Secret Escapes takes your privacy seriously and we want to ensure that your data is secure. Below is a brief summary of what data we collect, how we use it and how you can control it. If you would like more information and more details, this can be found in our privacy notice.

We will collect personal information from you when you sign up to use the site and when you make a booking. This includes your name, email address, and phone number, and in some cases your postal address, date of birth and passport number.

We use this information to allow us to (i) create your account (ii) keep you up to date with deals we think you want to hear about and (iii) track your activity on the website to allow us to tailor your site experience;

We primarily share information with third parties to fulfil any bookings you make and with our technical providers that allow us to send emails about our deals and to analyse website behaviour;

As part of the Secret Escapes service, we send you regular email updates with our best deals, tailored to suit your preferences. If you would prefer not to receive these emails, or reduce their frequency, you can change your preferences at any time on signing up or in the account section of the website.

You have various rights under data protection law, including the right to request access to the personal data we hold on you, and a right to request that we delete all such personal data. You can delete your account in the account section, but for all other requests please contact customersupport@secretescapes.com.

Privacy statement

1. Secret Escapes' approach to privacy

The website and app that is linked to this privacy notice is operated by Secret Escapes Limited.

For the purposes of the applicable data protection legislation (including the General Data Protection Regulation), The controller of your personal data is Secret Escapes Limited, a company registered in England under company number 07026107 with its registered office at 7th Floor, 88 Kingsway, London, WC2B 6AA, United Kingdom (referred to in this privacy notice as "we", "us" or "Secret Escapes").

This privacy notice applies to anyone who visits our website or mobile application, registers to become a member of Secret Escapes or books a trip or hotel via Secret Escapes. ("you" or "members")

The purpose of this privacy notice is to help you understand how we use your personal data, who we share it with and what rights you have relating to your personal data.

If you have any questions about this privacy notice or how we handle your personal data, please contact our Data Protection Officer (DPO) at Secret Escapes Limited, 7th Floor, 88 Kingsway, London, WC2B 6AA, United Kingdom, and at dpo@secretescapes.com

You should also be aware that we use cookies to store and access information whilst providing access to our site or our app. You can find out more about our use of cookies in our cookie statement.

2. How we collect personal data relating to you

We collect personal information about you when you voluntarily submit information directly to us, our site or our app. This can include information you provide to us when you apply to become a member, complete a form, purchase any breaks using our platform, correspond with us, via our recorded call line, email or Al concierge chatbot, including our voice bot agent, subscribe to our mailing lists, newsletters or other forms of marketing communications, respond to a survey, enter a promotion or use some other feature of our website or app. We would like to remind our members that they may object at any time to the use of the email address provided for marketing purposes.

When we speak with you, via our customer service phoneline, these calls will be recorded for quality and training purposes or for our teams to investigate any conversational disputes at a later date. (Legitimate interests/consent).

We also collect personal information from you indirectly, such as information about the pages you look at on our site or our app or the device you use to view our site or connect to our app with.

Information provided by other users

If you are the lead name on a booking (the "Lead Name"), you confirm that you are authorised to provide the personal data of all individuals included in the booking. By providing their personal data, you confirm that each of these individuals has agreed to you acting on their behalf and understands that their data will be processed in accordance with this Privacy Policy.

Where you are provided with the option to log-in using a social network, for example using Facebook, we will not be provided with your password or other account login details for those accounts. We will only be provided with your email and name. We will not post to your social network or to your friends, followers or contacts without your consent.

3. What personal data do we collect about you

The below sets out the:

a) the general categories of personal data that we collect and process, including any special category data that we collect which is more sensitive in nature and therefore require a higher level of protection;

b) the purposes for which we may process personal data; and

c) the legal bases of the processing of your personal data. This will either be where you have provided consent, it is necessary for Secret Escapes to enter into a contract with you, it is within Secret Escapes legitimate interests or Secret Escapes has a legal obligation to process the personal data.

At various places on our site or our app you will be requested to enter certain personal information in order for Secret Escapes to meet its legal obligations or to enter into a contract with you. Personal information that must be provided in order to avail of the booking services offered will be indicated at the time of collection. Other personal information that you are not required to provide in order to receive our services may be voluntarily given and you are free to decide not to give such personal information.

