Privacy Policy
What we collect, who receives it, how long we keep it, and how to get it back or get it deleted.
Who is responsible
And who to write to about any of it
Excursify is a trading name of Excursify Ltd, registered in England and Wales under company number 1234657980, at Great Portland Street, London.
We decide what information is collected here and what it is used for, which under data protection law makes us the controller of it. This policy covers everything you do on this site: search, book, pay, and keep an account.
Anything you want to raise about your information reaches a person at [email protected].
What we collect
Four moments, and nothing in between
- When you open an account
- Your email address, your first and last name, your phone number and your date of birth, plus a profile picture if you choose to add one. We also hold a password for you, never in a form anyone can read.
- When you book
- The names, email addresses and phone numbers of everyone travelling. Flights need more than that, because airlines insist on it: each passenger's date of birth, gender, nationality and passport details. Hotels need the guest names and any request you leave for the property.
- When you pay
- The amount, the currency and whether the payment went through. Your card number, its expiry date and its security code are handled by our payment provider and never reach us.
- While you use the site
- The searches you run - where from, where to, when, how many of you and what you want to spend - along with the ordinary record any website keeps of a visit: the internet address you came from, the browser you used and the pages you looked at.
We collect what a booking needs and what the law requires, and we stop there.
Why we're allowed to hold it
The legal ground under each piece
Most of it is simply the contract between us. You asked us to book a flight and a hotel, and a booking cannot be made without passenger names and a way to pay - so we hold what the airline and the property require, and nothing beyond it.
Some of it is a legal obligation. Booking and payment records have to be kept for tax and accounting for six years, even after you have gone.
A small part rests on our legitimate interests: keeping the service running, seeing when something has broken, and stopping anyone who sets out to abuse it.
Who else sees it
The whole list, with what each one receives
Our payment provider
Your card details and the amount
To take the payment, and to send any refund back to the same card.
Our flight provider, and the airline you fly with
Passenger names, dates of birth, gender, nationality and passport details
No airline will issue a ticket without them.
Our accommodation provider, and the hotel you stay at
Guest names, contact details and any request you left
So the property knows who is arriving and can hold the room for you.
Our email provider
Your email address and the message itself
To confirm your address, reset a password, or send you a booking confirmation.
The company that keeps this site online
Everything above, only as it sits on the servers they run for us
The site has to live somewhere. They keep it running and do nothing else with any of it.
The company that supplies the type this page is set in
The internet address you came from
It reaches them on its own when your browser collects the lettering as the page loads.
That is the entire list. Once your booking reaches an airline or a hotel, they hold your details under their own privacy policy - which is why we say plainly that your travel contract is with them.
Beyond that, we hand your details to no one - unless the law leaves us no choice, such as a court order or a formal request from an authority entitled to make one.
Where in the world it goes
Travel crosses borders, and so does the paperwork
If you fly abroad or stay abroad, the airline and the property receive your details in the country where they operate, which may be outside the United Kingdom and the European Economic Area. That transfer is the booking itself: without it no ticket can be issued and no room can be held for you.
Where we choose a company ourselves, rather than you choosing a destination, we work with providers that commit to recognised safeguards for moving personal information across borders - standard contractual terms approved for that purpose, or an adequacy decision covering the country they are in.
Cookies
A handful, and every one does a job
Your browser stores a few small files for us: the ones that keep you signed in to your account, and one that remembers the currency you picked. Nothing on this site advertises to you, and nothing follows you onto another website.
Clear them from your browser whenever you like. You'll be signed out and the currency will go back to its default; nothing else changes.
The categories in use, what each is for and how long it is kept are set out in our Cookie Policy.
How long we keep it
And what survives a deletion
Your account details stay for as long as the account does. Delete it from Settings and your name, email address, phone number, date of birth and picture go there and then - no request to raise, no waiting on us.
Booking and payment records are the exception. UK tax and accounting rules require us to keep them for six years from the end of the financial year the booking falls in, so they outlive a closed account. Nothing else does.
Passport and identity details are the shortest-lived thing we hold. They exist for one purpose - getting your ticket issued - so they pass to the airline and stop there. The booking record we keep afterwards carries your name and no document number at all: they are no part of the six-year record, and they never reach your account. While a booking is still being filled in they sit in the unfinished one, and that is deleted the day after you abandon it. The airline keeps its own copy, because no ticket can exist without one.
A booking you start and never finish isn't kept either. The names and contact details you had typed in go with it, cleared out a day or so after you walk away - it never becomes a record of anything, and nothing of it turns up in your account later.
Search information is kept only briefly. Prices and destinations may be reused as examples of what a trip costs, with nothing in them that points back to the person who searched.
A few things we don't do
Worth saying out loud
- Sell, rent or trade information about you
- Build advertising profiles, or follow you onto other websites
- Leave a decision that seriously affects you to a machine, with no person involved
- Ask children to use the site on their own - a child's details reach us only when an adult books a trip for them
What you can ask us for
Free, and answered within a month
- Ask for a copy of everything we hold about you
- Have anything wrong put right
- Delete your account yourself from Settings, or ask us to do it for you
- Object to a use you disagree with, or ask us to limit it
- Take your information elsewhere in a form another service can read
Write to [email protected] and tell us which one you want. We don't charge for any of it, and we'll come back to you within one month - if what you've asked for turns out to be a big job we'll say so inside that month and tell you how much longer it will take. If our answer doesn't satisfy you, you can complain to the data protection authority where you live - in the United Kingdom that is the Information Commissioner's Office.
Keeping it safe
What we do, and what we won't promise
We protect what we hold with measures suited to the risk, and we revisit them as the service grows. Only the people who need your details to do their job can reach them, and your card details are never in our hands to begin with.
We won't tell you that any system is impossible to break into, because none is. What we will do is let you know without undue delay if information about you is ever exposed.
Changes, and how to reach us
One address, a real person behind it
If this policy changes we'll update the date below, and where the change matters we'll tell you rather than leave you to notice.
Anything about your information - a copy, a correction, a deletion, or just a question about a line on this page - goes to [email protected].
Last updated 17 August 2026
Still deciding?
The rest of how we work - prices, cancellations, who takes the booking - is on one page.