Privacy policy

Card numbers and security codes are entered directly into our payment provider's hosted fields. They never reach our servers, our logs, our analytics or a support transcript. We store only a provider token and the last four digits where the provider returns them.

Funnel events carry no names, contact details, card data or free-text you typed. Analytics and marketing cookies stay off until you accept them, and you can change that at any time in your account.

A booking reference alone never reveals a booking. Retrieval requires the email used at checkout and a one-time code, and the response is identical whether or not a match exists.