Contact details: your name, your email address, your telephone number and physical addresses associated with your account or any bookings you place using our service.

To allow Secret Escapes to:

1. facilitate your bookings, make contact regarding booking queries or provide any relevant information to you relating to your trip (Contractual necessity);

2. send you direct marketing and exclusive offers relating Secret Escapes(Consent);

3. send members who have booked a trip/hotel, or added a trip/hotel to their online basket (without completing the booking) with us direct marketing and exclusive offers relating Secret Escapes (Legitimate interests);

4. send members details of relevant excursions relating to a booking (Legitimate interests);

5. administer our refer a friend scheme allow you to receive your entitled reward via email and detect any misuse of the service (Legitimate interests);

6. facilitate competitions and notify a prize winner (Contractual necessity);

7. to contact you, via our recorded phoneline, if you are experience issues booking your trip via the website or app (Contractual necessity); or

8. comply with any requests required by law, such as requests by governments or law enforcement authorities conducting an investigation (Legal obligation).

Booking information of all those attending the break: passport numbers, travel assistance requirements, dietary requirements, religious beliefs.

To allow Secret Escapes to:

1. arrange additional assistance for your trip, such as arranging a wheelchair at an airport or a ground level room (Contractual necessity);

2. assist you with providing advanced passenger information for flights if requested (Consent);

3. provide details to our hotels regarding dietary requirements or religious requests such access to prayer rooms on your behalf (Consent); or

4. comply with any requests required by law, such as requests by governments or law enforcement authorities conducting an investigation (Legal obligation).

Comments and opinions: your personal comments and opinions of Secret Escapes and the travel sector, this is provided when you contact anyone at Secret Escapes, enter a competition, provide public feedback via social media or review platforms or respond to surveys

To allow Secret Escapes to:

1. understand our member's needs and requirements and improve our services and member experience (Legitimate interests); and

2. respond to any specific opinions and resolve where required (Legitimate interests).

Payment and transaction information: trips booked, upcoming trips and payment method (we do not store your full card details for security purposes).

To allow Secret Escapes to:

1. Answer any questions you may have regarding a booking or payment (Contractual necessity);

2. Assist with any refund or cancellation queries (Contractual necessity);

3. Use your transaction information and history to determine and provide travel offers that may be of interest to you and send you marketing in accordance with your marketing preferences (Consent); or

4. comply with any requests required by law, such as requests by governments or law enforcement authorities conducting an investigation (Legal obligation).

Website and app login details: Where you create an account with us, we will hold your username and password details.

To allow Secret Escapes to:

1. Keep your account secure (Legitimate interests);

2. Monitor use of our site or our app for the purposes of detecting and preventing fraud or crime (Legitimate interests).

Information about how you use and connect to our site or our app (including technical log files): We collect information about how you use our site or our app such as the pages you view on our site or our app, the time you access our site or our app and how long you use it for, the website from where you came to our site or our app or go to after leaving our site or our app and any selections and choices you make when using our site, our app or via our Al concierge chatbot. This includes the use of technical log files.

This allows Secret Escapes to:

1. Monitor use of our site or our app for the purposes of detecting and preventing fraud or crime (Legitimate interests);

2. To be provide you with relevant hotel and holidays based on your search requirement (Contractual necessity);

3. Use information about how you use and connect to our site, chatbots and our app to optimise your experience of our site or our app on your device, to determine offers that may be of interest to you for marketing purposes and to assess the success of our marketing campaigns This includes the creation of user profiles for data analysis and business intelligence (Legitimate Interests); and

4. Use your personal information help us develop new products and services (Legitimate interests).

Where you are provided with the option to log-in using a social network, for example using Facebook, we will not be provided with your password or other account login details for those accounts. We will only be provided with your email and name. We will not post to your social network or to your friends, followers or contacts without your consent.

Information about your location: Other than information you choose to provide to us; we do not collect information about your precise location. However, your device's IP address may help us determine an approximate location

This allows Secret Escapes to:

1. Use an approximate location to ensure content on our site is relevant to the area, city, state or country you are using your device in (Legitimate interests); and

2. Identify your location for the purposes of tailoring travel information (including hotels and recommended airports) to you (Consent).

