Privacy Policy

Last updated: 13 July 2026

This policy is a working draft written to reflect how the Away Break site actually operates. It has not been reviewed by a solicitor — for full legal compliance (particularly UK GDPR and PECR cookie rules), please have a qualified professional check it before relying on it in production.

1. Who we are

Away Break (away-break.uk) is a UK-based travel search site. We are the "data controller" for the personal information described in this policy. You can contact us at away.break.travel@gmail.com.

2. What we collect

Account information: if you sign up for a free account, we collect your email address and a securely hashed password, handled by our authentication provider, Supabase.
Saved travel plan data: if you save a hotel, flight, car hire or tour listing to "My Travel Plan," we store the details of that listing (title, price shown, route, category) against your account.
Usage and cookies: we use cookies and similar technologies to keep you logged in, and our affiliate partners (see section 4) use tracking cookies to record when a click from our site leads to a booking on their platform.

3. How we use your data

To create and manage your account and travel plan
To keep the site secure and functioning correctly
To understand how the site is used, so we can improve it

We do not sell your personal data.

4. Affiliate links and third parties

Away Break earns commission when you click through to book with one of our travel partners (currently including Booking.com, Skyscanner, RentalCars.com and Viator, among others). When you click an affiliate link:

You leave away-break.uk and land on the partner's own website.
The partner sets its own cookies to attribute the booking to us, and processes any data you provide during booking under their own privacy policy — we recommend reviewing it before you book.
We do not receive your payment details or booking confirmation data from partner sites.

Our account data (email, saved items) is stored and processed by Supabase, our database and authentication provider, acting as our data processor.

5. Legal basis for processing

We process your account data on the basis of contract (to provide the travel plan feature you sign up for) and consent (for non-essential cookies). You can withdraw consent at any time via your browser's cookie settings.

6. How long we keep your data

We retain your account and saved travel plan data for as long as your account remains active. If you delete your account, we will delete your associated data within 30 days, except where we are required to retain it for legal reasons.

7. Your rights

Under UK GDPR, you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise any of these rights, email away.break.travel@gmail.com. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you believe your data has been mishandled.

8. Children

Away Break is not directed at children under 16, and we do not knowingly collect data from them.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "last updated" date above.

10. Contact

Questions about this policy or your data can be sent to away.break.travel@gmail.com.