Privacy policy

Optiva Trip is the controller of the personal data described here under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. You can contact us about your data at privacy@optivatrip.co.uk.

• Your searches: the places, dates, number of travellers and currency you search for. Our server sends them to our flight data partner to fetch prices. They are not linked to you, and we may keep them without anything that identifies you to understand demand and show price trends. Legal basis: our legitimate interest in running the search you asked for.
• Technical data: your IP address, browser type and the pages you request. Our hosting provider processes this to deliver the website and keep it secure, and keeps it in short-term server logs. Legal basis: legitimate interests (running a secure website).
• Your approximate location: the country your IP address belongs to, and your device's time zone. We use them only to pick a sensible language, currency and departure city. We don't store them. Legal basis: legitimate interests (showing a useful starting point, which you can change).
• Your choices: the language you pick and your cookie choice are remembered in cookies on your device. See our Cookie policy.
• Affiliate tracking, only if you accept cookies: the Travelpayouts script records which partner links you click, so that bookings can be credited to us. Legal basis: your consent, which you can withdraw at any time with Cookie settings.
• Emails you send us: your email address and message, used to reply to you. Legal basis: legitimate interests (answering you).

When you choose a deal, we send you to the partner's website (today, Aviasales or Kiwi.com) with our partner ID in the link. The partner then knows that you came from Optiva Trip, and from that point its own privacy policy applies to everything you do there, including any booking. We are told about bookings so that we can be paid, but we never receive your name, contact details or payment details. Links to Kiwi.com first pass through Travelpayouts, which records the click so that a booking can be credited to us.

We don't sell your personal data or use it for advertising profiles. We only share it with service providers who help us run Optiva Trip:

• Vercel, which hosts the website and processes technical data on our behalf.
• Travelpayouts, our affiliate network, which supplies flight prices and airport suggestions (we send it your searches, not your identity) and, if you accept cookies, tracks partner links. It also records clicks on our Kiwi.com links, which pass through its servers.
• Our email provider, if you write to us.

We may also share data if the law requires it, for example with the police or a court.

Some of these providers process data outside the UK, for example in the United States or the European Union. When they do, the transfer is protected by an adequacy decision (such as the UK-US Data Bridge) or by approved safeguards such as the UK International Data Transfer Addendum.

• Server logs: as long as our hosting provider keeps them, normally a few days to a few weeks.
• Searches: kept only in a form that doesn't identify you.
• Your cookie choice: 6 months. Your language choice: 1 year.
• Emails: up to 2 years after our last exchange, unless we need them longer to deal with a legal claim.

You have the right to ask for a copy of your personal data, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw your consent at any time. To use any of these rights, email privacy@optivatrip.co.uk. We will reply within one month. Because we hold so little about you, we may need you to tell us which visit or email your request is about.

If you're unhappy with how we use your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk. If you live in the European Union, you can also complain to the regulator in your country.

Optiva Trip is meant for adults planning travel. We don't knowingly collect data about children.

We will update this policy when the website changes, for example when we add hotels. The date at the top shows the latest version. If a change matters to how we use your data, we will say so on the website.