Privacy Policy
Last updated 4 August 2026
This policy explains how Breaks (“we”, “us”) handles personal data when you use our travel planning tool. We are the data controller for the processing described here. For how we use cookies specifically, see our Cookie Policy.
What we collect
- What you tell the planner — the trip details, preferences and messages you enter while planning.
- Usage data — pages viewed, features used and, if you consent, session-replay and analytics data (see the Cookie Policy).
- Technical data — device, browser and approximate location inferred from your IP, and a random device identifier used to run searches.
- Account data — only if you sign in: your email address. (Sign-in may be disabled in some versions of the tool.)
How we use it, and our legal basis
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Running the planner and returning trip suggestions, flights, stays and routes | Performance of a contract / legitimate interests |
| Analytics, product measurement and session replay | Consent |
| Advertising measurement and personalisation | Consent |
| Security, debugging and preventing abuse | Legitimate interests |
You can withdraw consent at any time via “Cookie settings”.
Who we share it with
We share data with service providers who process it on our behalf, including:
- AI provider — your planning messages are sent to our large-language-model provider (via OpenRouter) to generate suggestions.
- Travel data providers — to fetch real flight, accommodation and route options.
- Analytics & advertising — Google, PostHog, Microsoft (Clarity and Advertising), only where you have consented.
- Infrastructure — hosting and content-delivery providers that run the site.
We do not sell your personal data.
International transfers
Some providers process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.
How long we keep it
We keep planning and usage data only as long as needed for the purposes above, then delete or anonymise it. Analytics data is retained per each provider’s standard retention settings.
Your rights
Under UK GDPR you can request to access, correct, delete, restrict or port your data, and object to certain processing. To exercise any right, contact us below. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk).
Contact
Data protection queries: privacy@breaks.com.