Privacy policy

Who we are

Holiday Price Tracker is operated as a personal project based in the United Kingdom. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is the site operator. You can contact us at info@holidaypricetracker.co.uk or through the contact form.

What data we collect

When you create a price tracker we collect and store the following personal data:

• Email address — so we can send you price-change alerts and a tracker-confirmation email.
• Holiday URL — the link you paste from TUI, Jet2holidays or Haven, which we use to check the current price.
• Alert rule and threshold — the rule you choose (any change, below a price, above a price) and the optional threshold amount.

When you use the contact form we also collect your name, email address, subject and message so we can respond to your enquiry.

We do not collect financial information, passwords, or any data beyond what is listed above. We do not buy, sell or share your personal data with third parties for marketing purposes.

Lawful basis for processing

Under UK GDPR Article 6, we rely on the following lawful bases:

• Consent (Art. 6(1)(a)) — you give consent when you accept the Terms & Conditions and submit the tracker form. You may withdraw consent at any time by unsubscribing.
• Legitimate interests (Art. 6(1)(f)) — we process minimal data to operate and improve the service (for example, error monitoring via Application Insights). We have assessed that this processing does not override your rights and freedoms.

How we use your data

We use your data only to provide the price-tracking service: checking the holiday price at regular intervals, sending you email alerts when the price meets your rule, and responding to contact- form enquiries. We do not profile you, serve targeted advertising, or use your data for any purpose other than running Holiday Price Tracker.

Data retention

We retain your tracker data (email, URL, alert rule and price snapshots) for as long as the tracker is active. When you unsubscribe from a tracker, we mark it as inactive. Inactive tracker data is retained for up to 90 days for operational purposes and then permanently deleted. Contact-form messages are retained for up to 12 months.

Data storage and transfers

Your data is stored in Microsoft Azure data centres in the United Kingdom and Western Europe. Azure provides enterprise-grade security controls and is certified under ISO 27001 and SOC 2. We do not transfer your personal data outside the UK/EEA except where a sub-processor (such as Google Analytics, if you consent to analytics cookies) may process data under Standard Contractual Clauses approved by the European Commission.

Cookies and analytics

We use a single essential cookie (hpt_cookie_consent) to remember your cookie preferences. Optional analytics cookies (Google Analytics 4 and Azure Application Insights) are only set if you choose "Accept analytics" in the cookie banner. See our cookie policy for full details including cookie names, providers and durations.

Your rights under UK GDPR

You have the following rights in relation to your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate data.
• Right to erasure — ask us to delete your data. You can also unsubscribe from any tracker at any time using the link in your alert emails.
• Right to restrict processing — ask us to limit how we use your data.
• Right to data portability — request your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — withdraw consent at any time by unsubscribing or contacting us.

To exercise any of these rights, email info@holidaypricetracker.co.uk or use the contact form. We aim to respond within 30 days.

Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection. You can contact the ICO at ico.org.uk/make-a-complaint.

Changes to this policy

We may update this privacy policy from time to time, for example when we add new features or change how we process data. The "last updated" date at the top of this page will always reflect the most recent revision. If we make a material change we will note it here.