We also collect information about the computer, tablet, smartphone or other electronic device you use to connect to our site or our app. This information can include details about the type of device, unique device identifying numbers, operating systems, browsers and applications connected to our site or our app through the device, your Internet service provider or mobile network, your IP address and your device's telephone number (if it has one). This allows Secret Escapes to:

1. Monitor the use of our website or our app for the purpose of preventing and detecting crime, e.g., fraud prevention (Legitimate interests);

2. Improve our website and app information so that we can optimise your experience with our website or our app on your device, in order to identify offers that may be of interest to you, and to evaluate the success of our marketing campaigns (Consent); and

3. Developing new products and services (Legitimate interests).

Typically, the information we collect about how you use or connect to our site is associated with your device and not you as a named individual. However, if you are logged into a registered account you have with us this information may also be associated with you directly.

Anonymised data: We may anonymise and aggregate any of the information we collect (so that it does not directly identify you). We may use anonymised information for purposes that include testing our IT systems, research, data analysis, improving our site and developing new products and features.

All personal information: In addition, we will use all the personal information we collect (and set out above) to:

1. To ensure the security and integrity of our services. We monitor the use of our website and app to prevent and detect criminal activity, such as fraud (Legitimate interests);

2. To improve, optimise, and personalise our services and marketing. We analyse usage to improve our website and app, identify relevant offers for you, and measure the effectiveness of our marketing (Consent).

3. To innovate and grow our business. We use information to help us develop new products and services that meet our customers' needs (Legitimate Interests).

4. Information we share with third parties

We will share your personal data with other companies in order for them to fulfil services for us and to ensure that you receive a seamless travel booking experience

The categories of third parties with whom we will share your personal data with includes :

a) Secret Escapes Group of companies: our subsidiaries (i.e. any organisation we own or control) or our holding company or ultimate holding company (i.e. any organisation that owns or controls us) and any subsidiaries they own. These companies will only use your personal information in the same way as we can under this privacy notice;

b) Hotel and travel operators;

c) Payment providers;

d) Postal couriers;

e) Outsourced customer service centre;

f) IT support services;

g) Online booking platforms;

h) Specialist search engines to assist our Al agents;

i) Core CRM system and database provider;

j) Website and analytics partners including business intelligence providers;;

k) Third party advertisers;

l) Refer a friend provider;

m) Professional advisors, (lawyers, accountants and claims management); and

n) Potential purchasers of some or all of our business or relating to a corporate re-structuring.

We may provide other third parties with aggregate statistical information and analytics about users of our site or our app, but we will make sure no one can be identified from this information before we disclose it.

We partner with Epsilon to provide you with personalised advertising and content. Epsilon may use first- and third-party cookies and other techniques to recognise your browser and collect information about your web browsing activity when visiting this website. You may read more about Epsilon's use of cookies and other similar technologies by visiting this link. Such cookies and techniques collect personal data (e.g., information about the browser or device you are using, including browser type, browsing activity, cookie ids, IP-addresses and transactions made). We also provide Epsilon with other information about you, such as name, address and email for the same purpose. Please contact us if you no longer want us to share such information. Detailed information about Epsilon's processing can be found in Epsilon's privacy policy here. You may visit the European Interactive Digital Advertising Alliance here to learn more about personalised interest-based advertising, and to opt-out of receiving the same from their respective members. You can also visit Epsilon's data subject request tool, available here.

Sharing personal data with law enforcement and other third parties for legal reasons

We will share your personal data where there is a legal obligation to so or to whom we need to disclose your personal information to protect our rights, property or safety or to protect the rights, property or safety of others. For example, we may provide information to the United States Customs and Border Protection agencies if you are travelling to the USA. We may also disclose personal information to third parties to help detect and investigate illegal activities and breaches of any agreement we have with you.

When we share your personal data with third parties, we only permit them to process your personal data for specified purposes in accordance with our instructions. We require all third parties to respect the security of your personal data and to treat it in accordance with data protection laws and the recipient of the personal data will be bound by confidentiality obligations.

In the event that we become insolvent, insolvency proceedings are initiated against our assets, or the initiation of such proceedings is rejected due to insufficient assets, and you have booked a trip with us, we will transmit information about you and your trip to Deutscher Reisesicherungsfonds GmbH, Sächsische Straße 1, 10707 Berlin, kontakt@drsf.reise, for the purpose of refunding travel prices already paid in the event of cancellation of the trip or if you make direct use of service providers such as hotels or transport companies, if necessary for your return transport and accommodation until your return transport, or to organize the continuation of your package trip. The privacy policy of Deutscher Reisesicherungsfonds GmbH can be found here.

