Privacy policy

planholidays.co.uk ("we", "us") respects your privacy. This notice explains what personal data we collect, why we collect it, who we share it with and your rights under the UK GDPR and the Data Protection Act 2018.

Template notice: this is a starting-point policy and must be reviewed by a qualified solicitor before you trade. Replace bracketed details with your actual company information.

1. Who we are

planholidays.co.uk is operated by planholidays, registered in England and Wales (company number [CRN]) with its registered office at [address]. We act as the data controller for the personal data described in this notice. Contact us at privacy@planholidays.co.uk.

2. What we collect

Booking-request details: name, email, phone, preferred destinations, dates, traveller count, special requirements.
Enquiry and contact-form details: the message you submit.
Newsletter signups: your email address and the page you signed up from.
Technical data: IP address, browser, pages viewed (server logs only — kept 30 days).

3. Why we collect it (lawful basis)

To respond to booking requests and enquiries — lawful basis: steps prior to entering a contract.
To send newsletters — lawful basis: consent. You can unsubscribe any time.
To keep our website secure — lawful basis: legitimate interests.

4. Who we share it with

We share data only with:

Suppliers necessary to fulfil your booking (airlines, hotels, transfer providers)
Our payment provider (when you pay by phone — they handle card data, not us)
Our hosting and email providers (data processors acting on our instructions)
Regulators and industry bodies where required for trust-account reporting
HMRC, regulators or law enforcement when legally required

We never sell your data to third parties.

5. How long we keep it

Enquiries that don't lead to a booking: 12 months.
Booking records: 7 years (HMRC requirement).
Newsletter list: until you unsubscribe.
Server logs: 30 days.

6. Your rights

You have the right to:

Access the data we hold about you
Have inaccurate data corrected
Have your data deleted (where we don't have a legal duty to keep it)
Object to direct marketing
Withdraw consent at any time
Lodge a complaint with the ICO (ico.org.uk)

Email privacy@planholidays.co.uk to exercise any of these rights.

7. Cookies

We use a small number of strictly-necessary cookies and localStorage entries to remember your cookie preference. We do not use marketing or analytics cookies without your consent.

8. Updates

We may update this notice from time to time. The current version will always be published on this page.

Questions about how your data is handled? Email privacy@planholidays.co.uk or use our contact form.