ShareThis sharing button

Privacy Policy

TripPilot owns and operates an online platform that provides users with information, recommendations, and services related to travel and leisure, including tools for researching and/or booking hotels, rentals, and other accommodations, attractions and experiences, restaurants, flights, and cruises, among other leisure-related services. In this Statement, these are referred to as our “Services''.
The information that you and others provide enhances our ability to deliver more relevant, personalized, and helpful Services. We understand that sharing your information with us is based on trust. We take this trust seriously and are committed to delivering valuable information, products, and services, tailored based on the information you share with us. Equally important, we are dedicated to respecting your privacy when you visit our website or use our Services and to being transparent about how we use the information entrusted to us.
This Statement describes how we obtain, use, and process your information in a manner that is intended to be easily understandable and transparent. It informs you of your rights, how you can exercise them, and how you can contact us. Please review this Statement carefully to understand our practices regarding your information and privacy. By visiting our websites and related mobile applications, as well as other online platforms such as those of our affiliated partners, apps, and social media, whether on a computer, phone, tablet, or similar device (each referred to as a “Device”), you acknowledge and confirm that you have read this Statement.
We frequently use the term “personal data” in this Policy. It refers to any information related to you as an identifiable individual. This may include details such as your name, contact information, trip itinerary, internet protocol (“IP”) address, cookie strings, or device IDs, as well as information stored alongside such identifiers, such as how you use our Platforms.
We can only speak for ourselves, so this Policy does not cover the collection or use of your information by other companies whose products and services we feature on our Platforms, such as airlines, travel agents, hotels, car hire companies, activity providers, carbon offsetting providers, insurers, and travel compensation specialists (“Travel Providers”).
When you make a booking or purchase with a Travel Provider, your information will be processed by them in accordance with their own privacy notice and terms and conditions. If you make a booking or purchase with a Travel Provider on the TripPilot Platforms, we will always make links to these documents available so you can review them before you complete your booking or purchase.
Please note that our Platforms are not intended for children under 16 years of age, and no one under the age of 16 should provide any information to TripPilot via our Platforms or otherwise. We do not knowingly collect personal data from anyone under 16, and we will delete any personal data that we discover has not been provided by, other than with the express authorization of, the child's parent or legal guardian.
We will update this Policy periodically, so please ensure that you check this page occasionally to review the current version. If the updates are significant, we will notify you of these changes when you next access our services, or through other communications.
How TripPilot Collects and Uses Personal Data
At TripPilot, collecting personal data is essential for providing an exceptional and tailored travel experience. We ensure our platforms and services operate effectively to assist you in planning and booking your dream trips. Here is a detailed look at the methods and types of data we gather:
Directly from You:
  • We collect personal data is often during various interactions:
  • When you book travel arrangements through TripPilot, such as flights, hotels, or rental services.
  • Creating and managing your account, where you provide information like your name, email address, and preferences.
  • Signing up for newsletters, price alerts, and promotional emails involves sharing your contact details.
  • Contacting us for assistance or information necessitates sharing relevant personal or booking details to help resolve your queries effectively.
  • Your choice to withhold certain information can impact the functionality of our services, for example, you cannot receive price alerts if you do not provide an email address.
Automatically Through Technology:
As you navigate our platforms, data is collected automatically which helps us understand how you use our services and to improve your user experience: Technical Information: Including your device’s IP address, browser type, and operating system.
  • Usage Metrics: How you interact with our platform, such as the pages you visit, the links you click, and the searches you perform.
  • We also receive personal data from third-party sources which enhances our ability to offer you personalized and efficient services:
  • Partners and Affiliates: Information shared by promotional partners or through social network logins that help streamline your login process or marketing preferences.
  • Travel Providers and Security Measures: Data from travel providers about your bookings and from fraud prevention services to ensure the security of your transactions.
Detailed Data Types Processed by TripPilot
  • Contact and Identification Information: We process basic and identification-related information to facilitate bookings and ensure the accuracy of your travel plans.
  • Financial Transactions: Payment details are crucial for processing bookings and purchases securely.
  • Travel Histories and Preferences: Understanding your travel preferences and history helps us tailor suggestions and improve service offerings.
