Privacy notice — Triptold

Last updated: 30 August 2026

Who we are

Triptold Ltd (“Triptold”, “we”, “us” or “our”) is the controller of the personal information described in this notice.

Triptold is a curated matchmaking service connecting travel brands with creators.

Company number: 16836819

Registered office: Flat 9 Spicers Court, St. Pauls Hill, Winchester, England, SO22 5ER

This notice applies to creators and prospective creators, people referred to us as potential creators, brand clients and their representatives, prospective brand clients, newsletter subscribers and visitors to our website.

How we obtain personal information

We collect personal information directly when you:

complete an application, enquiry, campaign or subscription form;
communicate with us by email, social media or another channel;
discuss or take part in a campaign; or
use our website and consent to analytics technologies.

We may also obtain information indirectly from:

public social media profiles, professional profiles, company websites and other public business sources;
another person at your organisation;
a brand, creator or other person who refers or introduces you; or
information produced during our assessment and matching process.

If we obtain your information indirectly, we will tell you about the processing within a reasonable period and no later than one month after obtaining it. If we contact you or intend to disclose your information sooner, we will provide the information no later than that first contact or disclosure.

Creator referrals

Our forms may allow a creator to suggest another creator who may be suitable for Triptold. A referral may include information such as the referred creator’s name, social media handle or profile link, professional contact details and the reason for the recommendation.

We ask referrers to provide only relevant professional information and not to submit private or sensitive information about another person.

We use referral information to identify and assess potentially suitable creators. A referral does not subscribe the referred creator to our newsletter and does not amount to consent to receive marketing. We will provide the referred creator with this privacy information within the timescales described above and before including identifiable information about them in a shortlist sent to a brand.

The information we use

Depending on your relationship with us, we may use:

identity and contact information, such as your name, email address, professional contact details, location and social media handles;
professional and creator information, such as profile links, publicly available posts or content, follower and engagement information, audience information, application answers, campaign preferences and availability;
brand and campaign information, such as your employer, role, communications, campaign requirements and information connected with a brief;
assessment and matching information, such as referral source, fit notes, relevant content examples and our written reasoning about a potential match;
marketing information, such as subscription preferences, consent records, messages sent, engagement, objections, unsubscribe status and suppression records; and
website information, such as cookie and device identifiers, consent choices, page views, interactions, referral source, approximate location, browser, device and session information.

We do not intend to collect or infer special category information, such as information about health, ethnicity, religion, political opinions or sexual orientation, when researching or assessing creators. Please do not include this information about another person in a referral.

Why we use personal information

Purpose

Lawful basis

Purpose

Develop and manage relationships with brand clients, identify relevant organisations and contacts, and gather campaign requirements

Lawful basis

Our legitimate interests in developing and operating Triptold and communicating with corporate clients. Where the client is an individual or sole trader, we may also use information to take steps at their request before entering a contract or to perform a contract with them.

Purpose

Receive creator applications and identify, research and assess prospective creators, including people found through public sources or referrals

Lawful basis

Our legitimate interests in identifying suitable creators and operating the matching service. Where a creator applies or asks us to take steps towards an agreement, the processing may also be necessary to take those steps or perform a contract.

Purpose

Prepare and share a creator suggestion list or shortlist with a brand client

Lawful basis

Our legitimate interests in matching creators with relevant campaign opportunities and enabling the brand to select suitable creators. We provide the creator with privacy information and check for unresolved objections before disclosing identifiable information.

Purpose

Measure and improve website performance

Lawful basis

Your consent. Optional analytics technologies are not used until you consent.

Purpose

Send targeted business-to-business marketing to relevant employees and representatives of corporate brand clients

Lawful basis

Our legitimate interests in promoting Triptold to relevant corporate contacts where the electronic marketing rules permit this without consent. We use consent where it is required.

