Privacy Policy

Last updated: July 2026

This Privacy Policy explains how Baitportal collects, uses, stores, shares, and protects your personal information when you use our website, create an account, make a booking, purchase a subscription, use wallet credit, collect Portal Points, contact us, or interact with our services.

By using Baitportal, you agree to the collection and use of your personal information as described in this Privacy Policy.

1. Who We Are

Baitportal is operated by:

Company name: BAITPORTAL LTD

Company number: 11542790

Registered address: Dept 1947 196 High Road, Wood Green, London, N22 8HH

Contact email: [email protected]

In this Privacy Policy, "Baitportal," "we," "us," and "our" refer to the company operating the Baitportal platform.

For the purposes of data protection law, we are generally the data controller for the personal information we collect and use through Baitportal.

Some third-party suppliers, payment providers, hotels, activity operators, transfer providers, and other partners may also act as independent data controllers for the personal information they process in connection with your booking or their services.

2. Information We Collect

We may collect and use the following types of personal information.

2.1 Account Information

When you create an account or use account features, we may collect:

name;
email address;
phone number;
password or login credentials;
account preferences;
saved travellers;
saved destinations;
communication preferences;
account activity and settings.

2.2 Booking and Traveller Information

When you search for or make a booking, we may collect:

traveller names;
contact details;
booking dates;
destination details;
hotel, activity, transfer, ticket, or experience selections;
room preferences;
number of travellers;
age or age category of travellers, where required;
booking reference numbers;
voucher details;
cancellation and refund requests;
special requests submitted by you;
customer support messages related to bookings.

Some suppliers may require additional information to complete a booking or provide a service.

2.3 Payment and Transaction Information

When you make a payment, purchase a subscription, use wallet credit, or complete a booking, we may collect:

payment amount;
currency;
billing details;
transaction reference;
payment status;
subscription payment history;
wallet credit balance and usage;
refund records;
chargeback or payment dispute information;
fraud prevention signals.

Full card details are usually processed by our third-party payment provider and are not stored by Baitportal.

2.4 Subscription, Travel Wallet, and Portal Points Information

If you use subscriptions, wallet credit, or Portal Points, we may collect:

subscription plan;
billing cycle;
subscription start date;
subscription cancellation date;
wallet credit added;
wallet credit used;
wallet balance;
Portal Points earned;
Portal Points redeemed;
Portal Points expiry;
loyalty activity;
subscriber discount usage;
promotional rewards;
account eligibility for offers or benefits.

2.5 Technical and Device Information

When you use our website, we may automatically collect:

IP address;
device type;
browser type;
operating system;
approximate location based on IP address;
pages viewed;
search activity;
clicks and interactions;
referring URLs;
session information;
error logs;
performance data;
cookie and tracking preferences.

2.6 Marketing and Communication Information

If you subscribe to emails, respond to campaigns, or interact with our marketing, we may collect:

email preferences;
marketing consent status;
email opens and clicks;
campaign interactions;
social media interactions;
advertising identifiers;
responses to surveys or promotions;
referral activity.

2.7 Customer Support Information

When you contact us, we may collect:

your name;
email address;
phone number;
booking reference;
account details;
messages and attachments;
complaints or support requests;
records of our communication with you.

2.8 Optional Sensitive Information

In some cases, you may choose to provide information related to health, accessibility, mobility, dietary needs, pregnancy, medical conditions, or other special requirements.

We only use this information where necessary to handle your request, pass it to a relevant supplier, or support your booking.

You should only provide this information if it is necessary for your booking or service request.

3. How We Collect Information

We collect information when:

you create an account;
you search for travel services;
you make or manage a booking;
you purchase or cancel a subscription;
you use wallet credit or Portal Points;
you contact customer support;
you sign up for emails or promotions;
you interact with our website or ads;
suppliers or partners send us booking updates;
payment providers send us transaction information;
analytics or cookie tools collect website usage data.