  • Technical and Geolocation Data: Device-specific information and location data are used for system security, personalized content delivery, and statistical analyses.
  • Interactions and Engagements: Analyzing how you interact with our platforms and services helps us to optimize design and functionality, creating a smoother user experience.
Profiling and Personalization
Combining various data forms allows us to create comprehensive profiles, which help personalize your experience and refine our advertising strategies to better match your interests.
TripPilot is dedicated to maintaining the confidentiality and integrity of your personal data. We employ robust security measures and follow stringent procedures to safeguard your information.
Information Uses and Purposes
To the extent possible, we aim to provide you with relevant content and a tailored experience when you use our Services, and we use information about you to do that, including in the following ways:
Registration, Membership, and Other Contracts
Register and manage your account, including to allow you access to and use of our Services. Facilitate your bookings. Process payments or credits. Offer you promotional programs that may include competitions, gift cards, rewards, cash back, and discounts. Improve our Services.
Use your information for analytical purposes and to enable us to improve our Services. Provide you with a tailored/optimized experience by grouping users based on, for example, usage, interests, and demographics. Send you surveys, market research invitations, or panel interviews for analytics purposes.
Individualization and Customization
Notify you about special offers and products or services available from us, our affiliates, or our partners that may be of interest to you. Tailor your experience, including by making inferences about your interests and preferences based on your activity, and customize the ads shown to you both on and off our website.
Communication
Communicate with you or facilitate communication between you and our partners and/or affiliates. Conduct, monitor, and record your calls or interactions with us; for example, your communications with our customer service or sales teams, or through our use of pixels and similar technologies to monitor how you interact with our emails to you, such as whether you open or click on content in our emails. Host your reviews, forum posts, photos, videos, and other content. Respond to your questions and comments.
Legal Compliance
Resolve disputes or troubleshoot problems. Prevent fraud and other potentially prohibited or unlawful activities. Comply with relevant laws, respond to legal requests, prevent harm, and protect our rights. Provide payment services, including to detect and prevent money laundering, fraud, and security incidents, to comply with legal obligations, and to enforce any applicable terms of service.
Please note, that if we use automated decision-making to process your personal information, we will implement appropriate measures required to safeguard your rights and freedoms including your right to obtain human intervention.
When is personal data shared with or collected by third parties?
We share personal data where necessary for the purposes described in How and why do we use personal data? This means we share personal data where you ask us to, where it's a necessary part of doing business with you and providing you with services, where we need to for legal reasons, or where sharing information is necessary to pursue our, or a third party's, legitimate interests. Personal data is made available to certain companies who process information on our behalf, to enable us to operate our Platforms and deliver our services. Travel Providers with whom you make a booking or purchase via TripPilot (like airlines, hotels, or travel agents) will use your data in line with their own policies. Companies that advertise via our Platforms or with which we otherwise collaborate may also collect your information for their own purposes.
Learn more about how we share or allow others to collect your information Sharing personal data with third parties who process it on our behalf
We share personal data with selected third parties which provide us with a variety of services (“Third-Party Processors”). We require Third-Party Processors to undergo a security review and agree under contract with us to, amongst other things, keep personal data secure, comply with applicable data protection laws, and only use it for the purposes we have instructed. The types of Third-Party Processors we may share your personal data with include Payment processors. These are engaged by us to securely store or handle payment information, including payment card details, required for facilitating bookings or purchases with Travel Providers and providers of email management and distribution tools. For example, if you sign up to receive TripPilot newsletters or other marketing messages we will send these to you using a third-party email distribution tool; Providers of security and fraud prevention services. For example, we use these providers to identify automated software agents that might disrupt our services or to prevent misuse of our APIs; Providers of data aggregation and analytics software services. Providers of tracking tools. For example, we use these tools to identify when you click on a link on the TripPilot Platforms and redirect to a Travel Provider's platform; Providers of customer service software platforms. These assist us in communicating with you and providing customer support to you - for example, via our online help center; Providers of customer satisfaction, and market research services. These assist us in inviting you to participate in these surveys or research, recording your feedback (if you choose to provide it), and helping us to understand your feedback; Providers of online cloud storage services, and other essential IT support services. These enable us to operate our business and run our internal and external services and other companies within the TripPilot group. Group companies assist us with the purposes described in his Policy, including delivery of our services to you.
