Privacy Policy
This policy explains what personal data TripBreeze collects, why, who we share it with, and the choices you have.
1. Who is responsible
Cupcakes Holdings LTD (Nof Shadmot 34, Herzliya, Israel) is the controller of personal data processed through mytripbreeze.com. Contact us at privacy@mytripbreeze.com.
2. What we collect
- Search and concierge data — destinations, dates, number of travellers, preferences and messages you send to the concierge.
- Account and contact data — name and email if you create an account, subscribe to emails or contact us.
- Usage and device data — IP address, browser and device type, approximate location derived from IP, pages viewed, clicks to Providers and referral source.
- Cookie data — see our Cookie Policy.
We do not collect payment card details: bookings and payments happen on Providers’ sites.
3. How we use it and why
- To run the Service, show relevant results and power the concierge (performance of our contract with you).
- To measure and improve the Service, prevent fraud and keep it secure (our legitimate interests).
- To track clicks to Providers so affiliate commissions can be attributed (our legitimate interests).
- To send newsletters and price alerts you sign up for (your consent, which you can withdraw anytime).
- To comply with legal obligations.
4. Who we share it with
- Providers and affiliate networks (for example Expedia, Agoda, Booking.com, KAYAK and Vio.com, or networks acting for them) — when you click through, they receive referral and tracking information so the click and any booking can be credited. Data you then give them is governed by their own privacy policies.
- Service providers — hosting, analytics, email delivery and AI/processing vendors acting on our instructions.
- Authorities and advisers — where required by law or to protect our rights.
- A buyer or successor — if our business is sold or reorganised.
We do not sell your personal data for money. Where sharing for cross-context advertising counts as a “sale” or “sharing” under US state laws, you can opt out as described below.
5. International transfers
We are based in Israel and our vendors may process data in other countries, including the United States and the EU. Where required, we use appropriate safeguards such as Standard Contractual Clauses.
6. How long we keep it
We keep personal data only as long as needed for the purposes above: typically up to 24 months for usage and click data, until you unsubscribe or delete your account for account and email data, and longer where the law requires.
7. Your rights
Depending on where you live (including under the GDPR, UK GDPR, Israel’s Privacy Protection Law and US state laws such as the CCPA/CPRA), you may have the right to access, correct, delete or port your data, object to or restrict processing, withdraw consent, and opt out of targeted advertising or the “sale/sharing” of data. Email privacy@mytripbreeze.com to make a request; we will respond within the time the law requires. You may also complain to your local data-protection authority.
8. Security
We use reasonable technical and organisational measures to protect personal data, but no system is perfectly secure.
9. Children
The Service is not intended for children under 16, and we do not knowingly collect their data.
10. Changes
We may update this policy and will change the date above when we do. Material changes will be highlighted on the site or by email.