Privacy portal

Secret Escapes takes your privacy seriously and we want to ensure that your data is secure. Below is a brief summary of what data we collect, how we use it and how you can control it. If you would like more information and more details, this can be found in our privacy notice. We will collect personal information from you when you sign up to use the site and when you make a booking. This includes your name, email address, and phone number, and in some cases your postal address, date of birth and passport number.

We use this information to allow us to (i) create your account (ii) keep you up to date with deals we think you want to hear about and (iii) track your activity on the website to allow us to tailor your site experience;
We primarily share information with third parties to fulfil any bookings you make and with our technical providers that allow us to send emails about our deals and to analyse website behaviour;
As part of the Secret Escapes service, we send you regular email updates with our best deals, tailored to suit your preferences. If you would prefer not to receive these emails, or reduce their frequency, you can change your preferences at any time on signing up or in the account section of the website.

You have various rights under data protection law, including the right to request access to the personal data we hold on you, and a right to request that we delete all such personal data. You can delete your account in the account section, but for all other requests please contact customersupport@secretescapes.com.

Privacy statement

1. Secret Escapes' approach to privacy

The website and app that is linked to this privacy notice is operated by Secret Escapes Limited.

For the purposes of the applicable data protection legislation (including the General Data Protection Regulation), The controller of your personal data is Secret Escapes Limited, a company registered in England under company number 07026107 with its registered office at 7th Floor, 88 Kingsway, London, WC2B 6AA, United Kingdom (referred to in this privacy notice as "we", "us" or "Secret Escapes").

This privacy notice applies to anyone who visits our website or mobile application, registers to become a member of Secret Escapes or books a trip or hotel via Secret Escapes. (“you” or “members”)

The purpose of this privacy notice is to help you understand how we use your personal data, who we share it with and what rights you have relating to your personal data.

If you have any questions about this privacy notice or how we handle your personal data, please contact our Data Protection Officer (DPO) at Secret Escapes Limited, 7th Floor, 88 Kingsway, London, WC2B 6AA, United Kingdom, and at dpo@secretescapes.com

You should also be aware that we use cookies to store and access information whilst providing access to our site or our app. You can find out more about our use of cookies in our cookie statement.

2. How we collect personal data relating to you

We collect personal information about you when you voluntarily submit information directly to us, our site or our app. This can include information you provide to us when you apply to become a member, complete a form, purchase any breaks using our platform, correspond with us, via our recorded call line, email or Al concierge chatbot, including our voice bot agent, subscribe to our mailing lists, newsletters or other forms of marketing communications, respond to a survey, enter a promotion or use some other feature of our website or app.

When we speak with you, via our customer service phoneline, these calls will be recorded for quality and training purposes or for our teams to investigate any conversational disputes at a later date. (Legitimate interests/consent).

We also collect personal information from you indirectly, such as information about the pages you look at on our site or our app or the device you use to view our site or connect to our app with.

Information provided by other users

If you are the lead name on a booking (the "Lead Name"), you confirm that you are authorised to provide the personal data of all individuals included in the booking. By providing their personal data, you confirm that each of these individuals has agreed to you acting on their behalf and understands that their data will be processed in accordance with this Privacy Policy.

Where you are provided with the option to log-in using a social network, for example using Facebook, we will not be provided with your password or other account login details for those accounts. We will only be provided with your email and name. We will not post to your social network or to your friends, followers or contacts without your consent.

3. What personal data do we collect about you

The below sets out the:

a) the general categories of personal data that we collect and process, including any special category data that we collect which is more sensitive in nature and therefore require a higher level of protection;
b) the purposes for which we may process personal data; and
c)the legal bases of the processing of your personal data. This will either be where you have provided consent, it is necessary for Secret Escapes to enter into a contract with you, it is within Secret Escapes legitimate interests or Secret Escapes has a legal obligation to process the personal data.

At various places on our site or our app you will be requested to enter certain personal information in order for Secret Escapes to meet its legal obligations or to enter into a contract with you. Personal information that must be provided in order to avail of the booking services offered will be indicated at the time of collection. Other personal information that you are not required to provide in order to receive our services may be voluntarily given and you are free to decide not to give such personal information.

Contact details: your name, your email address, your telephone number and physical addresses associated with your account or any bookings you place using our service.

To allow Secret Escapes to:
1. facilitate your bookings, make contact regarding booking queries or provide any relevant information to you relating to your trip (Contractual necessity);
2. send you direct marketing and exclusive offers relating Secret Escapes (Consent);
3. send members who have booked a trip/hotel with us direct marketing and exclusive offers relating Secret Escapes (Legitimate interests);
4. send members details of relevant excursions relating to a booking (Legitimate interests);
5. administer our refer a friend scheme allow you to receive your entitled reward via email and detect any misuse of the service (Legitimate interests);
6. facilitate competitions and notify a prize winner (Contractual necessity);
7. to contact you, via our recorded phoneline, if you are experience issues booking your trip via the website or app (Contractual necessity); or
8. comply with any requests required by law, such as requests by governments or law enforcement authorities conducting an investigation (Legal obligation).

Booking information of all those attending the break: passport numbers, travel assistance requirements, dietary requirements, religious beliefs.

To allow Secret Escapes to:
1. arrange additional assistance for your trip, such as arranging a wheelchair at an airport or a ground level room (Contractual necessity);
2. assist you with providing advanced passenger information for flights if requested (Consent);
3. provide details to our hotels regarding dietary requirements or religious requests such access to prayer rooms on your behalf (Consent);or
4. comply with any requests required by law, such as requests by governments or law enforcement authorities conducting an investigation (Legal obligation).

Comments and opinions: your personal comments and opinions of Secret Escapes and the travel sector, this is provided when you contact anyone at Secret Escapes, enter a competition, provide public feedback via social media or review platforms or respond to surveys.

To allow Secret Escapes to:
1. understand our member’s needs and requirements and improve our services and member experience and resolve where required (Legitimate interests).

Payment and transaction information: trips booked, upcoming trips and payment method (we do not store your full card details for security purposes).

To allow Secret Escapes to:
1. Answer any questions you may have regarding a booking or payment (Contractual necessity);
2. Assist with any refund or cancellation queries (Contractual necessity);
3. Use your transaction information and history to determine and provide travel offers that may be of interest to you and send you marketing in accordance with your marketing preferences (Consent); or
4. comply with any requests required by law, such as requests by governments or law enforcement authorities conducting an investigation (Legal obligation).

Website and app login details: Where you create an account with us, we will hold your username and password details.

To allow Secret Escapes to:
1. Keep your account secure (Legitimate interests);
2. Monitor use of our site or our app for the purposes of detecting and preventing fraud or crime (Legitimate interests).

Information about how you use and connect to our site or our app: We collect information about how you use our site or our app such as the pages you view on our site or our app, the time you access our site or our app and how long you use it for, the website from where you came to our site or our app or go to after leaving our site or our app and any selections and choices you make when using our site, our app or via our Al concierge chatbot.

This allows Secret Escapes to:
1. Monitor use of our site or our app for the purposes of detecting and preventing fraud or crime (Legitimate interests);
2. To be provide you with relevant hotel and holidays based on your search requirement (Contractual necessity);
Use information about how you use and connect to our site, chatbots and our app to optimise your experience of our site or our app on your device, to determine offers that may be of interest to you for marketing purposes and to assess the success of our marketing campaigns (Legitimate Interests); and Use your personal information help us develop new products and services (Legitimate interests).

Where you are provided with the option to log-in using a social network, for example using Facebook, we will not be provided with your password or other account login details for those accounts. We will only be provided with your email and name. We will not post to your social network or to your friends, followers or contacts without your consent.

Information about your location: Other than information you choose to provide to us; we do not collect information about your precise location. However, your device's IP address may help us determine an approximate location

This allows Secret Escapes to:
1. Use an approximate location to ensure content on our site is relevant to the area, city, state or country you are using your device in (Legitimate interests); and
2. Identify your location for the purposes of tailoring travel information (including hotels and recommended airports) to you (Consent).

We also collect information about the computer, tablet, smartphone or other electronic device you use to connect to our site or our app. This information can include details about the type of device, unique device identifying numbers, operating systems, browsers and applications connected to our site or our app through the device, your Internet service provider or mobile network, your IP address and your device's telephone number (if it has one). This allows Secret Escapes to:

1. Monitor the use of our website or our app for the purpose of preventing and detecting crime, e.g., fraud prevention (Legitimate interests);
2. Improve our website and app information so that we can optimise your experience with our website or our app on your device, in order to identify offers that may be of interest to you, and to evaluate the success of our marketing campaigns (Consent); and Developing new products and services (Legitimate interests).

Typically, the information we collect about how you use or connect to our site is associated with your device and not you as a named individual. However, if you are logged into a registered account you have with us this information may also be associated with you directly.

Anonymised data: We may anonymise and aggregate any of the information we collect (so that it does not directly identify you). We may use anonymised information for purposes that include testing our IT systems, research, data analysis, improving our site and developing new products and features.

All personal information: In addition, we will use all the personal information we collect (and set out above) to:
1. To ensure the security and integrity of our services. We monitor the use of our website and app to prevent and detect criminal activity, such as fraud (Legitimate interests);
2. To improve, optimise, and personalise our services and marketing. We analyse usage to improve our website and app, identify relevant offers for you, and measure the effectiveness of our marketing (Consent).
3. To innovate and grow our business. We use information to help us develop new products and services that meet our customers' needs (Legitimate interests).

4. Information we share with third parties

We will share your personal data with other companies in order for them to fulfil services for us and to ensure that you receive a seamless travel booking experience

The categories of third parties with whom we will share your personal data with includes:

a) Secret Escapes Group of companies: our subsidiaries (i.e. any organisation we own or control) or our holding company or ultimate holding company (i.e. any organisation that owns or controls us) and any subsidiaries they own. These companies will only use your personal information in the same way as we can under this privacy notice;
b) Hotel and travel operators;
c)Payment providers;
d) Postal couriers;
e) Outsourced customer service centre;
f) IT support services;
g) Online booking platforms;
h) Specialist search engines to assist our AI agents;
i) Core CRM system and database provider;
j) Website and analytics partners;
k) Third party advertisers;
l) Refer a friend provider;
m) Professional advisors, (lawyers, accountants and claims management); and
n) Potential purchasers of some or all of our business or relating to a corporate re-structuring.

We may provide other third parties with aggregate statistical information and analytics about users of our site or our app, but we will make sure no one can be identified from this information before we disclose it.

We partner with Epsilon to provide you with personalised advertising and content. Epsilon may use first- and third-party cookies and other techniques to recognise your browser and collect information about your web browsing activity when visiting this website. You may read more about Epsilon’s use of cookies and other similar technologies by visiting this link. Such cookies and techniques collect personal data (e.g., information about the browser or device you are using, including browser type, browsing activity, cookie ids, IP-addresses and transactions made). We also provide Epsilon with other information about you, such as name, address and email for the same purpose. Please contact us if you no longer want us to share such information. Detailed information about Epsilon’s processing can be found in Epsilon’s privacy policy here. You may visit the European Interactive Digital Advertising Alliance here to learn more about personalised interest-based advertising, and to opt-out of receiving the same from their respective members. You can also visit Epsilon’s data subject request tool, available here.

Sharing personal data with law enforcement and other third parties for legal reasons

We will share your personal data where there is a legal obligation to so or to whom we need to disclose your personal information to protect our rights, property or safety or to protect the rights, property or safety of others. For example, we may provide information to the United States Customs and Border Protection agencies if you are travelling to the USA. We may also disclose personal information to third parties to help detect and investigate illegal activities and breaches of any agreement we have with you.

When we share your personal data with third parties, we only permit them to process your personal data for specified purposes in accordance with our instructions. We require all third parties to respect the security of your personal data and to treat it in accordance with data protection laws and the recipient of the personal data will be bound by confidentiality obligations.

5. Use of data for marketing and Advertising

Our service is about providing you with the latest hotel and luxury travel offers. Most marketing messages we send will be by email but occasionally we may also contact you by post or phone. If you are using our website or app, we may also send you push notifications if you accept to receive them. If you do not want to receive, or wish to reduce, marketing messages from us, you will be able to tell us by changing your marketing preferences in your account.

You can also change your marketing preferences at any time by following the instructions outlined below.

Email – click on the unsubscribe link at the bottom of our marketing emails. If you have an online account with us you can also opt-out of marketing emails through your account settings. You can also visit the “your account” section of our site to manage the frequency of our communications to you. In the “your subscriptions” tab of the “your account” section of the site, you can choose to opt out of receiving communications for a period of time by clicking on the relevant slider. You can also choose to reduce the frequency of our emails by choosing the summaries option on the mail preferences slider. You can also unsubscribe through the “your account” section of our site . Once you have chosen your mail preferences, please click “Save Changes” button to let us know of your preferences.

App push notifications – you can change your push notification preferences at any time in the account settings for the app. If you receive marketing from us through other channels e.g. post or by phone, and you no longer want to receive such messages, you can tell us to stop marketing to you by post or phone by using our contact details at the end of this privacy notice. Please note that most marketing messages we send will be by email.

Where you have given your consent to do so, we may share your contact details with selected third parties so that they can provide you with information about travel offers that they believe may be of interest to you.

From time to time we include offers from selected third parties that we think will be of interest to you in our newsletters. If you decide you no longer want to receive such messages, you can tell us not to send such messages through your account settings. Visit the "your account" section of the site, then untick the box titled "Hand-picked partner offers".

Web push notifications – with your consent, which can be revoked at any time, we inform you via web push notifications through the browser window ). Web push notifications are regular updates on the most relevant offers, sent to your browser or device by our push service provider, Iterable, Inc., 5 New Street Square, London, United Kingdom, EC4A 3TW (see their privacy policy here), and displayed based on your user settings (usually in the browser header).

To subscribe to web push notifications, you must confirm the browser's prompt for web push notifications by clicking the "Allow" button. The prompt appears when you navigate our website (usually in the browser header). To track and document your subscription and to send you notifications, the subscription time, browser details, and a so-called push token or device ID (device identifier) are stored. The push token acts as an endpoint for sending the push notification to the correct browser, similar to the device ID, which identifies the receiving device.

You can revoke your consent to the processing of your data related to our described push notifications at any time with future effect in your browser settings. The revocation does not affect the lawfulness of the processing up to the point of revocation.

To improve the content of our notifications and ensure their functionality, our push service provider can track whether and when notifications were delivered and opened (legitimate interests). We receive anonymous statistics for the aforementioned evaluation purposes.

For more information on web push notifications and how to disable them, please visit this website.

6. Use of data for online Advertising

We, or our advertising partners, may show advertisements to you on our site, our app or on other websites or apps. To do this we, or our advertising partners, may collect information about how you use or connect to our site, our app or the types of other web pages, social media services, content and ads you, or others who are using the device you connect to our site or app with, interact with, visit or view. The information collected might also include the IP address of the device you connect to our site or our app and a de-identified, non-human readable version of your email address which may be match to other data about you to improve the relevance of online advertising and personalisation. At no time is your actual email address shared with these partners.

We, or our advertising partners, use the information that is collected to make sure the adverts you see either on our site, our app or other parties’ websites and apps (where our partners have advertising space) are more relevant to you.

Typically cookies and similar technologies are used to provide this type of advertising. You can find out more about cookies and how to manage their use by reading our cookie notice below. Partners that we use in this way include LiveRamp and Captify. If you would like to opt-out of the use of your personal data in this way by LiveRamp, you can do so by following this link: https://liveramp.uk/cookies-101/.

7. Sharing your data with social media platforms

We place adverts on social media platforms TikTok and Meta (Facebook and Instagram) and Pinterest (Social Media Platforms) relating to Secret Escapes offers and promotions.

To make sure our adverts are seen by people who are most likely to be interested in them, we share your ‘hashed’ email address with the Social Media Platform. The Social Media Platforms will then use the provided email addresses to see if you have an account with them, so that we can serve our adverts to you via your newsfeed.

Social Media Platforms also process email addresses, selected and provided by us, to analyse our members so we can advertise, via the Social Media Platform, to non-Secret Escape members who share similar interests or characteristics to our members.

We also share personal data with Social Media Platforms to help us measure how successful the adverts that we place are. To do this we share information such as, name and email address of members who have been active on our website. The Social Media Platform uses this information to identify if any of those members have interacted with an advert on their platform. This enables us to understand how successful our adverts are and plan future campaigns. Social Media Platforms do not share any identifiable personal data with us regarding your social media account.

If you do not want your personal data to be used in this way you can opt out at any time by emailing

8. Keeping your personal data secure

We have appropriate security measures in place to prevent personal data from being accidentally lost or used or accessed in an unauthorised way.

We limit access to your personal data to those who have a genuine business need and those processing your personal data will do so only in an authorised manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with a suspected personal data security breach. We will notify you and any relevant regulator of a suspected personal data security breach where we are legally required to do so.

9. International Transfers of your Personal Information

The personal information we collect may be transferred to and stored in countries outside of the jurisdiction you are in. Data may be transferred outside of the UK and the EEA:
a) For the purposes of hosting our website servers on which data is held.
b) If you book a holiday in a destination outside of the EEA, your information will also be passed to the relevant hotel and/or excursion providers in such destination.
c) If you are travelling to the USA your personal data may be shared with United States Customs and Border Protection agencies.

Some of these jurisdictions offer differing levels of protection in respect of personal information and may, in certain instances, be less protective than the jurisdiction you are typically resident in. We will take all reasonable steps to ensure that your personal information is treated securely and in accordance with applicable law and this privacy notice. Where information is transferred outside the EEA and where this is to a stakeholder or vendor in a country that is not subject to an adequacy decision by the EU Commission, data is adequately protected by EU Commission approved standard contractual clauses, or a vendor's Processor Binding Corporate Rules.

10. How Long we keep your personal Information

Where we process registration data, we do this for as long as you are an active user of our sites and for a period of time after this.

Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data so that we can respect your request in future. This record will be kept for as long as we retain your personal data in accordance with this section.

Where we process personal data in connection with performing a contract or for a competition, we keep the data for 7 years from your last interaction with us. This includes any correspondence that you have had with our customer services team, so that we may resolve any complaints or claims that are made.

If your membership account has not been active for 7 years, we will contact you by email informing you that we will be closing your account in the next thirty days. At this point you will have the opportunity to confirm you would like your account to remain active. If we do not hear from you then we will assume your account can be closed.

Cookies and Local Storage: we may store information (which may include personal information) locally on your device using cookies and other browser and application storage methods. For further information please see our cookie notice (https://www.secretescapes.com/privacy-policy)

11. Your Data Subject Rights

Under data protection laws you have the following rights:
a) Request access to your personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
b) Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate personal data we hold about you corrected.
c) Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see point d below).
d) Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
e) Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it.
f) Request that your personal data is sent to another controller (the right of portability). In certain circumstances, you have the right to get your personal data from us in a way that is accessible and machine-readable, and you also have the right to ask us to transfer your personal data to another organisation. This does not apply to all of your personal data, only personal data that you have provided to us, and which is held electronically. We only have to comply with this right if it is technically feasible to provide this personal data in a commonly used format, for example, a CVS file.

If you wish to exercise any of your data subject rights, please contact customersupport@secretescapes.com. In most cases we will deal with your request as soon as possible and at the latest within one calendar month of the date the request was received. If we need to extend the time period for responding to your request, we will let you know within the one-month period. We do not charge a fee for any such requests unless there are exceptional circumstances.

12. How to complain

We hope that we can resolve any query or concern you raise about our use of your personal data. If not, you can contact the UK Information Commissioner’s Office at ico.org.uk or via telephone on 0303 123 1113 for further information about your rights and how to make a formal complaint.

13. Links to third party sites

Our site may, from time to time, contain links to and from third party websites of our partner networks, advertisers, partner merchants, news publications, retailers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. Please check the individual policies before you submit any information to those websites.

14. Changes to this Notice

We may update this privacy notice from time to time and so you should review this notice periodically. When we change this privacy notice in a material way, we will update the "last modified" date at the bottom of this privacy notice and notify you via email, if you we have your email on record. Changes to this privacy notice are effective when they are posted on this page.

This privacy notice was last updated on 05/05/26.

15. Notice to you

If we need to provide you with information about something, whether for legal, marketing or other business-related purposes, we will select what we believe is the best way to get in contact with you. We will usually do this through email or by placing a notice on our site. The fact that we may send notices to you will not stop you from being able to opt out of certain types of contact as described in this privacy notice.