Privacy Policy
Last updated: 29 September 2026
This policy explains what personal data Travel Life Hub collects when you use travellifehub.com and the Travel Life Hub iOS app, why we collect it, and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Who we are
The data controller responsible for your personal data is:
- Operator: TODO: legal entity name (e.g. Travel Life Hub Ltd)
- Company number: TODO: Companies House number, or remove if a sole trader
- Address: TODO: registered / postal address
- ICO registration: TODO: ICO registration number (data protection fee)
- Email: hello@travellifehub.com
What we collect and why
| Data | Why we use it | Lawful basis |
|---|---|---|
| Comments: your name, comment and (optionally) your email address | To moderate and publish your comment. Your email is never published; we only use it to contact you about your comment. | Legitimate interests (running a moderated comment section) |
| App account: email address, a securely hashed password and sign-in session records | To let you sign in to the iOS app | Contract (providing the account you asked for) |
| Emails you send us | To reply to you and deal with your request | Legitimate interests; legal obligation for data protection requests |
| Technical data: IP address, browser type and pages requested, recorded in our web server logs | To keep the site secure and working and to investigate abuse | Legitimate interests (security) |
| Cookie choices and, only if you agree, analytics and advertising cookies | See our cookie policy | Consent (strictly necessary cookies do not need consent) |
We do not currently run a newsletter or sell paid memberships. If we introduce either, we will update this policy first and ask for any consent needed at the point you sign up. Card payments would be handled by a payment provider such as Stripe; we would never see or store your full card details.
Who we share it with
We do not sell your personal data. We share it only with:
- Our hosting and email providers, who store and process data on our behalf. TODO: name the hosting location/provider and the mailbox provider for hello@travellifehub.com.
- Google (AdSense), only if you accept advertising cookies.
- YouTube (Google), only when you choose to play an embedded video.
- Authorities, where the law requires it.
International transfers
Google and YouTube may process data in the United States. Where data leaves the UK, it is protected by UK-approved safeguards such as the UK Extension to the EU–US Data Privacy Framework or the International Data Transfer Agreement.
How long we keep it
- Comments: for as long as the page they are on is published, or until you ask us to remove them. Rejected comments are deleted.
- App accounts: until you delete your account (you can do this in the app under Account → Delete account). Sign-in sessions expire after 30 days.
- Emails: up to two years after our last exchange, unless we need them longer for a legal claim.
- Server logs: TODO: confirm log retention period (we recommend no more than 90 days).
- Cookie choice: six months, after which we ask again.
Your rights
You have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to how we use it, including objecting to processing based on legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time, for example through “Cookie settings” in the site footer.
To make a request, email hello@travellifehub.com with the subject “Data protection request” and tell us what you would like us to do. We may need to confirm your identity, and we will respond within one month. There is no charge.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.
Children
Our site and app are not aimed at children under 13, and we do not knowingly collect their data.
Security
We use encrypted connections (HTTPS), store passwords only as secure hashes, and limit access to personal data to the people who run the site.
Changes to this policy
We will post any changes here and update the date at the top of the page.