Legal
Privacy Policy
Last Updated: 29th March 2026
Welcome to Itinee! We respect your privacy and are committed to protecting your personal data. This Privacy Policy will inform you about how we look after your personal data when you visit our website (itinee.co.uk) and use the Itinee application (the "Service"), and tell you about your privacy rights and how the law protects you.
1. Who We Are
Itinee ("we", "us", or "our") is the data controller responsible for your personal data. If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please use the contact form on our Contact page.
2. The Data We Collect About You
We only collect the minimum amount of data necessary to provide you with the Service. This includes:
- Identity and Contact Data: Your name and email address (collected when you register for an account).
- Application Data: Information you input to use the Service, including your created itineraries, travel dates, saved locations, and stay durations.
- Technical and Usage Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting, and information about how you use our website and Service.
3. How We Use Your Data
We will only use your personal data when the law allows us to. Most commonly, we use your data under the following legal bases:
- Performance of a Contract: To register you as a new user, manage your account, and save your itineraries so you can access them across devices.
- Legitimate Interests: To study how users use our Service, to develop our product, and to keep our website secure.
Marketing Communications: At this stage, we do not send marketing or promotional emails. We will only contact you via email if it is strictly necessary for account security, password resets, or critical service updates.
4. Third-Party Services and Data Sharing
To provide our Service, we rely on trusted third-party service providers. We do not sell your data. We share data with:
- Google Cloud (Hosting): Our application and database are securely hosted in a Google Cloud data center located within the United Kingdom.
- Google Maps API: We use Google Maps services to provide location searches, distances, and travel time estimates. The locations you search for are processed by Google. By using Itinee, you are also bound by the Google Privacy Policy.
- Analytics Providers: We use Google Analytics 4 and Google Tag Manager to understand website traffic and user behavior. This helps us improve the user experience.
5. Cookies and Tracking Technologies
We use cookies (small text files placed on your device) to operate the Service.
- Essential Cookies: Used to keep you logged in and securely authenticate your session. These cannot be disabled.
- Analytics Cookies: We use Google Analytics to collect anonymous information about how visitors use our site. You will be asked to consent to these analytics cookies via our cookie banner when you first visit the site.
6. Data Security and Retention
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed.
- Storage: Your data is stored securely in the UK.
- Retention: We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for. If you delete your account, your personal data and itineraries will be permanently deleted from our active database.
7. Your Legal Rights (UK GDPR)
Under UK data protection laws, you have the following rights regarding your personal data:
- Request access to your personal data.
- Request correction of the personal data that we hold about you.
- Request erasure of your personal data (the "right to be forgotten").
- Object to processing or request restriction of processing of your personal data.
- Request the transfer of your personal data to you or a third party.
- Withdraw consent at any time where we are relying on consent to process your personal data.
To exercise any of these rights, please use the contact form on our Contact page. We try to respond to all legitimate requests within one month.
8. Complaints
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.
9. Changes to this Privacy Policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on this page.