Unlike Third-Party Processors, certain trusted companies will process your personal data as a separate controller, which means that they determine how and why your personal data is used rather than TripPilot: Travel Providers. If you make a booking or purchase with a Travel Provider on one of our Platforms, the personal data you submit as part of your booking or purchase will be shared with the relevant Travel Provider (or third parties providing services on their behalf) so that your booking or purchase can be processed. If you agree to receive marketing communications from the Travel Provider or join their loyalty program, we will also share personal data for these purposes. We may also disclose personal data to Travel Providers where necessary to assist you with queries or issues you raise with our customer services team. You'll be able to review the Travel Provider's privacy policy and terms and conditions first to understand how the Travel Provider will use your information in advance of making your booking or purchase. Fraud Prevention Partners. In order to prevent and detect fraud, we may share information about you with the fraud prevention services providers we cooperate with. We may also share personal data with Travel Providers for their, or our, verification and fraud-detection purposes. Advertising Partners.
Depending on the Platform you are using and the privacy choices you make, certain information may be collected from you by third parties such as advertisers, marketing networks, and affiliates using cookies and similar technologies. We may also collaborate with selected companies to understand more about our travelers’ interests, for example, by identifying how TripPilot travelers engage with third-party brands or to improve our advertising campaigns.
2. HOW DO WE PROCESS YOUR INFORMATION?
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.
We process your personal information for a variety of reasons, depending on how you interact with our Services, including:
  • To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.
  • To save or protect an individual's vital interest. We may process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.
Brand Collaborations
Where necessary, we will share personal data with third parties with which we collaborate on joint initiatives, such as promotions or competitions. These third parties may send you electronic direct marketing communications (for example, promotional emails), if you choose to consent to this. Disclosing information for legal and other reasons. We will disclose personal data where necessary to enforce our Terms of Service or other agreements, or as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets. We may also disclose personal data if necessary to prevent, detect or prosecute unlawful (or suspected unlawful) activities, including fraud, or where necessary to respond to legally binding requests (for example, from law enforcement agencies), legal claims or to enforce our own legal rights and remedies. Other companies within the TripPilot group. Personal data is shared with other entities in the TripPilot group which assist us with the purposes described in this Policy and for group-wide purposes, including delivery of our services to you, security and fraud prevention, and internal reporting and administration.
Information from Cookies
At TripPilot, we aim to make your access to our Services as seamless, efficient, and beneficial as possible. To achieve this, we utilize cookies and similar technologies that enhance your user experience, increase website security, and deliver advertisements that are relevant to you.
Cookies are small text files automatically placed on your device when you visit almost any website. Stored by your internet browser, these files contain basic information about your internet usage. Each time you revisit a website, your browser sends back the information from these cookies so the site can recognize your device and tailor your experience by providing personalized content, among other things. We also employ other tracking technologies, such as pixels, SDKs, or server logs, which function similarly. Furthermore, cookies and tracking technologies are used to remember your login details, eliminating the need to re-enter them repeatedly when you use our Services, and to help us understand your preferences.
To empower you with control over your data, we offer a Cookie Consent Tool that allows you to adjust and customize your cookie settings. This tool is accessible by clicking the “Cookie consent” link at the bottom of every page, where you can modify your preferences in our cookie banner. Additionally, you can manage cookies through your internet browser’s settings, where you have the option to select which cookies to accept and reject.
You have the right to withdraw your consent to cookies at any time by using the “Cookie consent” link to modify and save your preferences.
We permit third parties to collect and utilize information from your browsing activities to provide advertisements tailored to your interests. These parties are detailed in our Cookie Consent Tool, where we provide links to their privacy notices.