4. How We Use Your Information

We use your personal information to:

provide and operate Baitportal;
create and manage your account;
process searches and bookings;
confirm availability with suppliers;
issue booking confirmations and vouchers;
communicate booking updates;
manage cancellations, amendments, refunds, and complaints;
process payments and prevent fraud;
operate subscriptions and recurring billing;
add, track, and manage wallet credit;
award and redeem Portal Points;
apply eligible subscriber discounts;
provide customer support;
personalise your experience;
send service emails and booking notifications;
send marketing communications where permitted;
measure and improve website performance;
analyse user behaviour and platform usage;
protect our website, users, suppliers, and business;
comply with legal, tax, accounting, regulatory, and contractual obligations.

5. Our Lawful Bases for Using Your Information

We rely on different lawful bases depending on how and why we use your personal information.

5.1 Contract

We use your information where necessary to provide services you request, including:

creating your account;
processing bookings;
sending booking confirmations;
managing subscriptions;
operating wallet credit;
managing Portal Points;
handling cancellations, refunds, and support requests.

5.2 Legitimate Interests

We may use your information where necessary for our legitimate business interests, provided those interests do not override your rights and freedoms.

This may include:

improving Baitportal;
preventing fraud and misuse;
securing our platform;
analysing website performance;
managing supplier relationships;
handling complaints;
protecting our legal rights;
sending certain service-related communications.

5.3 Consent

We rely on consent where required, including for:

certain marketing communications;
non-essential cookies;
advertising cookies;
some analytics technologies;
optional sensitive information you choose to provide for a booking or support request.

You can withdraw consent where applicable.

5.4 Legal Obligation

We may use your information where necessary to comply with legal obligations, including:

tax and accounting records;
fraud prevention;
regulatory requirements;
responding to lawful requests from authorities;
consumer protection obligations;
data protection obligations.

6. Sharing Your Information

We may share your personal information with third parties where necessary to provide our services, complete bookings, process payments, operate the platform, comply with law, or protect our business.

6.1 Travel Suppliers and Partners

We may share booking and traveller information with travel suppliers and partners, which may include:

hotel suppliers;
hotels and accommodation providers;
tour and activity operators;
attraction and ticket providers;
transfer and transport providers;
destination operators;
travel technology providers;
booking system providers.

Our suppliers and partners may include companies such as Hotelbeds / HBX Group, Musement / TUI Musement, hotels, local operators, transfer providers, attractions, and other travel suppliers.

These parties may use your information to confirm bookings, provide services, manage cancellations, verify vouchers, process special requests, handle complaints, and meet legal or operational requirements.

6.2 Payment Providers

We share payment and transaction information with payment processors, banks, card networks, fraud prevention providers, and payment technology providers.

These providers process payments, authorise transactions, prevent fraud, handle refunds, and manage chargebacks.

6.3 Technology and Hosting Providers

We may share information with service providers that help us operate Baitportal, including:

website hosting providers;
cloud infrastructure providers;
database providers;
security providers;
email delivery providers;
customer support tools;
analytics providers;
error monitoring tools;
content delivery networks;
development and maintenance providers.

6.4 Marketing and Analytics Providers

Where permitted, we may share or collect information through marketing and analytics tools, including:

email marketing platforms;
advertising platforms;
social media platforms;
analytics tools;
pixel and tracking technologies;
campaign measurement tools.

These tools may help us understand website performance, improve campaigns, measure conversions, and show relevant ads.

6.5 Legal, Regulatory, and Safety Purposes

We may share information where necessary to:

comply with law;
respond to lawful requests;
enforce our Terms & Conditions;
prevent fraud or abuse;
protect users, suppliers, or our business;
resolve disputes;
obtain legal advice;
complete a business sale, merger, restructuring, or transfer.

7. International Transfers

Baitportal may work with suppliers, hotels, activity operators, payment providers, technology providers, and other partners located in different countries.

As a result, your personal information may be transferred to and processed in countries outside the United Kingdom, the European Economic Area, or your country of residence.

Where required by law, we take steps to protect international transfers of personal information, such as using adequacy decisions, standard contractual clauses, international data transfer agreements, transfer risk assessments, or other appropriate safeguards.