5. Use of data for marketing and Advertising

Our service is about providing you with the latest hotel and luxury travel offers. Most marketing messages we send will be by email but occasionally we may also contact you by post or phone. If you are using our website or app, we may also send you push notifications if you accept to receive them. If you do not want to receive, or wish to reduce, marketing messages from us, you will be able to tell us by changing your marketing preferences in your account.

You can also change your marketing preferences at any time by following the instructions outlined below.

Email click on the unsubscribe link at the bottom of our marketing emails. If you have an online account with us you can also opt-out of marketing emails through your account settings. You can also visit the "your account" section of our site to manage the frequency of our communications to you. In the "your subscriptions" tab of the "your account" section of the site, you can choose to opt out of receiving communications for a period of time by clicking on the relevant slider. You can also choose to reduce the frequency of our emails by choosing the summaries option on the mail preferences slider. You can also unsubscribe through the "your account" section of our site Once you have chosen your mail preferences, please click "Save Changes" button to let us know of your preferences.

App push notifications you can change your push notification preferences at any time in the account settings for the app. If you receive marketing from us through other channels e.g. post or by phone, and you no longer want to receive such messages, you can tell us to stop marketing to you by post or phone by using our contact details at the end of this privacy notice. Please note that most marketing messages we send will be by email.

Where you have given your consent to do so, we may share your contact details with selected third parties so that they can provide you with information about travel offers that they believe may be of interest to you.

From time to time we include offers from selected third parties that we think will be of interest to you in our newsletters. If you decide you no longer want to receive such messages, you can tell us not to send such messages through your account settings. Visit the "your account" section of the site, then untick the box titled "Hand-picked partner offers".

Web push notifications - with your consent, which can be revoked at any time, we inform you via web push notifications through the browser window). Web push notifications are regular updates on the most relevant offers, sent to your browser or device by our push service provider, Iterable, Inc., 5 New Street Square, London, United Kingdom, EC4A 3TW (see their privacy policy here), and displayed based on your user settings (usually in the browser header).

To subscribe to web push notifications, you must confirm the browser's prompt for web push notifications by clicking the "Allow" button. The prompt appears when you navigate our website (usually in the browser header). To track and document your subscription and to send you notifications, the subscription time, browser details, and a so-called push token or device ID (device identifier) are stored. The push token acts as an endpoint for sending the push notification to the correct browser, similar to the device ID, which identifies the receiving device.

You can revoke your consent to the processing of your data related to our described push notifications at any time with future effect in your browser settings. The revocation does not affect the lawfulness of the processing up to the point of revocation.

To improve the content of our notifications and ensure their functionality, our push service provider can track whether and when notifications were delivered and opened (legitimate interests). We receive anonymous statistics for the aforementioned evaluation purposes.

For more information on web push notifications and how to disable them, please visit this website.

6. Use of data for online Advertising including the creation of user profiles

We, or our advertising partners, may show advertisements to you on our site, our app or on other websites or apps.

As part of our analyses, we also process data to build user profiles (segmentation) and evaluate usage behaviour or interests (profiling in accordance with Article 4(4) of the UK GDPR).

1. Purpose: Profiling is carried out to: Tailor content, offers, and marketing activities specifically to your interests. Identify user patterns (e.g., product preferences), improve our services, and calculate price segments or individual terms.

2. Categories of personal data: Basic and contact data (e.g., member or user ID, name, email address, telephone number, and postal address), booking and transaction data, usage and interaction data (e.g., information regarding your browsing, usage, and response behaviour), location data (approximate region or market), as well as profile and segmentation data (e.g., assignment to interest groups or customer segments).

3. No automated individual decision-making: We do not carry out automated individual decision-making within the meaning of Article 22 of the UK GDPR that produces legal effects concerning you or similarly significantly affects you.

4. Lawful basis: For some of the data used, the legal basis is your consent, provided you have given it to us via our cookie banner. For another limited aspect of tracking, the legal basis is our legitimate interest in delivering user-tailored advertising and improving efficiency.

