Last updated: August 2026
This policy explains what Rooms & Rides collects, why, and what you can do about it. It describes what the site actually does today, not what a template says a website might do. When that changes, this page changes with it and the date above moves.
The short version
Right now this site collects very little. There is no advertising, no analytics tracking you across the web, no third-party pixels, and no affiliate links. The fonts are served from our own server rather than Google’s, so loading a page does not tell anyone else you were here.
That will not stay true forever. The sections below say what happens now and flag what is planned.
Who we are
Rooms & Rides is a travel research site published at roomsandrides.com. For privacy questions, corrections or requests about your data, use the contact page.
If you are in the UK or EU, we are the data controller for the personal data described below.
What we collect
When you simply read the site
Our hosting provider records standard server logs: IP address, browser type, pages requested, and timestamps. This happens on every website and is necessary to serve pages and to detect attacks. These logs are kept by the host for a limited period and are not used to build a profile of you.
Legal basis: legitimate interest in operating and securing the site.
When you join the newsletter
If you subscribe, we collect the email address you give us and the date you subscribed. We use it to send the newsletter and nothing else. We do not sell it, rent it, or share it with advertisers.
Every email includes a one-click unsubscribe. You can also ask us to delete your address entirely, and we will.
Legal basis: your consent, which you can withdraw at any time.
When you contact us
If you email or use the contact form, we keep your message and address for as long as needed to deal with it, and to keep a record if it results in a correction to a page.
Legal basis: legitimate interest in answering correspondence and maintaining a corrections record.
What we do not collect
- No account system, so no passwords
- No comments, so no commenter data
- No payment details, ever. We do not sell anything
- No advertising identifiers
- No cross-site tracking
- No fingerprinting
Cookies
The site currently sets no tracking cookies. WordPress may set a session cookie if someone logs in to the admin area, which applies to us rather than to readers.
The cookie policy has the detail, and will be updated before any analytics or affiliate tracking is introduced.
Analytics
There is no analytics installed at present.
When we add it, the intention is a privacy-first tool such as Plausible or Fathom, which do not use cookies, do not collect personal data, and do not track visitors between sites. If we ever use something that requires consent, you will get a consent banner and a real choice before anything loads.
Affiliate links
The site carries none today. When it does, clicking one may set a cookie from the merchant so they can attribute a booking. That cookie belongs to them and is governed by their privacy policy. We will name the merchants and update the cookie policy before that starts.
Our own click tracking, when it runs, counts clicks per merchant without storing your IP address, browser, or any identifier that could single you out.
Who else sees your data
- Our host, Hostinger, which operates the servers and therefore processes server logs on our behalf.
- Our email provider, once the newsletter is running, which will store subscriber addresses on our behalf.
We do not share personal data with anyone else, and we never sell it.
International transfers
Some providers may process data outside the UK and EEA. Where that happens we rely on the provider’s standard contractual clauses or an adequacy decision.
How long we keep things
| Data | Kept for |
|---|---|
| Server logs | The host’s retention window, typically weeks |
| Newsletter subscription | Until you unsubscribe or ask for deletion |
| Correspondence | As long as needed to resolve it, plus any correction record |
Your rights
If you are in the UK or EEA you have the right to ask for a copy of your data, to have it corrected, to have it deleted, to restrict or object to processing, and to receive it in a portable form. Where processing rests on consent, you can withdraw that consent at any time.
To exercise any of these, use the contact page. We will respond within one month.
You also have the right to complain to your data protection authority. In the UK that is the Information Commissioner’s Office; in the EU it is the supervisory authority in your country.
Children
This site is aimed at adults planning travel. We do not knowingly collect data from children under 16.
Changes
Material changes will be announced on this page with a new date at the top. Because the site is small and honest about its current state, we would rather update this page when something actually changes than pre-emptively claim permissions we do not use.
This policy is written to describe our real practices in plain language. It is not legal advice, and if you are relying on it for your own site you should take proper advice.