This policy explains what information HolidayUnder100 (holidayunder100.co.uk) collects when you use the site, why, who we share it with and the choices you have. It lists everything the site actually does.
In short: we count visits with Google Analytics to improve our guides (you can turn this off), Booking.com boxes load only if you choose to load them, and messages you send us are used only to reply. We don’t sell anyone’s information. Change your choices at any time with Cookie settings.
Who we are
HolidayUnder100 is an independent travel guide run from the UK. HolidayUnder100 is the “controller” of the personal information described here, which means we decide how it is used. You can reach us through our contact form.
We don’t sell holidays and we don’t take bookings or payments. When you book through a link on our site, you book with that company, and its own privacy policy covers what you give it. Our How we make money page explains how the site is paid for.
What we collect and why
When you visit any page
Our web host keeps standard server logs: your IP address, the page you asked for, the time, your browser and the page that sent you. We use them to keep the site running and secure, and they are deleted after 30 days. Our lawful basis is our legitimate interest in running a secure website.
Visitor statistics (Google Analytics)
We use Google Analytics to count visits and see which guides are read, how people find them and where pages are slow, so we can improve the site. It sets two cookies (listed below) and collects information such as the pages you view, how long you stay, your type of device and browser, and your approximate location (town or region). Google Analytics doesn’t store your IP address.
We use it only for statistics about our own site. Its advertising features are switched off, Google doesn’t use our statistics for its own purposes, and the detailed data is deleted after 2 months, so only totals remain. You can turn statistics off at any time with Cookie settings, here or at the bottom of every page. Our lawful basis is our legitimate interest in understanding and improving our guides.
When you contact us
If you use our contact form, we receive your name, email address, subject and message. The form doesn’t store your message on the website: it is sent to our email inbox (Microsoft Outlook) so that we can reply. We keep the conversation for 12 months after it ends and then delete it, unless we need it longer to deal with a complaint or a legal claim. Our lawful basis is our legitimate interest in answering you. Google Analytics records that a form was sent, but not what you wrote.
We don’t have visitor accounts, comments or a newsletter, we don’t show display adverts, and we don’t sell or rent anyone’s information.
Affiliate links and booking boxes
Some links and boxes on our site are marked “Ad”: they are affiliate links, and we earn a commission if you book through them. Our partners are Booking.com, Amazon and 12Go.
- Links. When you click an affiliate link, you leave our site. The company you visit records that you came from us, usually with its own cookies on its own website, so that we can be paid. We never see your booking, your payment details or anything else you give them.
- Booking.com search and deal boxes are provided by Booking.com and run inside our pages. Loading one lets Booking.com set its own cookie on your device and receive your IP address and browser details. So we load these boxes only when you choose to; until then you see a plain link to Booking.com. Our lawful basis is your consent, and you can change your choice with Cookie settings.
- The 12Go ticket table on some pages is loaded from 12Go’s servers, which receive your IP address and browser details. It set no cookies when we checked.
Each partner’s own privacy policy covers what it collects: Booking.com, Amazon and 12Go.
Maps
Some hotel pages show a Google Maps map. It is loaded from Google, which receives your IP address and browser details. Our fonts are stored on our own site, so they don’t involve anyone else.
Cookies
If you turn statistics off, we stop Google Analytics from using its cookies; you can also delete existing cookies in your browser settings. People who sign in to manage the site also get WordPress’s sign-in cookies; visitors never do.
Who we share information with
We use a small number of service providers, who handle information for us and only on our instructions:
- GoDaddy: web hosting and server logs;
- Google: Google Analytics visitor statistics;
- Microsoft: the email inbox where contact-form messages arrive.
Booking.com, Amazon and 12Go decide for themselves how they use what they collect when you use their links or boxes, under their own privacy policies. We may also share information when the law requires it.
Information sent outside the UK
Some of these providers are based in, or use servers in, the United States. Where information leaves the UK, it is protected by safeguards recognised under UK law, such as the UK–US “data bridge” or the UK’s approved contract clauses.
Your rights
You have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct it, or to delete it;
- ask us to limit how we use it, or object to our using it (you can turn statistics off yourself with Cookie settings);
- withdraw your consent at any time, where we rely on it;
- ask for information you gave us in a format you can take elsewhere.
To use any of these rights, contact us through our contact form. We’ll reply within one month. We don’t make automated decisions about you.
Complaints
If you’re unhappy with how we’ve handled your information, please tell us first through our contact form. We’ll acknowledge your complaint within 30 days and tell you what we’re doing about it. You can also complain to the UK’s data protection regulator, the Information Commissioner’s Office: ico.org.uk/make-a-complaint or 0303 123 1113.
Children
Our site is written for adults planning holidays. We don’t knowingly collect information from children.
Changes to this policy
We’ll update this page when what we collect changes, and change the date below.
Last updated: 27 October 2026.