The website and app that is linked to this privacy notice is operated by Secret Escapes Limited ("we" or "us"). 

We appreciate your interest in our website (our "site") or our app (our "app"). Privacy protection is very important to us and we are committed to protecting you and respecting your privacy. This privacy notice sets out information about how we collect, store, process, transfer, share and use data that identifies or is associated with you (hereinafter "personal information"). It also describes your data protection rights, including a right to object to some of the processing which we carry out. More information about your rights, and how to exercise them, is set out in the “Accessing and Correcting your personal information” section. 

 
For the purposes of the applicable data protection legislation (including the General Data Protection Regulation), Secret Escapes Limited is the data controller of personal information we hold about you.
You should also be aware that we use cookies to store and access information whilst providing access to our site or our app. You can find out more about our use of cookies in our cookie notice below.

2. Personal information we collect about you 

We collect personal information about you when you voluntarily submit information directly to us, our site or our app. This can include information you provide to us when you apply to become a member, complete a form, purchase any breaks using our platform, correspond with us, subscribe to our mailing lists, newsletters or other forms of marketing communications, respond to a survey, enter a promotion or use some other feature of our website or app. 

We also collect personal information from you indirectly such as information about the pages you look at on our site or our app or the device you use to view our site or connect to our app with.
The list below sets out the categories of personal information we collect about you and how we use that information.

Contact details: We collect contact information such as your name, your email address, your telephone number and physical addresses associated with your account or any bookings your place using our service. 

Booking Information: When you book a break through our platform, or are a member of a group booking made through our platform we may need to collect additional information required to process your booking including passport numbers, information about any disability you have, dietary requirements and/or religious beliefs. 

Comments and opinions: When you contact us directly, e.g. by email, phone, post or by completing an online form we will record your comments and opinions. We will also record comments and opinions you express when responding to surveys, entering competitions or taking part in promotions we run. 

Payment and transaction information: We keep records of the breaks you purchase from us and the payment method you use for the transaction. We will use payment and transaction information to process payment for any break you purchase from us. Although we keep records of any transactions you make through the site or app, we do not store any financial details such as your credit card numbers as we use a third party payment provider to process any payments you make through the site. 

Website and app login details: Where you create an account with us we will hold your user name and password details so that we can keep your account secure. Where you are provided with the option to log-in using a social network, for example using Facebook, we will not be provided with your password or other account login details for those accounts. We will only be provided with your email and name. We will not post to your social network or to your friends, followers or contacts without your consent. 

Your preferences: We hold information about the preferences you set for notifications, marketing communications and how our site and app are displayed to you. 

Information about how you use and connect to our site or our app: We collect information about how you use our site or our app such as the pages you view on our site or our app, the time you access our site or our app and how long you use it for, the website from where you came to our site or our app or go to after leaving our site or our app and any selections and choices you make when using our site or our app. 

We also collect information about the computer, tablet, smartphone or other electronic device you use to connect to our site or our app. This information can include details about the type of device, unique device identifying numbers, operating systems, browsers and applications connected to our site or our app through the device, your Internet service provider or mobile network, your IP address and your device's telephone number (if it has one). 

 
Typically, the information we collect about how you use or connect to our site is associated with your device and not you as a named individual. However, if you are logged into a registered account you have with us this information may also be associated with you directly. 

Information about your location: Other than information you choose to provide to us, we do not collect information about your precise location. Your device's IP address may help us determine an approximate location. We will not collect or track your exact location without your consent. Where necessary we will seek your consent before using information about your exact location. 

 
Information provided by other users: Sometimes, other visitors to our site or users of our app provide information that is associated with you. Where users of our site or our app want to invite you to use our site, our app or to share information with you about our service or offers we will use personal information that they provide about you to assist them in doing this. We will only do this though where they indicate that you have provided your consent for them to communicate with you in this way. 

All personal information: We will use all the personal information we collect to monitor and improve our site, our app and our procedures and processes. Our use of your personal information in this way will not result in information that was not previously publicly available being made public on our site or through our app. 

At various places on our site or our app you may be requested to enter certain personal information. Personal information that must be provided in order to avail of the booking services offered will be indicated at the time of collection. Other personal information that you are not required to provide in order to receive our services may be voluntarily given and you are free to decide not to give such personal information.