When you enter your email address on our website (whether to log in, sign up for a newsletter, or similar activities) or use our app, we may share personal data or other information collected from you, such as your email (in a hashed, pseudonymous form), mobile advertising identifier, IP address, or information about your browser or operating system, with our advertising partners like LiveRamp and the Trade Desk, acting as joint controllers. They utilize this information to generate an online identification code intended for recognizing you across devices. This code, which does not contain your identifiable personal data, is placed in our first-party cookie and is used for online and cross-channel advertising. It may also be shared with our advertising partners and other third-party advertising companies globally to enable interest-based content or targeted advertising across your online experience (e.g., web, email, connected devices, and in-app, etc.). These third parties may link the online identification code to demographic or interest-based information you have provided in your interactions with them.
Please note that if you decline certain cookies, your access to some functionalities and areas of our Services might be degraded or restricted.
Our use of any information we collect through cookies is governed by this Statement, which is linked on every page of our website.
Users Outside India
Please note that the data shared with TripPilot shall be primarily processed in India and other jurisdictions where a third party engaged by TripPilot may process the data on TripPilot’s behalf. By agreeing to this policy, you are providing TripPilot with your explicit consent to process your personal information for the purpose(s) defined in this policy. The data protection regulations in India or such other jurisdictions mentioned above may differ from those of your country of residence.
If such processing of data is essential for us to be able to provide service to you, then we may not be able to serve or confirm your bookings after your withdrawal of consent. For instance, if you want to book any international holiday package in fixed departures (group bookings), then certain personal information of yours like contact details, gender, dietary preferences, choice of room with a smoking facility, any medical condition which may require specific attention or facility, etc., may have to be shared by us with our vendors in each city where you will stay, and they may further process this information for making suitable arrangements for you during the holiday. Such sharing and processing of information may extend to the hotel where you will stay or the tour manager who will be your guide during the travel.
A withdrawal of consent by you for us to process your information may:
  • severely inhibit our ability to serve you properly and in such case, we may have to refuse the booking altogether, or
  • unreasonably restrict us to service your booking (if a booking is already made) which may further affect your trip or may compel us to cancel your booking.
Europe and the UK
General Data Protection Regulation Privacy Statement (“GDPR Statement”)
This GDPR Statement applies to persons in the European Economic Area (“EEA”), including those based in the United Kingdom. This GDPR Statement supplements our Statement; however, where the Statement conflicts with the GDPR Statement, the GDPR Statement will prevail for persons located in the EEA.
Controller of Personal Information and Local Representative
TripPilot is the controller of the personal information we collect; however, in accordance with applicable data privacy law, we have appointed representatives within the European Union and the United Kingdom.
TripPilot Ireland Limited and TripPilot Limited’s roles are limited solely to being a contact point for questions on data protection from European (including UK) residents and data protection supervisory authorities. For the avoidance of doubt, neither TripPilot Ireland Limited nor TripPilot Limited can field other communications or legal processes on behalf of TripPilot.
Information Rights Under GDPR
You have certain rights regarding your personal information.
Your rights with respect to your own personal information include the following:
  • The right to request access to your personal information. This enables you to receive a copy of the personal information we hold about you.
  • The right to request correction of your personal information if it is inaccurate. You may also supplement any incomplete personal information we have, taking into account the purposes of the processing.
  • The right to request deletion of your personal information if:
    • Your personal information is no longer necessary for the purposes for which we collected or processed them;
    • You withdraw your consent if the processing of your personal information is based on consent and no other legal ground exists;
    • You object to the processing of your personal information and we do not have an overriding legitimate ground for processing;
    • Your personal information is unlawfully processed;
    • Your personal information must be deleted for compliance with a legal obligation.
  • The right to object to the processing of your personal information. We will comply with your request unless we have a compelling overriding legitimate interest for processing or we need to continue processing your personal information to establish, exercise, or defend a legal claim.
  • The right to restrict the processing of personal information, if:
    • The accuracy of your personal information is contested by you, for the period in which we have to verify the accuracy of the personal information;
    • The processing is unlawful, and you oppose the deletion of your personal information and request restriction;
    • We no longer need your personal information for the purposes of processing, but your personal information is required by you for legal claims;
    • You have objected to the processing for the period in which we have to verify overriding legitimate grounds.
