Privacy policy
What we collect, why, and the choices you have.
Last updated: October 2026
This policy explains how Secret Trips (“we”, “us”) handles personal data when you use Secret Trips at secret-trips.com (the “Site”). We are the data controller for the data described here. Contact: [email protected].
Data we collect
| What | When | Why (legal basis) |
|---|---|---|
| Name, email, hashed password, home airport, currency | You create an account | To provide your account (contract) |
| Saved destinations and search history | You use the Site while signed in | To show them back to you (contract). You can clear them at any time. |
| Email address | You subscribe to deals emails | To send the newsletter (consent — unsubscribe any time) |
| Name, email and message | You use the contact form | To reply to you (legitimate interest) |
| Clicks to partners (partner, page, time) | You follow a partner link | To measure which features are useful and reconcile commissions (legitimate interest) |
| Technical data (IP address, browser) in server logs | Every visit | Security and preventing abuse (legitimate interest). Kept for up to 30 days. |
| Analytics and partner cookies | Only if you allow them | Statistics and booking attribution (consent) |
Bookings with partners
We don’t take bookings or payments. When you click through to a partner, the information you enter on their site (passenger names, payment details, etc.) is collected by that partner under their own privacy policy. Search details you entered with us (such as destination and dates) are passed to the partner in the link so their search can start.
Who we share data with
- Hosting and email providers that process data on our behalf under contract.
- Travelpayouts and travel partners receive an anonymous referral identifier when you click a partner link, so commissions can be credited to us. We don’t send them your name or email.
- Authorities where we’re legally required to.
We never sell your personal data.
How long we keep data
Account data is kept until you delete your account. Search history can be cleared at any time and is deleted with your account. Newsletter data is kept until you unsubscribe. Contact messages are kept for up to two years.
Your rights
Depending on where you live (including under the EU/UK GDPR), you can ask to access, correct, export or delete your data, object to processing or withdraw consent. Signed-in users can download and delete their data from the account page. For anything else, email us. You also have the right to complain to your local data protection authority.
Security
Passwords are stored as salted hashes, sessions use secure HTTP-only cookies, and the Site is served over HTTPS.
Children
The Site is not intended for children under 16 and we don’t knowingly collect their data.
Changes
We’ll update this page if our practices change and note the date above.