Last updated: 7 November 2026 · Effective from publication
1. Scope and contact
This notice explains your rights where EU GDPR or UK data-protection law applies to AllTripThings. Read it with our Privacy policy. Controller: HANKATONG LTD, Office 10779, 182–184 High Street North, London E6 2JA, United Kingdom. Privacy contact: cs@alltripthings.com. This notice is not a third-party compliance certification.
2. Purposes and lawful grounds
Account access, orders, payments and fulfilment use information needed for the contract. Required financial records are kept under legal obligations. Security, fraud prevention and legal claims may rely on legitimate interests subject to your rights. Optional uses requiring consent must be explained when consent is requested; you can withdraw that consent without affecting earlier lawful processing.
3. Your rights
Where applicable, you may ask to access or correct your information, obtain a portable copy, request erasure or restriction, or object to processing. You can withdraw consent and object to direct marketing. Rights are subject to legal conditions; for example, transaction records may need to be retained even after an account is closed.
4. Make a request
Email cs@alltripthings.com with the subject “Privacy request — AllTripThings” and describe what you need. Use your registered email if possible. We may request proportionate verification, but never ask you to email your password or full card details. Requests are generally free. We will respond within the applicable statutory period and explain any lawful extension or restriction.
5. Transfers and automated processing
Payment and fulfilment involve service providers in different countries. See the Privacy policy for recipients, retention and transfer information. Automated checks help process payments and orders and prevent fraud. Contact support if you believe an automated outcome is wrong; applicable rights to explanation or human review remain available.
6. Complaints
You can complain to the UK Information Commissioner’s Office or the supervisory authority in the EEA where you live, work or believe an infringement occurred. Contacting us first can help resolve an issue but does not prevent a regulatory complaint. The European Commission’s rights guide explains GDPR rights.
Questions? Contact cs@alltripthings.com.