3. How we use your personal information, and what our legal basis is for this use 

We process your personal information for the following purposes: 

To fulfil a contract or to take steps linked to a contract. This is relevant where you book a break with us, enter our competitions or take part in promotions we run. This includes: 

a) Verifying your identity
b) Processing your payments and bookings and passing the information on to the relevant third parties (such as airlines, hotels, tour operators and appropriate public authorities) as necessary to complete your travel arrangements.
c) Communicating with you about the services we provide and about queries, issues or concerns you or other users have
d) Providing customer services and support
e) Using personal information about you that is contained in private messages sent to us by other users to fulfil and deliver booking receipts and to respond to any query, issue or concern they raise

f) Administering our ‘refer a friend’ programme with our service provider Mention Me to enable you to redeem the rewards.

As required to conduct our business and pursue our legitimate interests. In particular, we will: 

 
a) Post to your social network or to your friends in accordance with your privacy settings on each network
b) Use your comments and opinions to address your queries, issues and concerns and improve our service.
c) Use comments and opinions you express (when responding to surveys, entering competitions or taking part in other promotions) to determine offers that may be of interest to you.
d) Use your transaction information and history to determine travel offers that may be of interest to you and send you marketing in accordance with your marketing preferences
e) Use your preference settings for the purpose of providing notifications, sending marketing communications and displaying our site in accordance with your choices
f) Use information about how you use and connect to our site and our app to optimise your experience of our site or our app on your device, to determine offers that may be of interest to you for marketing purposes and to assess the success of our marketing campaigns
g) Use an approximate location to ensure content on our site is relevant to the area, city, state or country you are using your device in
h) Monitor use of our site or our app for the purposes of detecting and preventing fraud or crime
i) Use your personal information help us develop new products and services 

j) Use your personal information to help you successfully complete your booking, including to contact you if you have partially or unsuccessfully progressed with a booking (for example, for an uncompleted payment)

k) To prevent the misuse of our ‘refer a friend’ programme administered with our service provider Mention Me.

Under certain circumstances, where you give us consent, we will: 

a) Send you electronic marketing communications in accordance with your marketing preferences
b) Identify your location for the purposes of tailoring travel information (including hotels and recommended airports) to you
c) Place certain cookies and use similar technologies subject to consent requirements. 

For purposes which are required by law, such as requests by governments or law enforcement authorities conducting an investigation. 

We may anonymise and aggregate any of the information we collect (so that it does not directly identify you). We may use anonymised information for purposes that include testing our IT systems, research, data analysis, improving our site and developing new products and features.

4. Information we share with third parties 

We may share your personal information with the following parties: 

(a) Companies in the same group of companies as us: our subsidiaries (i.e. any organisation we own or control) or our holding company or ultimate holding company (i.e. any organisation that owns or controls us) and any subsidiaries they own. These companies will only use your personal information in the same way as we can under this privacy notice.
(b) Hotel and travel operators: we will share personal information which is required by the hotels and travel operators that you purchase your hotel or package holiday with so that they can arrange your booking.
(c) Service providers and advisors: third parties who provide a service to us. For example, third party service providers help support our IT infrastructure, process payments from you on our behalf, develop analytical information for us about our products, services and marketing and provide professional services such as legal and accountancy services. These third parties will only be allowed to use your personal information in accordance with our instructions and will be required to keep your information secure. Such companies include: 

Amazon Web Services EMEA SARL, which provides part of our website hosting;

Salesforce.com EMEA Limited, which provides our core CRM system, allowing us to manage the sending of newsletters to our members;

Sitel Europe Limited, which provides our customer service centre and which has access to customer data for the purposes of assisting customers with their bookings and enquiries;

Worldpay (UK) Limited and Stripe Payments Europe Limited, which each provide payment processing services for all bookings made through our website;

Snowflake Computing Inc, which provides database services enabling us to store customer data securely; Heap Inc., which provides a product and website analysis tool for tracking interactions on our website and thus improving the website design. Only analysis of anonymised data via first-party cookies after your consent;

Voucherify PSA, which offers promotional code functionality and allows us to issue promotional codes;

Heap Inc., product and website analysis tool to track interactions on our website to improve our website design. This only includes the evaluation of anonymized data via first-party cookies with your consent;

Mention Me Limited, our service provider who match your email address and purchase history for the purpose of our ‘refer a friend’ programme.