8. Cookies and Similar Technologies

Baitportal uses cookies and similar technologies to operate the website, remember preferences, improve performance, analyse usage, and support marketing.

Cookies may include:

8.1 Strictly Necessary Cookies

These cookies are required for the website to work properly.

They may be used for:

login sessions;
security;
fraud prevention;
shopping cart or booking flow;
payment processing;
cookie consent settings.

These cookies cannot usually be turned off because they are necessary to provide the website or service you request.

8.2 Preference Cookies

These cookies remember choices you make, such as language, currency, location, or display preferences.

8.3 Analytics Cookies

These cookies help us understand how visitors use Baitportal, which pages are visited, where users encounter errors, and how we can improve the website.

8.4 Marketing and Advertising Cookies

These cookies may be used to measure campaigns, show relevant ads, build advertising audiences, limit repeated ads, and understand ad performance.

They may be placed by us or by third-party platforms.

8.5 Cookie Consent

Where required by law, we ask for your consent before placing non-essential cookies or using similar tracking technologies.

You can manage your cookie preferences through our cookie banner or browser settings.

Blocking some cookies may affect website functionality.

9. Marketing Communications

We may send you marketing emails, offers, travel inspiration, subscription updates, loyalty updates, and promotional messages where permitted by law.

You can unsubscribe from marketing emails by using the unsubscribe link in the email or by contacting us.

Even if you unsubscribe from marketing, we may still send you important service messages, including booking confirmations, payment updates, subscription notices, security alerts, and legal notices.

10. How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may depend on the type of information, legal requirements, supplier requirements, accounting rules, fraud prevention needs, disputes, and customer support requirements.

We may keep certain information longer where required by law, where there is an ongoing dispute, or where necessary to protect our legal rights.

11. How We Protect Your Information

We use reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

These measures may include access controls, encryption, secure hosting, monitoring, restricted permissions, and security procedures.

No website, payment system, database, or internet transmission is completely secure. You are responsible for keeping your account login details secure and for notifying us if you suspect unauthorised access to your account.

12. Your Rights

Depending on where you live and which data protection laws apply, you may have rights over your personal information.

These may include the right to:

access your personal information;
correct inaccurate information;
request deletion of your information;
restrict how we use your information;
object to certain uses of your information;
request transfer of your information;
withdraw consent where processing is based on consent;
object to direct marketing;
complain to a data protection authority.

To exercise your rights, contact us at: [Insert Privacy/Support Email]

We may need to verify your identity before responding to your request.

Some rights may be limited by legal, contractual, supplier, fraud prevention, accounting, or dispute-related requirements.

13. Children's Privacy

Baitportal is not intended for children under 18 to create accounts, make bookings, or purchase services.

Bookings involving children must be made by an adult.

We do not knowingly collect personal information from children for account creation or direct purchasing.

If you believe a child has provided us with personal information without appropriate consent, please contact us.

14. Automated Decision-Making and Profiling

We may use automated systems to support fraud prevention, security, pricing display, search results, personalisation, recommendations, marketing measurement, and platform analytics.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects on you, unless permitted by law and with appropriate safeguards.

15. Third-Party Websites and Services

Baitportal may contain links to third-party websites, services, payment pages, supplier pages, or external platforms.

We are not responsible for the privacy practices, content, or security of third-party websites or services.

You should read the privacy policy of any third-party website or service you use.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we may notify you by email, account notice, website notice, or another reasonable method.

The updated Privacy Policy will apply from the date shown at the top of the page.

Your continued use of Baitportal after the updated Privacy Policy takes effect means you acknowledge the updated policy.

17. Contact Us

If you have questions about this Privacy Policy or how we use your personal information, please contact us:

Email: [email protected]

Company: BAITPORTAL LTD

Address: Dept 1947 196 High Road, Wood Green, London, N22 8HH

You may also have the right to complain to your local data protection authority.

If we are established in the United Kingdom, you may contact the UK Information Commissioner's Office.