TELETEXT TRAVEL LTD PRIVACY NOTICE

 

1. INTRODUCTION

 

Welcome to Teletext Travel’s privacy notice.

Teletext Travel respects your privacy and is committed to protecting your personal data. This privacy notice explains how we collect, use, disclose, transfer, store and protect your personal data when you visit our website, teletextholidays.co.uk, or when you otherwise provide personal data to us, including by telephone, email, online forms, account registration, booking enquiries, competitions, surveys or other interactions with us.

This privacy notice also explains your privacy rights and how the law protects you.

Please read this privacy notice together with any other privacy notice or fair processing notice we may provide when we collect or process personal data about you. This privacy notice supplements those notices and is not intended to override them.

This website is not intended for children. We only collect personal data relating to children where it is necessary for a travel booking, for example where children are included in your travelling party.

 

1. IMPORTANT INFORMATION AND WHO WE ARE

Controller

Teletext Travel Limited is the controller responsible for your personal data. In this privacy notice, “Teletext Travel”, “we”, “us” or “our” refers to Teletext Travel Limited.

Contact details

If you have any questions about this privacy notice or wish to exercise your legal rights, please contact us at:

Data Protection Manager
Teletext Travel Ltd
166 College Road
Harrow
Middlesex
England
HA1 1BH

Email: [email protected]

You have the right to make a complaint at any time to the Information Commissioner’s Office, the UK supervisory authority for data protection issues. We would, however, appreciate the opportunity to deal with your concerns before you approach the ICO, so please contact us in the first instance.

Changes to this privacy notice

This privacy notice was last updated on 30 June 2026.

It is important that the personal data we hold about you is accurate and up to date. Please tell us if your personal data changes during your relationship with us.

Third-party links

Our website may include links to third-party websites, plug-ins and applications. Clicking those links or enabling those connections may allow third parties to collect or share data about you. We do not control those third-party websites and are not responsible for their privacy notices. When you leave our website, we encourage you to read the privacy notice of every website you visit.

 

1. THE DATA WE COLLECT ABOUT YOU

Personal data means any information about an individual from which that person can be identified. It does not include anonymous data where the individual’s identity has been removed.

We may collect, use, store and transfer different kinds of personal data about you, including:

Identity Data
This includes first name, last name, maiden name, username or similar identifier, marital status, title, date of birth and gender.

Contact Data
This includes billing address, delivery address, email address and telephone numbers.

Financial Data
This includes bank account details, payment card details and other payment information.

Transaction Data
This includes details about payments to and from you and details of travel services, products or services you have purchased from us.

Technical Data
This includes internet protocol address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system, platform and other technology on the devices you use to access our website.

Profile Data
This includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.

Usage Data
This includes information about how you use our website, products and services.

Marketing and Communications Data
This includes your marketing preferences, communication preferences and your preferences in relation to receiving marketing from us and selected third parties.

Booking and Travel Data
This includes information required to arrange, administer or fulfil a travel booking, such as passenger details, destination, accommodation, travel dates, travel requirements, passport or identity document information where required, and information needed by travel suppliers.

Campaign and Attribution Data
This includes advertising campaign identifiers, enquiry source, referral data, tracking identifiers, booking attribution information and information used to measure the effectiveness of our advertising and marketing activity.

Call Recording and Monitoring Data
This includes recordings of telephone calls, call notes, call metadata, call outcomes, information about what was discussed or agreed during a call, and information generated from monitoring or analysing calls.

Aggregated Data

We may also collect, use and share aggregated data, such as statistical or demographic data, for any purpose. Aggregated data may be derived from your personal data but is not considered personal data in law if it does not directly or indirectly identify you. For example, we may aggregate Usage Data to calculate the percentage of users accessing a specific website feature.

If we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we will treat the combined data as personal data and use it in accordance with this privacy notice.

Special categories of personal data

We may collect special categories of personal data where this is necessary to arrange or provide travel services. This may include information about:

• dietary requirements, which may reveal religious or philosophical beliefs;
• health or medical requirements;
• accessibility or mobility requirements;
• race or ethnicity, where this is necessary for a specific travel arrangement or supplier requirement.

We only collect and process special category data where it is necessary and where we have an appropriate lawful basis and condition under data protection law, such as your explicit consent or where the processing is necessary for the establishment, exercise or defence of legal claims.

