This Privacy Policy describes how Zippyfeedpress Travel Media Ltd ("Zippyfeedpress", "we", "us", or "our"), operating the web portal zippyfeedpress.site, collects, stores, uses, and protects personal data obtained from visitors, subscribers, and travel planner users under the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (Regulation (EU) 2016/679), and the California Consumer Privacy Act (CCPA).
1. Identification of the Data Controller
The data controller responsible for the processing of your personal data is:
Zippyfeedpress Travel Media Ltd.
Company Registration Number: OC418920
Registered Office Address: 14 St. Ann's Square, Royal Exchange Quarter, Manchester M2 7PW, United Kingdom
Data Protection Officer (DPO) Contact: [email protected]
2. Categories of Information We Collect
We only collect information strictly required to supply high-fidelity Europe itinerary calculations and customer assistance:
- Interactive Planner Inputs: Chosen travel months, preferred holiday styles (e.g. Beach, Culture, Mountains), and budget tier selections stored locally in your browser session.
- Direct Contact Data: Name, email address, and narrative messages voluntarily submitted via our concierge contact form.
- Technical & Telemetry Data: IP address (anonymized), browser user agent, operating system, referring URL, and interaction timestamps.
- Cookie Preference Data: Stored strictly via client-side
localStorageto record your choice regarding non-essential script loading.
3. Legal Bases for Processing (UK/EU GDPR)
Our processing activities rely on the following explicit legal grounds:
- Consent (Art. 6(1)(a)): Explicit consent given when opting into analytics cookies or submitting inquiries through our contact interface.
- Legitimate Interests (Art. 6(1)(f)): Maintaining server network security, detecting malicious traffic, and optimizing travel algorithm performance.
- Contractual & Pre-Contractual Steps (Art. 6(1)(b)): Providing custom itinerary details requested directly by users.
4. Third-Party Data Processors
We do not sell, rent, or lease your personal information. We work solely with reputable, GDPR-compliant infrastructure partners under binding Data Processing Agreements (DPAs):
- Cloud Hosting & CDN: High-security cloud edge providers ensuring encrypted TLS 1.3 data transmission.
- Web Fonts & Assets: Privacy-respecting font networks (Google Fonts) with IP obfuscation.
- Email Delivery Services: Encrypted SMTP relays for processing customer inquiries.
5. Data Retention Periods
Inquiry communications are retained for a maximum duration of 24 months to satisfy customer service follow-ups and UK tax record compliance, after which records are permanently purged. Anonymized telemetry server logs are rotated and deleted every 30 days.
6. Your Statutory Rights (GDPR & CCPA)
As a data subject, you hold statutory rights including:
- The right to access a copy of the personal data we hold about you.
- The right to rectification of inaccurate or outdated records.
- The right to erasure ("Right to be Forgotten") under qualifying circumstances.
- The right to restrict or object to data processing.
- The right to data portability in a machine-readable format.
- The right to lodge a formal complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.
7. Amendments to this Policy
We may update this Privacy Policy periodically to reflect changes in regulatory standards or planner technology. Any revised versions will be posted immediately with a renewed effective date.