5. Right to object (Article 21 of the UK GDPR): You have the right to object, on grounds relating to your particular situation, at any time to the processing of your data for user profiling purposes. Where profiling is used for direct marketing purposes, you may also object directly to such direct marketing at any time without providing a reason.

To do this we, or our advertising partners, may collect information about how you use or connect to our site, our app or the types of other web pages, social media services, content and ads you, or others who are using the device you connect to our site or app with, interact with, visit or view. The information collected might also include the IP address of the device you connect to our site or our app and a de-identified, non-human readable version of your email address which may be match to other data about you to improve the relevance of online advertising and personalisation. At no time is your actual email address shared with these partners.

We, or our advertising partners, use the information that is collected to make sure the adverts you see either on our site, our app or other parties' websites and apps (where our partners have advertising space) are more relevant to you.

Typically cookies and similar technologies are used to provide this type of advertising. You can find out more about cookies and how to manage their use by reading our cookie notice below.

Partners that we use in this way include LiveRamp and Captify. If you would like to opt-out of the use of your personal data in this way by LiveRamp, you can do so by following this link: https://liveramp.uk/cookies-101/.

7. Sharing your data with social media platforms

We place adverts on social media platforms Tik Tok and Meta (Facebook and Instagram) and Pinterest (Social Media Platforms) relating to Secret Escapes offers and promotions.

To make sure our adverts are seen by people who are most likely to be interested in them, we share your 'hashed' email address with the Social Media Platform. The Social Media Platforms will then use the provided email addresses to see if you have an account with them, so that we can serve our adverts to you via your newsfeed.

Social Media Platforms also process email addresses, selected and provided by us, to analyse our members so we can advertise, via the Social Media Platform, to non-Secret Escape members who share similar interests or characteristics to our members.

We also share personal data with Social Media Platforms to help us measure how successful the adverts that we place are. To do this we share information such as, name and email address of members who have been active on our website. The Social Media Platform uses this information to identify if any of those members have interacted with an advert on their platform. This enables us to understand how successful our adverts are and plan future campaigns.

Social Media Platforms do not share any identifiable personal data with us regarding your social media account.

If you do not want your personal data to be used in this way you can opt out at any time by emailing

8. Keeping your personal data secure

We have appropriate security measures in place to prevent personal data from being accidentally lost or used or accessed in an unauthorised way.

We limit access to your personal data to those who have a genuine business need and those processing your personal data will do so only in an authorised manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with a suspected personal data security breach. We will notify you and any relevant regulator of a suspected personal data security breach where we are legally required to do so.

9. Use of artificial intelligence to assist with responding to customer enquiries as well as Al concierge service

To process your enquiries more efficiently and quickly, we use artificial intelligence (an Al agent) to assist us. When you contact us by email, the content of your message is analysed by our system to generate a draft response based on our internal knowledge base (FAQs). The Al used does not have access to your booking details, payment details or any other personal data beyond your current enquiry.

It acts solely as a knowledge-based assistance system for general information. Every draft generated by the Al is subject to mandatory review by our staff. We process personal data in the context of responding to your enquiry in accordance with Article 6(1)(f) of the GDPR (legitimate interest): Our interest lies in optimising our customer service processes and ensuring prompt response times, and we assume that this is also in your interest.

In addition, you have the option of using our Al concierge service on a voluntary basis. Our Al concierge service can help you identify offers that are suitable for you. We process personal data in connection with responding to your enquiry in accordance with Article 6(1)(f) of the GDPR (legitimate interest): our interest lies in offering you the relevant services and helping you to find the offers you are looking for, and we assume that this is also in your interest if you decide to use our Al concierge service.

The data used to generate the relevant Al-generated responses will only be processed for as long as is necessary to deal with your enquiry. We ensure that your personal data is not used by third-party providers to train the underlying Al models.

10. International Transfers of your Personal Information

The personal information we collect may be transferred to and stored in countries outside of the jurisdiction you are in. Data may be transferred outside of the UK and the EEA:

a) For the purposes of hosting our website servers on which data is held.

b) insofar as the transfer of, or access to, personal data from a third country is required as a result of the use of certain tools;

c) If you book a holiday in a destination outside of the EEA, your information will also be passed to the relevant hotel and/or excursion providers in such destination.

d) if you are travelling to the USA your personal data may be shared with United States Customs and Border Protection agencies.

