Privacy Notice

Last updated: 16 July 2026

1. Who we are

The Travelist Co ("The Travelist", "we", "us") operates this website and the related travel-planning service. We are the data controller for the personal information described in this notice.

2. Personal data we collect

Account data — name, email, and login credentials.
Profile data — display name, language preference, saved trips and notes.
Order data — records of the itineraries and guides you buy (payment card details are handled by Paddle, not by us).
Itinerary requests — the destination, dates, group and preference information you send us when requesting a custom itinerary.
Support messages — anything you send to hello@thetravelistco.com.
Technical data — IP address, device and browser, usage and diagnostic logs.

3. How we use it and legal basis

Provide the service — create your account, save your itineraries, and deliver purchased content. Legal basis: contract performance.
Process orders — share the minimum necessary information with our payment provider. Legal basis: contract performance.
Itinerary curation — read your inquiry and, if we accept it, build your custom itinerary. Legal basis: contract performance.
Security and fraud prevention — protect the service and our users. Legal basis: legitimate interests.
Product improvement — understand how the service is used to make it better. Legal basis: legitimate interests.
Legal compliance — meet accounting, tax, and regulatory obligations. Legal basis: legal obligation.

4. Who we share it with

Paddle — our Merchant of Record for payments, subscription management, tax compliance, and invoicing. See the Paddle Privacy Policy.
Hosting and infrastructure providers — for hosting, databases, email delivery, and analytics, acting as our processors.
Professional advisers — accountants and lawyers, when strictly necessary.
Authorities — where required by law, court order, or valid legal request.

We do not sell your personal data.

5. Retention

We keep account and order data for as long as you have an account with us, plus a reasonable period for legal, tax, and accounting requirements. Itinerary requests are kept while the request is active and for a short period afterwards to handle follow-ups. When data is no longer needed, we delete or anonymise it.

6. Your rights

Subject to local law, you may have the right to:

access the personal data we hold about you;
correct inaccurate data;
ask us to delete your data ("right to be forgotten");
restrict or object to certain processing;
request a portable copy of the data you provided;
withdraw consent where processing is based on consent;
complain to your local data protection authority.

To exercise any of these rights, email hello@thetravelistco.com. We aim to respond within 30 days.

7. International transfers

Your data may be processed in countries outside your own, including where our hosting and payments providers operate. When we transfer data outside the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and regular reviews. No system is perfectly secure — if you believe your account has been compromised, contact us immediately.

9. Cookies

We use a small number of essential cookies to keep you signed in and remember your preferences. We do not use advertising cookies. Where analytics cookies are used, you can control them through your browser settings.

10. Changes

We may update this notice from time to time. Material changes will be notified through the service or by email.

11. Contact

The Travelist Co · hello@thetravelistco.com