Home / Privacy & Cookies

Privacy & Cookie policy

Last updated: June 2026. This policy explains what Bundloo collects, why, and your rights under UK GDPR and PECR.

Plain-English summary: we don't sell your data. We use essential cookies to run the site and, only with your consent, optional analytics to improve our deals. We don't take payments or store card details — you book directly with the provider.

Who we are

Bundloo ("we", "us") is a UK-based travel-deal comparison and trip-bundling website. For any privacy query, contact us via the contact page. Bundloo is a trading name operated by a UK-based sole trader. For any privacy or data-protection query, email bundlootrips.uk@gmail.com.

What we collect

  • Usage data — pages viewed and deal links clicked, used to improve which deals we show. With analytics consent this may include a device/session identifier.
  • Search inputs — budget, dates and destination you enter, used only to generate your results in your browser.
  • Messages — anything you send us via the contact page.

We do not collect payment details. All bookings and payments happen on the provider's own website.

Cookies

  • Essential cookies — remember your cookie choice and keep the site working. These don't need consent.
  • Analytics cookies (optional) — only set if you choose "Accept all". They help us understand which deals are useful.
  • Affiliate tracking — when you click a deal link, our partner (e.g. Travelpayouts, Booking.com) may set a cookie so they can attribute a resulting booking to Bundloo. This is how we earn our commission.

You can change your choice any time by clearing cookies for this site.

Legal basis

We rely on your consent for optional analytics and marketing cookies (PECR), and on our legitimate interest in running and improving a free service for essential, privacy-respecting usage data.

Sharing

We share data only with service providers that help us run the site (e.g. hosting, privacy-friendly analytics) and with affiliate partners via the click you choose to make. We never sell your personal data.

Your rights

Under UK GDPR you can request access to, correction or deletion of your data, object to or restrict processing, and withdraw consent. To exercise any right, contact us. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes

We'll update this page when our practices change and revise the "last updated" date above.