Some of these jurisdictions offer differing levels of protection in respect of personal information and may, in certain instances, be less protective than the jurisdiction you are typically resident in. We will take all reasonable steps to ensure that your personal information is treated securely and in accordance with applicable law and this privacy notice. Where information is transferred outside the EEA and where this is to a stakeholder or vendor in a country that is not subject to an adequacy decision by the EU Commission, data is adequately protected by EU Commission approved standard contractual clauses, or a vendor's Processor Binding Corporate Rules.

11. How long we keep your personal Information

Where we process registration data, we do this for as long as you are an active user of our sites and for a period of time after this.

Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data so that we can respect your request in future. This record will be kept for as long as we retain your personal data in accordance with this section.

Where we process personal data in connection with performing a contract or for a competition, we keep the data for 7 years from your last interaction with us. This includes any correspondence that you have had with our customer services team, so that we may resolve any complaints or claims that are made.

If your membership account has not been active for 7 years, we will contact you by email informing you that we will be closing your account in the next thirty days. At this point you will have the opportunity to confirm you would like your account to remain active. If we do not hear from you then we will assume your account can be closed.

Cookies and Local Storage: we may store information (which may include personal information) locally on your device using cookies and other browser and application storage methods. For further information please see our cookie notice (https://www.secretescapes.com/privacy-policy)

12. Your Data Subject Rights

Under data protection laws you have the following rights:

a) Request access to your personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

b) Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate personal data we hold about you corrected.

c) Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see point d below).

d) Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.

e) Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it.

f) Request that your personal data is sent to another controller (the right of portability). In certain circumstances, you have the right to get your personal data from us in a way that is accessible and machine-readable, and you also have the right to ask us to transfer your personal data to another organisation. This does not apply to all of your personal data, only personal data that you have provided to us, and which is held electronically. We only have to comply with this right if it is technically feasible to provide this personal data in a commonly used format, for example, a CVS file.

If you wish to exercise any of your data subject rights, please contact customersupport@secretescapes.com. In most cases we will deal with your request as soon as possible and at the latest within one calendar month of the date the request was received. If we need to extend the time period for responding to your request, we will let you know within the one-month period. We do not charge a fee for any such requests unless there are exceptional circumstances.

13. How to complain

You have the right to make a complaint to us about the processing of your personal data or in relation to the exercise of any of your rights at any time by contacting us via our [Contact Us page].

You also have the right to complain to the ICO, who can be found via their website (www.ico.org.uk) or by telephone: 0303 123 1113.

14. Links to third party sites

Our site may, from time to time, contain links to and from third party websites of our partner networks, advertisers, partner merchants, news publications, retailers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. Please check the individual policies before you submit any information to those websites.

15. Changes to this Notice

We may update this privacy notice from time to time and so you should review this notice periodically. When we change this privacy notice in a material way, we will update the "last modified" date at the bottom of this privacy notice and notify you via email, if you we have your email on record. Changes to this privacy notice are effective when they are posted on this page.

This privacy notice was last updated on 19 August 2026.

16. Notice to you

If we need to provide you with information about something, whether for legal, marketing or other business-related purposes, we will select what we believe is the best way to get in contact with you. We will usually do this through email or by placing a notice on our site. The fact that we may send notices to you will not stop you from being able to opt out of certain types of contact as described in this privacy notice.

Secret Escapes uses cookies and similar technologies to recognise you when you visit our site or our app. The following section explains what these technologies are and why we use them, as well as your rights to control our use of them.

What are cookies?

Cookies are small data files that are placed on your computer or mobile device when you visit a website. Cookies are widely used by website owners in order to make their websites work, or to work more efficiently, as well as to provide reporting information. Cookies set by us are called "first-party cookies". Cookies set by parties other than us are called "third-party cookies". Third-party cookies enable third-party features or functionality to be provided on or through the website (e.g. like advertising, interactive content and analytics). The parties that set these third-party cookies can recognise your device both when it visits the website in question and also when it visits certain other websites.

Why do we use cookies?

We use first-party and third-party cookies for several reasons. Some cookies are required for technical reasons in order for our site or our app to operate, and we refer to these as "essential" or "strictly necessary" cookies. Other cookies also enable us to track and target the interests of our users to enhance the experience on our site or our app. Third parties serve cookies through our site or our app for advertising, analytics and other purposes. This is described in more detail below.

