Data Deletion Policy

1. What this page is for

This page explains how to delete your ReadyTrip account and the personal data we hold about you, what happens when you do, and the limited records we must keep afterwards. It sits alongside our Privacy Policy — section 8 (data retention) and section 9 (your rights) there give the full detail. The data controller is Travel Pass Inc, 8 The Green, Dover, DE 19901, USA ("ReadyTrip").

2. Delete your account yourself

Deletion is self-service and takes a couple of minutes. You do not need to email anyone.

On the website

1. Sign in and open your account settings;
2. Scroll to Privacy & data and choose Delete my account;
3. We email a 6-digit confirmation code to the address on your account — it is valid for 15 minutes;
4. Enter the code, type DELETE to confirm, and submit.

In the ReadyTrip app

Open Settings → Account → Privacy & data and follow the same steps. It is the same account either way — deleting in one place deletes everywhere. Uninstalling the app on its own does not delete your account or your data.

The code step exists on purpose: a stolen session alone cannot erase your account. If you have unused ReadyTrip credit, the form tells you the balance and asks you to confirm that it is forfeited — credit is a spend-only referral reward and cannot be paid out.

Before you delete, you can download a copy of your data from the same panel (also behind an emailed code). Once your account is deleted we cannot produce that export.

3. What happens immediately

• Every session is signed out and your sign-in credentials (password and any linked Google or Facebook login) are removed — the account can no longer be accessed;
• Your name, email address, phone number, traveller answers, saved wishlist, reviews you have written and marketing attribution are deleted or replaced with an anonymous placeholder;
• Vouchers, tickets and booking documents stored for you are deleted;
• You are unsubscribed from all marketing;
• You receive a request reference on screen — keep it if you need to follow up with us or with one of our providers.

Deletion is permanent and cannot be undone. Booking history, credit and referral rewards are gone; a future booking needs a new account.

4. What we keep, and why

A small set of records survives erasure because the law requires it or because they are needed to prevent abuse. Where they survive, direct identifiers are removed and the record is held against an anonymous key:

• Payment and refund records — 7 years after the transaction (tax and accounting law);
• Booking totals, references and status — 7 years, for supplier settlement and disputes;
• Credit and referral ledger entries — 7 years after the last entry (accounting, anti-double-spend);
• Fraud and abuse signals — up to 24 months after the last event;
• Marketing opt-out record — a keyed hash of your email address (never the address itself), so your opt-out is honoured if that address ever re-enters our systems;
• Privacy request record — 36 months, pseudonymous, to show the request was handled;
• Operational logs — 12 months live, then up to 12 months archived in pseudonymised form;
• Provider backups — our infrastructure provider keeps point-in-time backups for up to 30 days; erased data may persist there, inaccessibly, until they expire, and is erased again if a backup is ever restored.

Where a booking has already been sent to a supplier, that supplier holds its own copy under its own privacy notice and retention rules; we pass your erasure request on, but we cannot delete their records for them. See Privacy Policy sections 6–8 for the full picture.

5. If you cannot use the self-service option

Email [email protected] from the address on your booking or account, with the subject "Data deletion request". This is the route to use if:

• you booked without keeping an account, or can no longer sign in;
• you only ever gave us your email address (newsletter, contact form, abandoned checkout);
• your account is a partner, merchant or staff account — those carry links to an organisation's own bookings, so we unwind them by hand before erasing;
• you want part of your data deleted rather than the whole account.

We verify that you control the email address before acting, and respond within one month of receiving the request (extendable by up to two further months for complex requests, in which case we tell you inside the first month). An unverified request is dropped after 14 days.

6. Deleting less than everything

You do not have to delete your whole account to reduce what we hold:

• Marketing: use the unsubscribe link at the bottom of any marketing email — this never affects booking, ticket, refund or security emails;
• Cookies and tracking: withdraw consent and clear the identifiers already set from the Cookie Policy;
• Your details: correct your name and phone number in account settings;
• Anything else (a specific review, a support conversation, one booking's traveller details): email [email protected].

7. If you signed in with Google or Facebook

Removing ReadyTrip from your Google or Facebook app permissions stops future sign-ins, but it does not delete the data we already hold. To have it deleted, use the steps in section 2, or email us as described in section 5.

8. Open bookings

If you have a trip that has not happened yet, delete your account only after it is complete — you will lose access to the booking, its vouchers and its tickets, and self-cancellation and refunds run through the account. Deletion does not cancel a booking or trigger a refund; see Cancellation & Refund.

9. Contact us

• Controller: Travel Pass Inc, 8 The Green, Dover, DE 19901, USA
• Email: [email protected]
• Page: Contact

If you are unhappy with how we handle your request you can complain to your local data-protection authority.