You are not obliged to provide special category data. However, if the information is necessary to make or fulfil your travel booking, we may be unable to provide or arrange the relevant travel services without it.

Where we rely on your explicit consent to process special category data, you may withdraw that consent at any time. Please note that withdrawing consent may affect our ability, or a travel supplier’s ability, to provide the relevant travel service. Where this means that your booking cannot proceed, cancellation terms may apply in accordance with our Booking Terms and Conditions.

If you fail to provide personal data

Where we need to collect personal data by law, under a contract with you, or to enter you into a contract with a travel supplier, and you fail to provide that data when requested, we may not be able to process, administer or fulfil your booking.

In some cases, we may have to cancel your booking. If this happens, we will notify you and explain the position.

 

1. HOW YOUR PERSONAL DATA IS COLLECTED

We collect personal data in the following ways:

Direct interactions

You may provide Identity, Contact, Financial, Transaction, Booking and Travel, Profile, Marketing and Communications, and special category data when you:

• make or enquire about a travel booking;
• create an account on our website;
• subscribe to our newsletter or other publications;
• request marketing communications;
• enter a competition, promotion or survey;
• give us feedback;
• contact us by post, telephone, email, online form or other communication method.

Automated technologies or interactions

As you interact with our website, we may automatically collect Technical Data, Usage Data, Campaign and Attribution Data about your equipment, browsing actions and patterns. We collect this data using cookies, server logs, pixels, tags and similar technologies.

Please see our Cookie Policy, available from the footer of our website, for further details about the cookies and similar technologies we use and how you can manage your preferences.

Third parties

We may receive personal data about you from third parties, including:

• analytics providers;
• advertising networks and advertising measurement providers;
• payment service providers;
• technology and hosting providers;
• travel suppliers and travel service providers;
• customer service providers;
• fraud prevention and identity verification providers;
• data brokers, aggregators or publicly available sources, where permitted by law.

 

1. HOW WE USE YOUR PERSONAL DATA

We will only use your personal data where the law allows us to. Most commonly, we use your personal data:

• to perform a contract with you;
• to take steps at your request before entering into a contract;
• to enter you into, administer or support a contract with a travel supplier where we act as agent;
• where it is necessary for our legitimate interests, provided your interests and fundamental rights do not override those interests;
• where we need to comply with a legal or regulatory obligation;
• where we have your consent;
• where we have your explicit consent for special category data, where required.

Purposes for which we use your personal data

We may use your personal data for the following purposes:

To register you as a new customer
Data used: Identity Data and Contact Data.
Lawful basis: performance of a contract with you or steps taken before entering into a contract.

To process, administer and deliver your booking
Data used: Identity Data, Contact Data, Financial Data, Transaction Data, Booking and Travel Data, and Marketing and Communications Data.
Lawful basis: performance of a contract with you; steps necessary to arrange a contract with a travel supplier; legitimate interests in managing bookings and recovering debts; legal obligations.

To manage payments, fees and charges
Data used: Identity Data, Contact Data, Financial Data and Transaction Data.
Lawful basis: performance of a contract; legitimate interests in collecting and recovering money owed to us; legal obligations.

To manage our relationship with you
This includes notifying you about changes to our terms or privacy notice, responding to enquiries, handling complaints and asking you to leave a review or take a survey.
Data used: Identity Data, Contact Data, Profile Data, Transaction Data and Marketing and Communications Data.
Lawful basis: performance of a contract; legal obligations; legitimate interests in keeping our records updated, improving our services and understanding customer experience.

To enable you to take part in a prize draw, competition, promotion or survey
Data used: Identity Data, Contact Data, Profile Data, Usage Data and Marketing and Communications Data.
Lawful basis: performance of a contract; legitimate interests in studying how customers use our products and services, developing them and growing our business.

To administer and protect our business and website
This includes troubleshooting, data analysis, testing, system maintenance, support, reporting, hosting, security monitoring and fraud prevention.
Data used: Identity Data, Contact Data and Technical Data.
Lawful basis: legitimate interests in running our business, providing administration and IT services, network security, fraud prevention and business continuity; legal obligations.