(d) Purchasers of our business: personal information may be disclosed or transferred to buyers or prospective buyers of our business or any of our assets as part of any such sale.
(e) Law enforcement, regulators and other parties for legal reasons: third parties who we are under a legal obligation to disclose your personal information to or to whom we need to disclose your personal information to protect our rights, property or safety or to protect the rights, property or safety of others. For example, we may provide information to the United States Customs and Border Protection agencies if you are travelling to the USA. We may also disclose personal information to third parties to help detect and investigate illegal activities and breaches of any agreement we have with you.
(f) Third party advertisers: Some personal data is shared with third party companies in order to display advertising from Secret Escapes or partners in other locations on the internet. We do not share or sell member personal data for the purposes of direct marketing by third party companies. A number of specific examples are below:

(i) Cookies - Third parties may serve cookies on your computer or mobile device to serve advertising through our site or our app. These companies may use information, in some cases including your IP address, about your visits to our website and other websites in order to display relevant advertisements about goods and services that you may be interested in. The information collected through this process does not enable us or them to identify your name, contact details or other personally identifying details unless you choose to provide these. Partners that we use in this way include Google, Criteo, Epsilon and RTB House. If you would like to opt-out of the use of your personal data in this way, you can do so by following the links below:

Google Ads - https://support.google.com/ads/answer/2662922?hl=en-GB
Criteo - https://www.criteo.com/privacy/disable-criteo-services-on-internet-browsers/

To access the respective data protection regulations click on the following links:

Google Ads - https://policies.google.com/privacy
Criteo - https://www.criteo.com/privacy/
Epsilon - https://legal.epsilon.com/eu/privacy-policy-services
RTB House - https://www.rtbhouse.com/privacy-center

(ii) Facebook - We periodically match the email address you enter on the Secret Escapes website with the Facebook database, which is used to target or to block ads about Secret Escapes appearing on users' newsfeeds. If you do not have a Facebook account, Facebook would delete any personal information sent to them automatically. Only a hashed email address is shared with Facebook and the information is sent in a fully encrypted and secure way. You can find out more information about the process here: https://www.facebook.com/ads/about/?page_number=4&entry_product=ad_preferences.

You can also opt-out of such sharing and elect not to see any such ads if you visit https://www.facebook.com/privacy/policies/cookies.

(iii) Jetlore - Jetlore uses cookies and a pseudonymised user ID to aggregate user behaviour on the website and emails in order to personalise content that is provided to members in the Secret Escapes newsletters. They do not receive individual email addresses or other personal data, only a number. That number can only be connected to specific users on Secret Escapes’ own systems.

We may provide third parties with aggregate statistical information and analytics about users of our site or our app but we will make sure no one can be identified from this information before we disclose it. 

Our service is about providing you with the latest hotel and luxury travel offers. Most marketing messages we send will be by email but occasionally we may also contact you by post or phone. If you are using our website or app we may also send you push notifications if you accept to receive them. If you do not want to receive, or wish to reduce, marketing messages from us, you will be able to tell us by changing your marketing preferences in your account. 

You can also change your marketing preferences at any time by following the instructions outlined below. 

Email – click on the unsubscribe link at the bottom of our marketing emails. If you have an online account with us you can also opt-out of marketing emails through your account settings. You can also visit the “your account” section of our site to manage the frequency of our communications to you. In the “your subscriptions” tab of the “your account” section of the site, you can choose to opt out of receiving communications for a period of time by clicking on the relevant slider. You can also choose to reduce the frequency of our emails by choosing the summaries option on the mail preferences slider. You can also unsubscribe here. Once you have chosen your mail preferences, please click “Save Changes” button to let us know of your preferences. 

App push notifications – you can change your push notification preferences at any time in the account settings for the app. If you receive marketing from us through other channels e.g. post or by phone, and you no longer want to receive such messages, you can tell us to stop marketing to you by post or phone by using our contact details at the end of this privacy notice. Please note that most marketing messages we send will be by email. 

Where you have given us permission to do so, we may share your contact details with selected third parties so that they can provide you with information about travel offers that they believe may be of interest to you. We will only do this if you have given us your express consent to do so. 

From time to time we include offers from selected third parties that we think will be of interest to you in our newsletters. If you decide you no longer want to receive such messages, you can tell us not to send such messages through your account settings. Visit the "your account" section of the site, then untick the box titled "Hand-picked partner offers".

