Last updated: 14 September 2026
This Privacy Policy explains how Heritage Routes Travel Ltd handles personal information when you use TripFlaw.
The data controller is Heritage Routes Travel Ltd, Company No. 17244605, registered in England and Wales, with registered office at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
Depending on how you use TripFlaw, we may process:
Please avoid submitting unnecessary sensitive personal information.
We use the information to provide itinerary analysis, generate reports, process payments, prevent abuse, troubleshoot technical issues, improve service reliability and comply with legal obligations.
Depending on the circumstances, processing may be necessary to perform a contract with you, to take steps at your request before entering into a contract, to comply with legal obligations, or for our legitimate interests in operating, securing and improving TripFlaw.
Information submitted for itinerary analysis may be transmitted to AI service providers used to generate TripFlaw previews and full reports.
Payments are processed by Stripe or another payment provider made available on the site. We do not store your full card number. Payment providers process payment information under their own privacy terms.
TripFlaw uses cloud infrastructure, including Cloudflare services and database storage, to operate the website, store analysis records and maintain service functionality.
We retain information only for as long as reasonably necessary for service delivery, payment records, technical support, security, legal compliance and legitimate business record-keeping. Retention periods may differ depending on the type of information.
Some service providers may process information outside the United Kingdom. Where required by applicable law, appropriate safeguards are used for international transfers.
TripFlaw uses strictly necessary browser storage to remember preferences such as language and to support core service functionality. TripFlaw also uses Cloudflare Web Analytics for privacy-focused traffic measurement. Optional Google Analytics is loaded only after the visitor chooses to allow analytics in the on-site consent control. Visitors can continue using TripFlaw without allowing Google Analytics.
Depending on applicable law, you may have rights relating to access, correction, deletion, restriction, objection, portability and withdrawal of consent where consent is the legal basis for processing.
We use reasonable technical and organisational measures intended to protect information against unauthorised access, loss, misuse or alteration. No internet service can guarantee absolute security.
TripFlaw reports may contain references to third-party websites. Their privacy practices are governed by their own policies.
We may update this Privacy Policy when the service or legal requirements change. The current version will be published on this page.
For privacy questions, use the TripFlaw Contact / Support page or write to our registered office.