To deliver relevant website content and advertisements and measure advertising effectiveness
Data used: Identity Data, Contact Data, Profile Data, Usage Data, Marketing and Communications Data, Technical Data, Campaign and Attribution Data.
Lawful basis: legitimate interests in understanding customer interests, improving our website and marketing strategy, and measuring advertising effectiveness. Where cookies or similar technologies require consent, we will obtain consent in accordance with applicable law.

To use analytics to improve our website, products, services, marketing, customer relationships and experiences
Data used: Technical Data and Usage Data.
Lawful basis: legitimate interests in defining types of customers, keeping our website updated and relevant, developing our business and informing our marketing strategy. Where analytics cookies require consent, we will obtain consent in accordance with applicable law.

To make suggestions and recommendations about goods or services that may interest you
Data used: Identity Data, Contact Data, Technical Data, Usage Data and Profile Data.
Lawful basis: legitimate interests in developing our products and services and growing our business. Where direct marketing consent is required, we will obtain consent in accordance with applicable law.

To establish, exercise or defend legal claims
Data used: Identity Data, Contact Data, Financial Data, Transaction Data, Technical Data, Profile Data, Usage Data and Marketing and Communications Data.
Lawful basis: legitimate interests in protecting and asserting our legal rights, your legal rights and the legal rights of others; legal obligations.

To obtain or maintain insurance coverage, manage risk or obtain professional advice
Data used: Identity Data, Contact Data, Financial Data, Transaction Data and Technical Data.
Lawful basis: legitimate interests in protecting our business against risk and obtaining professional advice.

Advertising attribution and measurement

We may share limited personal data relating to customer enquiries, bookings and purchases with advertising attribution and measurement service providers, including advertising partners, measurement providers, analytics providers and their authorised sub-processors.

Our legitimate interest is to measure campaign performance, understand whether advertising results in customer enquiries or bookings, improve the efficiency and relevance of our marketing activity, and allocate marketing spend effectively.

This processing may enable us to:

• measure the performance and effectiveness of advertising campaigns;
• attribute customer actions, such as enquiries or bookings, to specific advertising activity;
• analyse and report on marketing effectiveness;
• improve the relevance of our marketing and advertising activity.

The information shared may include contact details (such as names, addresses, email addresses and telephone numbers), booking or transaction information, campaign identifiers, tracking identifiers, cookie or device identifiers where applicable, website or application interaction data, IP addresses (where Web Attribution Services are used), and other attribution data necessary to measure the effectiveness of our advertising campaigns. We apply data minimisation principles and only share personal data that is necessary and proportionate for advertising attribution and measurement purposes.

As part of the advertising attribution process, we may provide limited personal data to our advertising attribution and measurement service providers to enable them to match that data with advertising exposure data and other relevant information held within their secure processing environment for the sole purpose of measuring the effectiveness of our advertising campaigns, evaluating campaign performance and producing aggregated analytical reports. The matched dataset will only be processed to provide the agreed attribution and analytical services on our behalf, in accordance with our documented instructions, applicable data protection laws and appropriate contractual, technical and organisational safeguards.

Where appropriate and technically feasible, personal data may be pseudonymised or hashed before disclosure. Where this is not technically feasible for the attribution or measurement service, we will apply appropriate safeguards to ensure that the processing remains necessary, proportionate, secure and limited to the agreed purpose.

For certain advertising attribution and campaign measurement services, we may need to share limited address information, such as postcode and first line of address, where this is necessary to perform household-level campaign matching or to measure the effectiveness of specific advertising activity.

Where data cannot be hashed or pseudonymised before transfer because doing so would prevent the attribution or measurement service from operating effectively, we will ensure that appropriate contractual, technical and organisational safeguards are in place. This includes ensuring that the data is used only for the agreed attribution or campaign measurement purpose, that access is appropriately restricted, that the data is retained only for the period specified in the relevant agreement, and that outputs are provided only in aggregated or anonymised form.

Following the matching process, the matched dataset may be securely hosted by our advertising attribution and measurement service provider solely for the purpose of performing the agreed attribution and analytical services. The matched dataset will only be processed in accordance with our documented contractual instructions, applicable data protection laws and appropriate technical and organisational security measures.

These service providers process personal data only for attribution, measurement, analytics and reporting services. Where they act as processors, they process personal data only on our documented instructions and are subject to written contractual obligations requiring confidentiality, appropriate security measures and compliance with applicable data protection law.