6. Online Advertising 

We, or our advertising partners, may show advertisements to you on our site, our app or on other websites or apps. To do this we, or our advertising partners, may collect information about how you use or connect to our site, our app or the types of other web pages, social media services, content and ads you, or others who are using the device you connect to our site or app with, interact with, visit or view. The information collected might also include the IP address of the device you connect to our site or our app and a de-identified, non-human readable version of your email address which may be match to other data about you to improve the relevance of online advertising and personalisation. At no time is your actual email address shared with these partners. 

 
We, or our advertising partners, use the information that is collected to make sure the adverts you see either on our site, our app or other parties’ websites and apps (where our partners have advertising space) are more relevant to you. 

 
Typically cookies and similar technologies are used to provide this type of advertising. You can find out more about cookies and how to manage their use by reading our cookie notice below.
Partners that we use in this way include LiveRamp and Captify. If you would like to opt-out of the use of your personal data in this way by LiveRamp, you can do so by following this link: https://liveramp.uk/cookies-101/.

7. Storing and transferring your personal information 

Cookies and Local Storage: we may store information (which may include personal information) locally on your device using cookies and other browser and application storage methods. For further information please see our cookie notice below. 

Security: we implement appropriate technical and organisational measures to protect your personal information against accidental or unlawful destruction, loss, change, or damage. 

 
International Transfers of your Personal Information: the personal information we collect may be transferred to and stored in countries outside of the jurisdiction you are in. Data may be transferred from the EEA to the USA and Singapore, principally due to our offices in those countries being able to access data, but also for the purposes of hosting our website servers on which data is held. If you book a holiday in a destination outside of the EEA, your information will also be passed to the relevant hotel and/or excursion providers in such destination. Some of these jurisdictions offer differing levels of protection in respect of personal information and may, in certain instances, be less protective than the jurisdiction you are typically resident in. We will take all reasonable steps to ensure that your personal information is treated securely and in accordance with applicable law and this privacy notice. Where information is transferred outside the EEA and where this is to a stakeholder or vendor in a country that is not subject to an adequacy decision by the EU Commission, data is adequately protected by EU Commission approved standard contractual clauses, or a vendor's Processor Binding Corporate Rules.

8. How Long we keep your personal Information

Where we process registration data, we do this for as long as you are an active user of our sites and for a period of time after this. 

Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data so that we can respect your request in future. This record will be kept for as long as we retain your personal data in accordance with this section.

 
Where we process personal data in connection with performing a contract or for a competition, we keep the data for 6 years from your last interaction with us. This includes any correspondence that you have had with our customer services team, so that we may resolve any complaints or claims that are made.

9. Accessing and correcting your personal information 

You have the following rights in relation to your personal information: 

(i) the right to be informed about how your personal information is being used;
(ii) the right to access and receive a copy of the personal information we hold about you;
(iii) the right to request the correction of inaccurate personal data we hold about you;
(iv) request for your data to be shared (ported) to another controller; and
(v) to request the blocking, restriction or deletion of your personal information. 

In addition, you have the right to object to the processing of your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing). To exercise any of the above rights, or if you have any questions relating to your rights, please contact us by using the details set out in the "Contacting us" section below. You are able to correct your own details by clicking on "Your account". You may also request that your account (including the personal data that we hold) be permanently deleted in the “Your account” section of the website. 

 
If there is personal information which you think we hold, please contact us using the contact details set out in the “Contacting us” section below. Please provide as much information as you can about the personal information you are looking for and we will be happy to try and help you find it. If you have unresolved concerns, you have the right to complain to an EU data protection authority where you live, work, or were you believe a breach may have occurred.

10. Links to third party sites 

Our site may, from time to time, contain links to and from third party websites of our partner networks, advertisers, partner merchants, news publications, retailers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. Please check the individual policies before you submit any information to those websites.

11. Changes to this Notice 

We may update this privacy notice from time to time and so you should review this notice periodically. When we change this privacy notice in a material way, we will update the "last modified" date at the bottom of this privacy notice. Changes to this privacy notice are effective when they are posted on this page.

12. Notice to you 

If we need to provide you with information about something, whether for legal, marketing or other business-related purposes, we will select what we believe is the best way to get in contact with you. We will usually do this through email or by placing a notice on our site. The fact that we may send notices to you will not stop you from being able to opt out of certain types of contact as described in this privacy notice.

13. Contacting us 

If you want to get in touch to ask any questions about this notice, your privacy and your legal rights, please contact us at: Secret Escapes Limited, 4th Floor, 120 Holborn, London EC1N 2TD, and at customersupport@secretescapes.com 

This Privacy Notice was last modified on 2 May, 2024.