Privacy Policy
Last updated: 7 September 2026
TravelShifu works without an account. Optional Stay22 and impact.com affiliate functionality and Google Analytics remain off unless you consent. This notice explains the technical, preference, contact, analytics and affiliate-related data that may be processed.
Who is responsible for my data?
TravelShifu is owned and operated by Elite Digital AI Solutions Ltd, registered in England & Wales, Company No. 17250017. Elite Digital AI Solutions Ltd is the controller for personal data processed for TravelShifu. Contact: hello@travelshifu.com.
What is processed and why?
| Activity | Data | Purpose | UK GDPR basis |
|---|---|---|---|
| My Trip workspace | User-entered plans, quotes, notes and reminders; kept in memory unless you explicitly save a browser copy | Provide the requested private planner; no cloud sync or intentional submission of inputs to TravelShifu | Requested local functionality; no analytics or affiliate scripts are loaded on the workspace |
| Site requests | IP address, request time, requested URL and technical security data handled by hosting infrastructure | Deliver and secure the site; diagnose faults | Legitimate interests and legal obligations, where applicable |
| Device preferences | Language, currency, dismissed notices and interface state stored locally on your device | Remember choices you request | PECR exemption for necessary storage; related processing as necessary to provide the requested feature |
| Messages and privacy requests | Contact details and the content you send us | Reply, investigate and keep an appropriate record | Legitimate interests, legal obligations and establishment or defence of legal claims |
| Newsletter, if submitted | Email address and subscription record | Send the communications described when you subscribe and manage opt-out | Consent; necessary suppression records may be retained to honour opt-out |
| Affiliate referrals | A labelled outbound URL may contain an affiliate parameter; the destination may receive normal referral data | Allow the partner or network to attribute a qualifying transaction | Processing on the destination is governed by that organisation’s notices |
| Optional Stay22 functionality | Online identifiers, referral details, page or link interaction data and approximate location inferred from an IP address may be processed by Stay22 | Convert compatible accommodation links, localise the booking destination and attribute referrals | Consent before Stay22 loads on a TravelShifu page; Stay22’s own notice describes its further processing |
| Optional impact.com publisher tag | Page URL, partner, campaign, advertisement and version identifiers, session and UUID data and affiliate-link interactions may be processed by impact.com | Convert eligible direct advertiser links and measure affiliate impressions and referrals | Consent before impact.com loads on a TravelShifu page; impact.com’s own notice describes its further processing |
| Optional Google Analytics | Page views, sessions, approximate location, browser and device information and pseudonymous identifiers may be processed by Google | Understand aggregate site use and improve content and navigation | Consent before the Google tag loads; analytics can be allowed or blocked independently |
My Trip device storage
My Trip does not submit your entries to us. Saving is manual, keeps one unencrypted copy under travelshifu:my-trip:v1, and lasts until you remove it or clear browser data. Exports remain in your own files. Other users of your browser profile and scripts with access to the same site origin may be able to read local storage: do not enter sensitive records. We suppress optional analytics and affiliate loaders on the workspace and when a saved My Trip copy is detected. Opening linked booking providers leaves this workspace and their notices apply. Calendar files require your own import and notification settings; we do not run reminder delivery.
What is not collected on TravelShifu pages?
- No TravelShifu user accounts, passwords or payment-card details.
- No first-party behavioural advertising or cross-site tracking.
- No analytics tag loads unless Google Analytics is separately allowed in Privacy settings.
- Google advertising storage and advertising-personalisation signals are disabled in this implementation.
- Calculator inputs are designed to run in the browser and are not intentionally submitted to us.
Service providers and international transfers
Hosting, security, email or other suppliers may process data only to provide their service to us and under appropriate contractual terms. If you consent to optional affiliate functionality, Stay22 Technologies Inc. may process data for link conversion, localisation and referral attribution under its privacy notice, while Impact Tech, Inc. may process data for eligible-link conversion and affiliate impression or referral measurement under its privacy policy. If you separately consent to analytics, Google LLC may process page and device information under Google’s privacy policy. Booking providers and affiliate networks may act as separate controllers for activity on their services. If UK personal data is transferred to a country without UK adequacy regulations, the responsible organisation must use an available lawful transfer mechanism where required. You may ask us about the safeguard relevant to processing for which TravelShifu is responsible.
How long is data retained?
We keep personal data only for as long as needed for the stated purpose, security, legal compliance and dispute handling. Subscription data is kept while a subscription is active; a minimal suppression record may remain after opt-out so we do not email that address again. Contact and complaint records are reviewed against the relevant legal and operational need. Device-local preferences remain until you clear them or use the available reset control.
What are my rights?
Depending on the circumstances, UK and EEA data-protection law may give you rights of access, correction, erasure, restriction, portability and objection, plus the right to withdraw consent without affecting earlier lawful processing. Email hello@travelshifu.com. We may need proportionate information to verify identity; do not send identity documents unless requested through a secure method.
How do I make a privacy complaint?
Use our privacy complaints procedure. We provide a clear route to complain, acknowledge a data-protection complaint within 30 days, investigate it without undue delay, keep you appropriately informed and explain the outcome. You may also complain to the UK Information Commissioner’s Office or another competent supervisory authority.
Children
TravelShifu is a general travel publication and is not directed at children. If you believe a child has provided personal data to us inappropriately, contact us so we can investigate and take suitable action.
Changes to this notice
We update this notice when our processing changes and show the effective date above. If a change requires consent, we will request it before beginning that processing; continued browsing is not treated as consent.
Related: Cookie policy · Affiliate disclosure · Privacy complaints