Privacy notice.

Last updated: 9 October 2026

We use the details you choose to share to respond to enquiries and provide the support you request. This notice describes the website setup and should be updated if our services, tools or data practices change.

1. Who is responsible?

Website contact: GoBuddy Travels, 128 City Road, London, United Kingdom, EC1V 2NX. Email: info@gobuddytravels.com. Phone: +44 7450 302490. If you need the full legal entity details associated with a proposed booking or service, please request them before proceeding.

2. Information we collect

If you submit an enquiry, we collect the details you choose to provide: name, email, optional telephone number, service requested, destination, intended travel dates, number of travellers, indicative budget and message. We also store the enquiry status and any internal follow-up notes entered by authorised staff. The form includes a minimal anti-abuse rate-limit record using a one-way hash of the email address; raw IP addresses are not stored by our application code.

Please do not submit passport numbers, scans of identity documents, bank statements, payment-card information or other sensitive documents through the website form.

3. Why we use it

We use enquiry details to respond to your request, understand the service you are asking about, maintain relevant business records, protect the service from spam and administer follow-up. We do not sell enquiry information. GoBuddy must determine and document the appropriate lawful basis for each use before launch, ordinarily considering steps requested before a potential service contract, legitimate interests and any other applicable basis.

4. Where information is stored and sent

Enquiries are stored in a Cloudflare D1 database associated with the website. If configured, email notifications and acknowledgements are sent through Resend. Cloudflare, Resend and the business's email provider may process technical or contact data to operate their services. Review each provider's terms, data-processing arrangements and transfer safeguards before launch. The business may separately use an email provider to receive direct messages.

5. Retention and access

Access to website enquiries is restricted by an admin password and time-limited session token. The business should set a retention period based on actual needs, delete enquiries when no longer required, and review who has administrator access. The initial website does not currently implement an automatic lead-retention deletion schedule; the administrator must review and remove records when appropriate.

6. Your rights

Depending on the circumstances, UK data protection law may give you rights to access, correct, erase, restrict or object to processing, and to complain to the Information Commissioner's Office (ICO). Contact info@gobuddytravels.com to make a request. You may also contact the ICO at ico.org.uk.

7. Cookies, analytics and external links

The starter website does not intentionally set advertising or analytics cookies. The site links to third-party services such as WhatsApp, Google Maps and the European Commission. If optional analytics, embedded media, booking tools or marketing pixels are added later, this notice and any required consent mechanism must be reviewed before enabling them. Remote travel photographs are loaded from Unsplash-hosted image URLs, which can make a request to that image provider when a page loads.

8. Security

We use access controls, server-side validation and abuse-prevention checks. No online service can promise perfect security. Do not send sensitive identity information through the general enquiry form, and notify the business promptly if you believe your enquiry details have been exposed.

9. Changes

This notice may be updated to reflect the live services, providers and business practices. The date at the top should be updated when material changes are made.