We will not permit advertising attribution or measurement providers to use this data for their own marketing, profiling, enrichment, audience creation or any unrelated purpose.

In some cases, this processing may involve limited profiling to associate advertising interactions with later customer actions. We do not use this processing to make automated decisions that produce legal or similarly significant effects on individuals.

You have the right to object to processing where we rely on legitimate interests, including processing for advertising attribution and measurement. You can exercise this right using the contact details in this privacy notice.

Marketing

We may use your Identity Data, Contact Data, Technical Data, Usage Data and Profile Data to decide which products, services and offers may be relevant to you.

You may receive marketing communications from us if you have requested information from us, purchased services from us, registered an interest in our services, or otherwise provided your details to us, and you have not opted out of receiving marketing.

Where we are required by law to obtain your consent for electronic marketing, cookies or similar technologies, we will do so.

Third-party marketing

We will obtain your express opt-in consent before sharing your personal data with any third party for that third party’s own direct marketing purposes.

Opting out

You can ask us to stop sending you marketing messages at any time by following the opt-out or unsubscribe links in any marketing message sent to you, by updating your preferences where available, or by contacting us using the details in this privacy notice.

Where you opt out of marketing, we may still process personal data provided to us as a result of a booking, purchase, service experience or other transaction.

Cookies

You can set your browser to refuse all or some browser cookies or to alert you when websites set or access cookies. Some parts of our website may become inaccessible or may not function properly if you disable or refuse cookies.

Where required by law, we will obtain your consent before placing non-essential cookies or similar technologies on your device. For more information, please see our Cookie Policy, available from the footer of our website.

Change of purpose

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another compatible reason.

If we need to use your personal data for an unrelated purpose, we will notify you and explain the lawful basis that allows us to do so.

 

1. DISCLOSURES OF YOUR PERSONAL DATA

We may share your personal data with the following parties where necessary for the purposes set out in this privacy notice:

Internal parties
Other companies within our group, where applicable, for business administration, reporting, customer service, compliance or operational purposes.

External parties
This may include:

• travel suppliers and service providers, including airlines, hotels, accommodation providers, transfer providers, tour operators and destination management companies;
• payment processing providers;
• IT, hosting, software, system administration and customer support providers;
• advertising attribution and campaign measurement providers;
• advertising partners, media partners, analytics providers and authorised sub-processors;
• professional advisers, including lawyers, bankers, auditors, accountants and insurers;
• fraud prevention, identity verification and security providers;
• HM Revenue & Customs, regulators, government bodies, law enforcement agencies, border control authorities and other authorities where required by law or where necessary for travel, security, immigration, anti-terrorism or regulatory purposes;
• third parties involved in a business sale, transfer, merger, restructuring or acquisition.

We require third parties to respect the security of your personal data and to treat it in accordance with the law.

Where our service providers act as processors, we do not allow them to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions.

 

1. INTERNATIONAL TRANSFERS

Some of our external third parties may be based outside the UK. Their processing of your personal data may involve a transfer of personal data outside the UK.

Where you request a booking for travel arrangements that are located outside the UK, or that are to be fulfilled outside the UK, we may need to transfer your personal data to travel suppliers and service providers in the relevant destination so they can provide the travel services you have booked.

Where we transfer personal data outside the UK, we will ensure that appropriate safeguards are used where required by data protection law. These may include:

• transferring personal data to a country, territory or organisation that has been recognised as providing an adequate level of protection;
• using the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or other approved contractual safeguards;
• carrying out a transfer risk assessment where required;
• relying on a permitted derogation, such as where the transfer is necessary for the performance of a contract with you or for pre-contractual steps taken at your request.

Please contact us if you would like further information about the transfer mechanism used for a particular transfer of your personal data.

 

1. DATA SECURITY

We have put in place appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, accessed, altered or disclosed in an unauthorised way.

We limit access to your personal data to employees, agents, contractors and third parties who have a business need to know. They will only process your personal data on our instructions, unless they are legally permitted or required to act otherwise, and they are subject to a duty of confidentiality.

We have procedures to deal with suspected personal data breaches and will notify you and any applicable regulator where we are legally required to do so.

