Many of our card, hotel and booking recommendations are affiliate links. If you apply or book after following one, we may be paid a commission at no additional cost to you. This never changes what we recommend or what we say about it, and our approach is set out in our Editorial Policy.
What this means for your data is worth being exact about. When you follow such a link, the partner sets its own cookie recording that the referral came from us. We are told that a referral converted. We are not told who you are, whether you were approved, what limit you were given, or anything else about your application or booking. From the moment you leave this site, the partner's privacy policy governs — not ours.
4. Cookies
Strictly necessary cookies are set without consent because the site cannot be delivered without them. Analytics, preference and affiliate cookies are set only with your consent, which you may withdraw at any time. Detail is in our Cookie Policy.
5. What we do not do with it
We do not sell personal data. We do not rent or trade it, we do not make it available to third parties for their own marketing, and we do not attempt to identify individual readers from analytics.
6. Sharing
We share personal data only with service providers acting on our instructions (hosting, content delivery, email delivery, analytics, security), with professional advisers under a duty of confidence, with authorities where we are legally required to disclose, and with a successor entity if the publication is sold — in which case you will be told before your data becomes subject to a different policy.
7. International transfers
Our providers may process data outside your country. Where data leaves the UK or European Economic Area, transfers are made under an adequacy decision or under Standard Contractual Clauses with any supplementary measures required. You may ask us what safeguards apply.
8. How long we keep it
- Server logs: up to 90 days, then deleted or irreversibly anonymised.
- Analytics data: up to 14 months, in aggregate.
- Correspondence: up to 24 months after the matter is closed, unless needed longer for a legal claim or for the record of a correction.
- Affiliate cookies: for the period the partner sets, which is theirs rather than ours and is typically between 24 hours and 90 days.
9. Your rights
Depending on where you live you may have the right to access the data we hold about you, have it corrected or deleted, restrict or object to processing, receive it in a portable form, withdraw consent at any time without affecting processing already carried out, and complain to a supervisory authority.
If you are in California you also have the right to know what is collected and disclosed, the right to deletion and correction, and the right not to be discriminated against for exercising a right. We do not sell or share personal information as those terms are defined under the CCPA and CPRA.
To exercise any right, write to us using the address on our contact page, putting “Privacy” in the subject line. We respond within one month, extendable by two further months for complex requests, and we will tell you if an extension applies. We may ask for information to confirm the request comes from you.
10. Children
This site is not directed at children under 16 and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Security
We use encryption in transit, access controls and least-privilege access to reader data. No system is perfectly secure and we do not claim otherwise. Where a breach is likely to result in a high risk to your rights, we will notify you and the relevant authority as the law requires.
12. Changes
We may update this policy. The date at the top always reflects the current version, and where a change materially affects your rights we will give prominent notice before it takes effect.
13. Contact
Questions, requests and complaints go to the address on our contact page. If you are not satisfied with our response you may complain to your local data protection authority.