Privacy Policy

Bespoke Horizons Ltd ("we", "us", "our") is registered in England and Wales. We operate the website bespokehorizons.co.uk and provide personalised AI-generated travel itinerary suggestions.

For the purposes of UK data protection law, Bespoke Horizons Ltd is the data controller responsible for your personal data.

Contact: info@bespokehorizons.co.uk

We collect the following personal data when you use our service:

Information you provide directly:

• Your email address (provided before payment)
• Your travel preferences, dates, budget, travel style, and any other information you share in our chat interface
• Your name as provided to Stripe during payment

Information collected automatically:

• Basic website usage data (pages visited, time on site) via our analytics provider
• Your IP address and browser type for security and fraud prevention purposes

Information from third parties:

• Stripe provides us with confirmation that your payment was successful, along with your email address and the last four digits of your card (we never see your full card number)

We use your personal data for the following purposes:

We do not use your personal data for automated decision-making that produces legal or similarly significant effects beyond the generation of your personalised itinerary.

The conversation you have with our AI concierge is stored in our database for the purpose of generating your itinerary. This transcript contains your stated travel preferences and is used solely for this purpose.

We may use anonymised and aggregated chat data (with all personally identifying information removed) to improve the quality of our AI responses. We will never use your identifiable chat transcript for any other purpose without your explicit consent.

We share your personal data only with the following third-party service providers, and only to the extent necessary to provide our service:

Stripe — payment processing. Stripe processes your card payment and confirms success to us. Stripe is PCI-DSS compliant and operates under its own privacy policy at stripe.com/privacy.

Anthropic — AI itinerary generation. Your chat transcript is sent to Anthropic's API (the technology that powers our AI concierge) to generate your personalised itinerary. Anthropic processes this data under its usage policies at anthropic.com/privacy.

Resend — email delivery. Your email address and itinerary content are shared with Resend solely for the purpose of delivering your itinerary email. Resend's privacy policy is available at resend.com/privacy.

Cloudflare — website hosting and security. Our website is hosted on Cloudflare's infrastructure. Cloudflare may process your IP address and request data for security purposes.

We do not sell, rent, or share your personal data with any other third party for marketing, advertising, or commercial purposes.

After the relevant retention period, your personal data is securely deleted or anonymised.

You have the following rights regarding your personal data:

Right to access — you can request a copy of the personal data we hold about you.

Right to rectification — you can ask us to correct inaccurate data we hold about you.

Right to erasure — you can ask us to delete your personal data, subject to our legal obligations (for example, we are required to retain payment records for 7 years).

Right to restriction — you can ask us to restrict how we process your data in certain circumstances.

Right to data portability — you can ask us to provide your personal data in a commonly used, machine-readable format.

Right to object — you can object to our processing of your data where we rely on legitimate interests as our legal basis.

Right to withdraw consent — where we process data based on your consent, you can withdraw that consent at any time.

To exercise any of these rights, please contact us at info@bespokehorizons.co.uk. We will respond within 30 days. We may need to verify your identity before processing your request.

Our website uses the following cookies:

Strictly necessary cookies — required for the website to function (session management, security). These cannot be disabled.

Analytics cookies — we use anonymised analytics to understand how visitors use our site. These do not identify you personally.

You can control cookies through your browser settings. Disabling analytics cookies will not affect your ability to use our service.

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure, including:

• Encrypted connections (HTTPS) across our entire website
• Secure, access-controlled database storage
• Payment processing handled entirely by Stripe — we never handle or store your card details
• Limited staff access to personal data on a need-to-know basis

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours and inform you without undue delay.

Some of our third-party service providers (including Anthropic and Stripe) are based in the United States. When we transfer your personal data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR, including Standard Contractual Clauses where applicable.

Our service is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided us with personal data, please contact us at info@bespokehorizons.co.uk and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version will always be available at bespokehorizons.co.uk/privacy. We will notify you of any material changes by email where we hold your contact details.

If you are unhappy with how we have handled your personal data, please contact us first at info@bespokehorizons.co.uk — we will do our best to resolve your concern.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Phone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

For any questions about this Privacy Policy or how we handle your personal data:

Email: info@bespokehorizons.co.uk
Website: bespokehorizons.co.uk/privacy