 

1. DATA RETENTION

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes for which we collected it, including for legal, regulatory, tax, accounting, reporting, complaint-handling, insurance and legal claim purposes.

To determine the appropriate retention period, we consider:

• the amount, nature and sensitivity of the personal data;
• the potential risk of harm from unauthorised use or disclosure;
• the purposes for which we process the data;
• whether we can achieve those purposes through other means;
• applicable legal, regulatory, tax, accounting or reporting requirements.

If you make a booking with us, we will generally keep your booking information for six years from your return date of travel in the case of adults. For children travelling on a booking, we may retain relevant information for six years from the date of their 18th birthday where necessary to defend legal claims.

We may also be required by law to keep basic customer information, including Contact Data, Identity Data, Financial Data and Transaction Data, for tax, accounting or regulatory purposes.

In some circumstances, you can ask us to delete your data. Please see “Your legal rights” below.

In some circumstances, we may anonymise your personal data so that it can no longer be associated with you. We may use anonymised information indefinitely without further notice to you.

 

1. YOUR LEGAL RIGHTS

Under data protection laws, you may have the following rights in relation to your personal data:

Request access
You can request a copy of the personal data we hold about you and check that we are lawfully processing it.

Request correction
You can ask us to correct incomplete or inaccurate personal data we hold about you.

Request erasure
You can ask us to delete or remove personal data where there is no good reason for us continuing to process it. This right is subject to certain exceptions.

Object to processing
You can object to our processing of your personal data where we rely on legitimate interests and there is something about your particular situation that makes you want to object. You also have the right to object to processing for direct marketing purposes.

Request restriction of processing
You can ask us to suspend the processing of your personal data in certain circumstances, including where you want us to establish the data’s accuracy, where our use of the data is unlawful but you do not want us to erase it, where you need us to hold the data for legal claims, or where you have objected to our use of the data and we need to verify whether we have overriding legitimate grounds.

Request transfer
You can ask us to provide your personal data to you or to a third party in a structured, commonly used, machine-readable format. This right only applies to automated information that you initially provided to us where we process it based on consent or contract.

Withdraw consent
Where we rely on consent to process your personal data, you may withdraw that consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.

How to exercise your rights

If you wish to exercise any of your rights, please email [email protected] or write to:

Data Protection Manager
Teletext Travel Ltd
166 College Road
Harrow
Middlesex
England
HA1 1BH

No fee usually required

You will not usually have to pay a fee to access your personal data or exercise your rights. However, we may charge a reasonable fee or refuse to comply with your request if it is clearly unfounded, repetitive or excessive.

What we may need from you

We may need to request information from you to confirm your identity and ensure your right to access personal data or exercise your other rights. This is a security measure to ensure personal data is not disclosed to someone who has no right to receive it.

Time limit to respond

We try to respond to legitimate requests within one month. Occasionally, it may take longer if your request is complex or you have made several requests. In that case, we will notify you and keep you updated.

 

1. GLOSSARY

Lawful basis

Consent
This means you have given clear consent for us to process your personal data for a specific purpose.

Explicit consent
This means you have given a clear, specific and express statement of consent, which may be required for certain special category data processing.

Legitimate interests
This means our interest in conducting and managing our business to provide you with a good, secure and relevant service. We consider and balance any potential impact on you and your rights before processing your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by your rights and freedoms, unless we have your consent or are otherwise required or permitted by law.

Performance of contract
This means processing your personal data where it is necessary for the performance of a contract to which you are a party, or to take steps at your request before entering into such a contract.

Legal or regulatory obligation
This means processing your personal data where it is necessary for compliance with a legal or regulatory obligation that applies to us.

Third parties

External third parties may include:

• travel suppliers and service providers;
• payment processing companies;
• IT, hosting and system administration providers;
• advertising attribution and campaign measurement providers;
• advertising partners, media partners, analytics providers and authorised sub-processors;
• professional advisers, including lawyers, bankers, auditors, accountants and insurers;
• HM Revenue & Customs, regulators, public authorities and law enforcement agencies;
• third-party service providers who help us understand customer behaviour, improve our website or improve our products and services;
• regulatory authorities where disclosure is necessary for immigration, border control, security, anti-terrorism, legal, regulatory or public-interest purposes.

Last updated: 30 June 2026