Types of cookie

The specific types of first and third-party cookies served through our site or our app and the purposes they perform are described in the table below (please note that the specific cookies served may vary depending on the specific site or our app you visit):

Essential website cookies: These cookies are strictly necessary to provide you with services available through our site or our app and to use some of its features, such as access to secure areas. These cookies are essential for the website to function properly (e.g., security, load balancing, page navigation). They do not require consent. See an overview of our essential website cookies here:

Cookie Owner	Cookie Name	Purpose	Lawful Basis	Duration
Amazon Web Services	AWSALB, AWSALBTG, AWSALBCORS	Used for load balancing to route client requests effectively across servers.	Strictly Necessary	6-7 Days
Secret Escapes	JSESSIONID	General purpose platform session cookie used to maintain an anonymous user session.	Strictly Necessary	Session / 1 Year
OneTrust	OptanonConsent, OptanonAlertBoxClosed	Stores your cookie consent preferences and ensures the cookie banner is not shown again unnecessarily.	Strictly Necessary	1 Year
Secret Escapes	tracker.id	Identifies requests from the same device for technical troubleshooting and site stability.	Strictly Necessary	1 Year
Secret Escapes	gs_u_GSN..., gs_v_GSN...	Internal site functionality cookies.	Strictly Necessary	1 Year
Secret Escapes	ubid	Technical cookie needed for site operation.	Strictly Necessary	5-6 Months
Google	__eoi	Used to detect spam and improve website security.	Strictly Necessary	5 Months
Stripe	__stripe_sid, __stripe_mid	Used to process secure credit card payments without storing card information on servers.	Strictly Necessary	1 Day - 1 Year
Secret Escapes using Snowplow	sp	Maintains essential user session state and ensures core website functionality operates correctly during navigation.	Strictly Necessary	1 Year
Bing	MSPTC	Microsoft Bing search engine cookie.	Strictly Necessary	1 Year

Performance cookies: These cookies are used to enhance the performanceof our site or our app but are non-essential to their use. However, without these cookies, certain functionality may become unavailable. These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. See an overview of our performance cookies here:

Cookie Owner	Cookie Name	Purpose	Lawful Basis	Duration
Google Analytics	_ga, _gid, _gat	Distinguishes unique users and throttles request rates to calculate visitor, session, and campaign data.	Consent	1 Day - 2 Years
Hotjar	_hjSessionUser_..., _hjSession_..., _hjTLDTest	Persists the Hotjar User ID and session data to attribute behavior to the same user across visits.	Consent	Session - 1 Year
Optimizely	optimizelyEndUserId	Unique user identifier for website optimization and testing.	Consent	5-6 Months
SpeedCurve	lux_uid	Tracks user interactions and performance metrics.	Consent	Session
Outbrain	dicbo_id	Collects statistics on visitor usage to optimize the website.	Consent	Session
Secret Escapes	ttcsid	Internal performance measurement.	Consent	2 Months
Secret Escapes	FPID, FPGSID	Google proxy cookies for web analytics.	Consent	1 Year

Functionality cookies: These cookies enable the website to provide enhanced functionality and personalisation. See an overview of our functionality cookies here:

Cookie Owner	Cookie Name	Purpose	Lawful Basis	Duration
Secret Escapes	iom_consent	Manages internal consent settings.	Consent	1 Month
Optimizely	optimizelyDomainTestCookie	Allows testing of different website versions and features.	Consent	Varies
Branch IO	_s	Mobile measurement and deep linking services.	Consent	1 Year
Optimizely	AWSELB, AWSELBCORS	Measures performance and effectiveness of different website designs.	Consent	Session
Indeed	__cf_bm	CloudFoundry cookie for functionality.	Consent	Session

Targeting cookies: These cookies are used to make advertising messages more relevant to you. They perform functions like preventing the same ad from continuously reappearing, ensuring that ads are properly displayed for advertisers, and in some cases selecting advertisements that are based on your interests.

