Legal
Privacy & Cookie Policy
We collect only what we need to run your booking and improve your experience — and you stay in control of optional cookies.
What we collect
Booking data — your name, contact details and trip information, used solely to confirm and deliver your excursion or transfer.
First-party analytics — if you accept the Analytics cookie, we record anonymous events (pages and excursions viewed) tied to a random id stored in the to_vid cookie. We use this to understand what travellers are looking for and to recommend relevant trips. It only becomes linked to you if you make a booking with the same browser.
Cookie categories
Necessary cookies are always on — the site cannot work without them. Analytics powers our own first-party measurement and recommendations. Marketing allows third-party advertising pixels (Meta, Google) to store and read cookies on your device. Decline it and the Meta pixel is never loaded at all, while Google's tag is held in a cookieless mode that stores nothing and cannot identify you. You can accept or decline Analytics and Marketing independently, and change your mind any time.
| Cookie | Category | Purpose | Retention |
|---|---|---|---|
| to_session / to_partner | Necessary | Keeps operators and partners signed in to the dashboard. | 7 days |
| to_consent | Necessary | Stores your cookie choices so we don't ask again. | 180 days |
| to_attr | Necessary | Remembers how you reached us (campaign link) so we can attribute your booking. | 90 days |
| to_vid | Analytics | Anonymous first-party id used to measure visits and personalise recommendations. | 365 days |
| Meta Pixel / GA4 / Google Ads | Marketing | Third-party advertising & measurement pixels — they record which advertisement led to a booking. The Meta pixel is loaded only if you accept Marketing. Google's tag is loaded for everyone but, until you accept, runs in a cookieless mode that writes and reads nothing on your device. | Per provider |
Data shared with advertising partners
If — and only if — you accept Marketing cookies, the following is sent to Meta from our server at the moment a booking is placed, so that we can tell which advertisement brought you to us:
- the booking's total, its currency and the excursion booked;
- a one-way hashed (SHA-256) form of the email address you entered; and
- your IP address and browser user-agent, which Meta uses to match the booking to the advertisement you clicked.
The hash cannot be reversed to recover your address. It exists so that a booking can be matched to an advertisement click and nothing else. This is Meta's “Conversions API”, and it is the only circumstance in which your email address is used for an advertising purpose. We do not sell it, we do not share it with anyone else for advertising, and we do not use it to build a profile of you.
To Google Ads we send only the booking's total, its currency and its reference number. No email address, no name and no telephone number is sent to Google.
Decline Marketing and none of the personal data above is sent. The Meta pixel is not loaded and our server sends Meta nothing at all. Google's tag stays in its cookieless mode, in which it may record that an anonymous booking happened and what it was worth, but cannot store an identifier, recognise your device or connect the booking to you. Your booking works exactly the same way either way.
How long we keep analytics data
First-party analytics events are automatically deleted after a retention window set by the operator (365 days by default). Booking records are retained for accounting and legal obligations.
Your rights
You can request a copy of your data or its deletion at any time by emailing travel-out@outlook.com. We can export everything we hold about you as a file, and erase your browsing and analytics history on request.
Manage your cookies
Update your Analytics and Marketing choices whenever you like: