Privacy notice
TripBuster is an Agendas Group Ltd company. This notice explains the information used by the website and its enquiry service; a travel business you contact has its own privacy notice.
Who is responsible for your information
Agendas Group Ltd operates TripBuster and is the controller for personal information used to run this website and route enquiries.
Agendas Group Ltd, company number 12781046. VAT number GB419155006. Address: Victoria House, County Gates Gyratory, Westbourne, BH12 1AZ.
Contact cs@tripbuster.co.uk about privacy or to exercise your data rights.
Information you provide
An enquiry can include your name, email address or phone number, preferred contact method, dates, party, budget and message. We also record the offer or business you selected, your enquiry reference and the progress of delivery.
Business users provide account and company details to use the partner workspace. Please do not put passport copies, payment card details, dates of birth or medical records into general enquiry forms. Discuss sensitive travel requirements privately with the seller.
Why information is used
We use enquiry information to pass your request to the named business, send relevant service messages and show enquiry progress. We use account information to manage authorised workspace access.
Security and operational information helps prevent spam, enforce request limits and investigate failures. The application hashes IP addresses for its enquiry rate limits; infrastructure providers may process network information to deliver and protect the service.
The relevant lawful basis depends on the purpose: steps taken at your request before a contract, legitimate interests in providing and securing the service, consent where requested for marketing, and legal obligations where applicable.
Who receives it
The enquiry form identifies the travel business receiving your details. Once it receives your request, that business is responsible for its own use of the information, including booking discussions and any marketing to which you agree.
Service providers support hosting, database and account services, email delivery and abuse prevention. The current service uses Vercel, Supabase, SendGrid and Cloudflare Turnstile. Processing locations and any international transfer safeguards depend on the provider and service configuration.
Service messages and marketing
Messages about an enquiry are separate from marketing. An optional marketing choice is not a condition of asking about a holiday. Where a form offers marketing from the named agency, that choice relates to that agency, not a general mailing list for every business.
You can withdraw marketing consent through the sender's unsubscribe or contact route. A withdrawal does not prevent messages needed to deal with an existing request or booking.
Retention and your rights
Information should be kept only for as long as needed for the request, security, complaints and applicable legal requirements. The retention period can differ between enquiry, account, audit and suppression records; this notice does not promise automatic deletion on a particular date.
Subject to the circumstances, UK data protection law gives you rights to access, correct or erase information, restrict or object to processing, and obtain portable data. Requests about a seller's records should also be directed to that seller. Verification of identity may be needed before records can be disclosed.
You can raise a concern with the Information Commissioner's Office if you are unhappy about how your information is handled.