  • The right to data portability. You may request that we send this personal information to a third party, where feasible. You only have this right if it relates to the personal information you have provided to us where the processing is based on consent or necessity for the performance of a contract between you and us, and the processing is conducted by automated means.
  • You also have the right to lodge a complaint before your national data protection authority.
  • You will not usually have to pay a fee to access your personal information (or to exercise any of the other rights described in this Statement). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). To the extent you use a third party to submit a data request on your behalf, we may need to take reasonable steps to verify the authenticity of the request. These are security measures to ensure that personal information is not disclosed to any person who has no right to receive it. In an effort to speed up our response, we may also contact you to ask you for further information in relation to your request. You can exercise several of your rights through the personal information section of your account. To exercise your other rights, you can file a request by clicking here.
Information Uses and Legal Basis
We will only use your personal information under the circumstances permitted by law or you.
Pursuant to GDPR, we will use your personal information in one or more of the following circumstances:
  • Registration, membership, and other contracts: Where we need to perform the contract we are about to enter into or have entered into with you.
  • Improve our Services and Customization: Where our legitimate interests (or those of a third party) must provide or improve Services, including our interest to provide you improved and personalized Services, and where your interests and fundamental rights do not override those interests.
  • Communication: Where you are a registered member, the information uses might be required to perform the contract with you. Where it is necessary for our legitimate interests (or those of a third party) to communicate with you and your interests and fundamental rights do not override those interests.
  • Legal Compliance: Where it is necessary to meet our legal obligations.
International Transfers
Your personal information may be stored or transferred to countries outside the EEA and the UK for the purposes described in this Statement. When we store or transfer your personal information outside the EEA and the UK, we take the following precautions to ensure that your personal information is properly protected.
Whenever we store or transfer your personal information outside the EEA and the UK, we will do so in accordance with applicable law, and we will ensure a similar degree of protection is afforded to it by implementing appropriate safeguards. Transfers of personal information are made:
  • to a country recognized by the European Commission as providing an adequate level of protection; or
  • to a country that does not offer adequate protection but whose transfer has been governed by the standard contractual clauses of the European Commission or by implementing other appropriate cross-border transfer solutions to provide adequate protection.
  • By using our Services, you understand that your personal information may be transferred to our facilities and those third parties with whom we share it, as described in this Statement.
This Multi-State Privacy Statement is provided pursuant to applicable state laws and applies to residents of Virginia, Connecticut, and Colorado. It supplements our overall Statement with additional disclosures and rights.
If you are a resident of Virginia, Connecticut, or Colorado, you may take advantage of the following rights in accordance with applicable law:
  • Confirmation/Access: You can request to confirm whether TripPilot processes your personal information. Subject to certain exceptions, you can also request a copy of the personal information that you provided to us.
  • Deletion: You can request that TripPilot delete the personal information we have about you
  • Correction You can request that TripPilot correct the inaccurate personal information we maintain about you.
  • Opt Out of Sale You can request to opt out of the sale of your personal information to a third party.
  • Opt-Out of Targeted Advertising TripPilot may display advertisements to you where the ad was selected based on personal information obtained from (or in some instances inferred) from your activities over time and across unaffiliated websites or online applications to predict your preferences or interests. To the extent permitted by law, you can request that we stop using your personal information for such targeted advertising by clicking on the “Cookie consent” link that may be in the footer of our websites. Your opt-out of cookie-based tracking for advertising purposes is specific to the device, website, and browser you are using; it is deleted whenever you clear your cookies or your browser’s cache.
To take advantage of any of these rights, please contact us via our dedicated privacy portal by clicking here or in writing at TripPilot LLC: 400 First Avenue, Needham, Massachusetts, 02494, USA. Note that Connecticut and Colorado residents may designate an authorized agent to request on their behalf that we stop selling or processing their personal information for targeted advertising purposes. We will take reasonable steps to authenticate your identity prior to responding to your requests. The authentication process will vary depending on the sensitivity of the personal information and whether you have an account with us. We will use commercially reasonable efforts to authenticate the identity of authorized agents and their authority to submit requests on your behalf.
We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. You have the right to submit an appeal if you are not satisfied with the outcome of your request by submitting a request here.