Privacy Policy

Who we are

The Good Travel Agent (“we”, “us”) is the data controller for the personal data described in this policy. We operate a travel agency network in the United Kingdom, a public website, an agent platform (“Inspire”) and the Inspire mobile app for our agents.

If you have any question about this policy or how we handle your data, contact us at privacy@thegood.co.uk.

Who this policy covers

This policy applies to three groups:

• Customers who enquire about or book travel with us.
• Agents — self-employed travel agents in our network who use the Inspire platform and mobile app.
• Visitors to our websites.

What we collect

If you are a customer

• Contact details — name, email address, telephone number, postal address.
• Booking details — destination, travel dates, traveller names, party composition and the price and payment status of your holiday.
• Correspondence with us or with your agent.

If you are an agent

• Account details — name, email address, telephone number and your agent code.
• Business records — the bookings you make, the commission you earn, your statements and payment details, and your service-fee status.
• Platform activity — sign-in times, and a record of when a shared supplier credential is revealed (who, when, and from where), which we keep for security.

From the mobile app

The Inspire mobile app is for our agents only. It signs you in with your email address and password, and shows you your own commission figures, your bookings and our tour operator directory. In addition to the account and business data above, we process basic technical information (app version, device type and operating system) and diagnostic reports when something goes wrong.

The app does not collect your location, contacts, photos, or any advertising identifier, and it contains no third-party advertising or analytics trackers.

Why we use it, and our legal basis

• To provide our services — arranging and administering your travel, or operating the agent platform. Legal basis: performance of a contract.
• To pay our agents — calculating and settling commission. Legal basis: performance of a contract.
• To keep the platform secure — authentication, fraud prevention, and audit logs of access to shared credentials. Legal basis: legitimate interests.
• To meet our legal duties — financial, tax and travel-industry record keeping. Legal basis: legal obligation.
• To contact you about your booking or your account. Legal basis: performance of a contract. Marketing, where we send it, is sent only with your consent and you can withdraw it at any time.

Who we share it with

We do not sell your personal data, and we do not share it for advertising. We share it only with:

• Travel suppliers — airlines, hotels, tour operators and similar, where this is necessary to make your booking.
• Your agent, if you booked through one of our network agents.
• Service providers acting on our instructions — including Google (Firebase, for hosting, authentication and our database), and providers who deliver our email and messaging, process payments, and support our accounting.
• Authorities or regulators, where we are legally required to do so.

Some of these providers process data outside the UK. Where that happens, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or an adequacy decision.

How long we keep it

We keep booking and financial records for at least seven years, to meet UK tax and accounting requirements. Agent account records are kept for the duration of the agent’s relationship with us and for seven years afterwards. Security and access logs are kept for a shorter period appropriate to their purpose. When data is no longer needed, we delete it or anonymise it.

How we protect it

Access to the platform requires an individual account, and what each person can see is restricted to their own role — agents can see their own bookings and commission, not other agents’. Shared supplier passwords are stored encrypted and are only ever decrypted on our servers, with every access recorded. Data is encrypted in transit.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct data that is wrong or incomplete;
• ask us to delete data, where we have no continuing reason to keep it;
• object to or ask us to restrict how we use it;
• ask us to transfer it to another provider; and
• withdraw consent at any time, where we relied on consent.

To exercise any of these, email privacy@thegood.co.uk. We will respond within one month.

You also have the right to complain to the Information Commissioner’s Office (ico.org.uk), though we would appreciate the chance to resolve your concern first.

Deleting your account

Agents can request deletion of their account by emailing privacy@thegood.co.uk. Note that we must retain booking and commission records for the periods described above, even after an account is closed.

Changes to this policy

If we make a significant change we will update the date at the top of this page and, where appropriate, tell you directly.