Cookie Owner	Cookie Name	Purpose	Lawful Basis	Duration
ContentSquare	_cs_id, _cs_s, _cs_c	Analytics and personalization to track visitor behavior and store consent.	Consent	Session - 1 Year
Facebook	_fbp	Used to deliver advertisement products like real-time bidding.	Consent	3 Months
TikTok	_tt_enable_cookie, _ttp, ttcsid	Measures the effect of advertising and tracks activity for optimization.	Consent	2 Months
Bing (Microsoft)	_uetvid, _uetsid	Tracking cookie to engage with users who previously visited the site.	Consent	Session - 1 Year
Google / DoubleClick	IDE, test_cookie, _dlt	Used for real-time bidding and ad targeting.	Consent	1 Year
YouTube	YSC, VISITOR_INFO1_LIVE	Tracks views of embedded videos and user data for targeted advertising.	Consent	6 Months - Session
Impact Radius	IR_gbd, IR_PI	Affiliate tracking to measure marketing campaign effectiveness.	Consent	Session
Heap Analytics	_hp2_ses_props, _hp2_id	Tracks user behavior and session properties.	Consent	2 Years
Criteo	cto_tld_test, uid	Identifies visitors across devices for relevant advertising.	Consent	1 Year
Quantcast	__qca, mc	Collects data for audience segmentation and targeted advertising.	Consent	1 Year
RTB House	__rtbh.lid, __rtbh.uid	Optimizes ad relevance based on user behavior.	Consent	1 Year
Criteo	cto_bundle	Tracks user activity for advertising (classified as Strictly Necessary in the source sheet).	Strictly Necessary	1 Year
Adalyser	__adal_ca	Stores which advertising campaign drove a user to visit our site.	Consent	6 Months
Adalyser	__adal_cw	Ties back conversion events to earlier visits on our site.	Consent	1 Week
Adalyser	__adal_id	Uniquely identifies a device.	Consent	1 Year

What about other tracking technologies, like web beacons?

Cookies are not the only way to recognise or track visitors to a website. We may use other, similar technologies from time to time, like web beacons (sometimes called "tracking pixels" or "clear gifs"). These are tiny graphics files that contain a unique identifier that enable us to recognise when someone has visited our site or our app or opened an e-mail that we have sent them. This allows us, for example, to monitor the traffic patterns of users from one page within our site or our app to another, to deliver or communicate with cookies, to understand whether you have come to our site or our app from an online advertisement displayed on a third-party website, to improve site performance, and to measure the success of e-mail marketing campaigns. In many instances, these technologies are reliant on cookies to function properly, and so declining cookies will impair their functioning.

Do you serve targeted advertising?

Third parties may serve cookies on your computer or mobile device to serve advertising through our site or our app. These companies may use information about your visits to this and other websites in order to provide relevant advertisements about goods and services that you may be interested in. They may also employ technology that is used to measure the effectiveness of advertisements. This can be accomplished by them using cookies or web beacons to collect information about your visits to this and other sites in order to provide relevant advertisements about goods and services of potential interest to you. The information collected through this process does not enable us or them to identify your name, contact details or other personally identifying details unless you choose to provide these.

How can I control cookies?

You have the right to decide whether to accept or reject cookies. You can set or amend your web browser controls to accept or refuse cookies. If you choose to reject cookies, you may still use our website though your access to some functionality and areas of our website may be restricted. As the means by which you can refuse cookies through your web browser controls vary from browser-to-browser, you should visit your browser's help menu for more information. In addition, most advertising networks offer you a way to opt out of targeted advertising. If you would like to find out more information, please click here or here. The date at the top of this Cookie Statement indicates when it was last updated.

How can I control web push notifications?

To send push notifications, we use the service of Iterable, Inc., 5 New Street Square, London, United Kingdom, EC4A 3TW (“Iterable”). Iterable sends the web push notification to Google Firebase Cloud Messaging ("FCM"). This is a service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

With FCM, push notifications can be delivered to you. A pseudonymized push reference is assigned to your device, which serves as the target for the push notifications. FCM uses unique identifiers, i.e., a string of numbers allowing the linking of different events or processes, to determine which devices should receive messages.

Further information can be found in Iterable’s privacy policy here. Google's privacy policy can be found here.

Where can I get further information?

If you have any questions about our use of cookies or other technologies, please email us at customersupport@secretescapes.com.

How can I change my preferences?

To update your cookie preferences, click here.

This Cookie Notice was last modified on 16 June 2026.