PRIVACY POLICY
Last updated: 20.09.2025
At RouteMuse (“we,” “us,” or “our”), we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our website www.routemuse.com (the “Website”) or purchasing our services, you agree to the terms of this Privacy Policy.
1. Who We Are
RouteMuse provides customised travel itineraries for personal use. We are a data controller under the UK GDPR, which means we decide how and why your personal data is used.
If you have any questions about this Privacy Policy or your data, please contact us at:
RouteMuse
Email: [Insert Contact Email]
Website: www.routemuse.com
2. What Data We Collect
We may collect and process the following information:
-
Personal Identification Data: Name, email address, billing address, and other details you provide when making a purchase or
contacting us. -
Payment Information: Payments are handled by third-party providers (e.g., Stripe, PayPal). We do not store or process your card details directly.
-
Technical Data: IP address, browser type, device information, and website usage through cookies and analytics tools.
-
Marketing Preferences: Your consent choices regarding receiving updates, newsletters, or promotions.
3. Lawful Basis for Processing
We only process your personal data when we have a lawful basis under UK GDPR, which includes:
-
Contract: To deliver the itineraries and services you purchase.
-
Legal Obligation: To comply with applicable UK laws (e.g., tax and accounting).
-
Legitimate Interests: To improve our Website, services, and customer experience (where this does not override your rights).
-
Consent: For marketing communications. You may withdraw consent at any time.
4. How We Use Your Data
We may use your personal data to:
-
Provide and deliver itineraries you purchase.
-
Process payments securely.
-
Respond to enquiries and customer support requests.
-
Improve our Website and services.
-
Send you marketing communications if you have consented.
5. Sharing Your Data
We do not sell or rent your personal data. We may share it with:
-
Service Providers: Such as payment processors, IT support, hosting, and analytics providers, only where necessary to provide our services.
-
Legal Authorities: Where required by law or to protect our legal rights.
All third parties we work with are required to respect the security of your personal data and process it in accordance with the law.
6. International Transfers
If any of our service providers transfer data outside the UK, we ensure appropriate safeguards are in place (e.g., UK-approved Standard Contractual Clauses) to protect your data.
7. Data Retention
We will only keep your personal data for as long as necessary to fulfil the purposes we collected it for, including satisfying legal, accounting, or reporting requirements.
-
Customer data linked to purchases: kept for 6 years (to comply with UK tax law).
-
Marketing data: kept until you withdraw consent or unsubscribe.
8. Your Rights Under UK GDPR
You have the following rights:
-
Access: Request a copy of the personal data we hold about you.
-
Rectification: Request corrections to inaccurate or incomplete data.
-
Erasure (“Right to be Forgotten”): Request deletion of your data where lawful.
-
Restriction: Request limitation of processing in certain cases.
-
Data Portability: Receive your personal data in a structured, commonly used format.
-
Object: Object to processing based on legitimate interests or direct marketing.
-
Withdraw Consent: Where we rely on consent (e.g., for marketing), you may withdraw it at any time.
To exercise your rights, please contact us at [Insert Contact Email].
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority: www.ico.org.uk.
9. Cookies and Tracking
Our Website uses cookies to improve your browsing experience, analyse traffic, and understand how users interact with our site.
You can manage or disable cookies in your browser settings.
10. Data Security
We take appropriate technical and organisational measures to protect your personal data from accidental loss, unauthorised access, alteration, or disclosure.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our Website, and significant changes will be notified to users where appropriate.