Privacy policy

Trip720 is operated by [Company legal name] ([ABN / company number]), [registered address], which is responsible for your personal information. Questions or requests: [contact email].

Trips planned without an account are deleted 30 days after they were last used. We do not store payment card details: you pay each provider directly.

We count visits and progress (for example "started planning", "reached step 3", "chose a trip") with our own anonymous records: no advertising or analytics companies and no cookies for this (the one partner tool, below, runs only if you agree), and never your address, accessibility needs, children's details or booking references. A visit record holds only the page you arrived on and where you came from (for example a Google ad or another website's name). How this browser first found us is kept in it for 30 days so a trip can be credited to the right campaign.

What Trip720 keeps in your browser:

• A sign-in cookie (essential), for up to 30 days, only if you log in.
• For this browser session only: your unsent questionnaire, the private link to a trip you have not saved, and your help conversation (essential).
• For counting, unless you switch it off: how you first arrived (30 days) and whether this session was already counted.
• Your choice not to be counted, if you make it.
• A random code for this browser (essential), used only for the daily limit on building trips; it says nothing about you.
• Your cookie choice (Accept or No thanks), so we ask only once; and, only if you accepted, Travelpayouts' own cookies (see below).
• If you choose "Keep this trip on this phone": your plan, booking references, addresses and emergency numbers (no prices), so they open with no signal. Removed when you choose "Remove from this device" or log out. A small offline helper (service worker) keeps that page available; it stores no trip data itself.

We respect your browser's "do not track" and Global Privacy Control signals: when either is on, nothing is counted.

If you choose “Accept”, our travel partner network Travelpayouts runs a small script that counts visits and which pages lead to bookings, so the partners can pay Trip720 its commission. It does not collect your name, email or trip details. If you choose “No thanks”, it never runs. You can change your choice at any time with “Cookie choice”.

Cookie choice

• Travel providers you book with receive only what that booking needs, when you start it.
• Travelpayouts (our partner network), only if you accepted partner analytics: visits and which pages lead to bookings, never your name, email or trip.
• Anthropic (AI provider) processes help conversations, with the details of your trip the assistant needs to answer.
• Wikipedia shows a photo and a short description of a place when you point at it on the trip globe: your browser asks Wikipedia for that place's page, nothing else about you or your trip.
• Sentry (error alerts, stored in the EU) receives technical details when a page or our server breaks: the error, your browser type and the page, never your name, email, trip details or cookies.
• Address lookup: when you search an address or name a map pin, our server sends that text or map point to Google (Geocoding) or the OpenStreetMap Foundation (Nominatim). They see our server, not you.
• Map images for "Pin on map" load from Esri, and icons from Google Fonts. Like any website content, your browser contacts them directly, so they receive your IP address (and, for the map, the area shown).
• Email: [email provider to confirm] sends account and trip emails. Hosting: [hosting provider to confirm] runs our servers and database.
• Authorities, if the law requires it. We do not sell your information or share it for advertising.

Some of these companies are outside Australia, the UK and the EU (mainly in the United States). [transfer safeguards to confirm, e.g. UK IDTA / EU standard contractual clauses].

• Planning and booking your trip, and your account: to provide the service you asked for (contract).
• Security, fraud prevention and anonymous statistics: our legitimate interests, which you can object to (see the switch above).
• The optional exact location, current location and actual spend: you choose to give them, and can remove them.
• Commission and accounting records: legal obligations.

You can get a copy of your data and delete your account yourself on your account page. Deleting your Trip720 account does not cancel bookings with providers; we list them so you can contact each one. You can also ask us to correct, restrict or explain how we use your information, or object to it, by writing to [contact email].

If you are unhappy with our answer you can complain to the Office of the Australian Information Commissioner (oaic.gov.au), the UK Information Commissioner's Office (ico.org.uk), or your local data protection authority.

Trip720 is for adults planning trips. We only ask children's ages (and infant seating needs) to plan the trip; children do not have accounts.

Connections are encrypted, passwords are stored scrambled, two-step sign-in secrets are encrypted, staff must use two-step sign-in, and every sensitive staff action is recorded. Staff never see your exact home location.

We will update this page when what we do changes, and tell account holders about important changes.