Purpose

Send newsletters and marketing communications to creators and manage subscriptions

Lawful basis

Your consent. We use our legitimate interests to keep the minimum consent evidence and suppression information needed to demonstrate compliance and avoid contacting people who have opted out.

Where we rely on legitimate interests, we consider whether the processing is necessary and balance our interests against the person’s interests, rights and reasonable expectations.

Creator assessment and matching

Triptold may assess public content, audience information, campaign preferences, availability and other relevant information to decide whether a creator may be a suitable match for a campaign. We may record concise assessment or fit notes.

Our creator recommendations are reviewed and made by people. We do not make decisions about creators that have legal or similarly significant effects based solely on automated processing.

Who we share personal information with

We may share personal information with:

a prospective or existing brand client and the employees or representatives involved in selecting creators, where we provide a creator shortlist;
Google Workspace, including Google Sheets, for customer and creator relationship management, business email, collaboration and storage;
Formspree for receiving and processing submissions made through our website forms;
Cloudflare for website hosting, content delivery and website security;
Google Analytics, Google Tag Manager and CookieYes for website analytics and consent management, where relevant; and
professional advisers, regulators, courts, law-enforcement bodies or other authorities where disclosure is necessary to obtain advice, establish or defend legal rights, or comply with the law.

We disclose only the information reasonably needed for the relevant purpose. We do not sell personal information or allow our service providers to use it for their own marketing.

Before sending identifiable creator information to a brand client, we check that the creator has received the applicable privacy information and that there is no unresolved objection or suppression request.

International transfers

Some of our service providers process personal information outside the UK:

Google may process Google Workspace and analytics information in the United States and other countries. Transfers to Google LLC in the United States are covered by the UK Extension to the EU-US Data Privacy Framework. Google uses contractual safeguards for other restricted transfers where required.
Cloudflare may process website and security information in the United States and other countries. Transfers to Cloudflare in the United States are covered by the UK Extension to the EU-US Data Privacy Framework, with standard contractual clauses and the UK Addendum used where required for other restricted transfers.
Formspree processes website-form information in the United States. These transfers are covered by the European Commission’s Standard Contractual Clauses together with the UK Addendum.
CookieYes is established in the UK. Where its subprocessors make a restricted onward transfer, the transfer is covered by an applicable adequacy regulation or contractual safeguard.

You can contact us at hello@triptold.co for more information about the safeguards applying to a particular transfer.

How long we keep personal information

We keep personal information only for as long as it is needed for the purpose for which it was collected, including any contractual, accounting, legal-claims and compliance requirements. In particular:

prospective brand-client information is reviewed according to whether there is a continuing relationship or realistic business opportunity;
creator applications, research and assessment information are reviewed according to whether the creator remains relevant to the network or a potential campaign;
shortlist and campaign information is kept while selection or delivery is active and afterwards only where needed for the campaign record, contractual matters, accounting or legal claims;
Google Analytics user-level and event-level information is retained for two months, although aggregated reports may remain available for longer;
CookieYes consent logs may be retained for up to one year;
corporate marketing contacts are reviewed after six months without meaningful interaction and deleted within 12 months of the last interaction; and
creator subscription information is kept until consent is withdrawn, the creator unsubscribes or the subscription becomes inactive.

After marketing information is deleted, we may retain the minimum suppression record needed to respect an objection or unsubscribe request and avoid contacting the person again.

Marketing and your choices

Creators receive newsletters or other electronic marketing only where they have opted in. You can withdraw consent at any time by using the unsubscribe link in a message or contacting hello@triptold.co.

We may send relevant business-to-business marketing to employees or representatives of corporate organisations where permitted. Every message identifies Triptold and provides a simple way to opt out.

Withdrawing consent or objecting to marketing does not affect processing that took place before the withdrawal or objection. We may keep a minimal suppression record to make sure we respect your choice.

Cookies and analytics

We use CookieYes to record and manage cookie choices. Google Analytics and Google Tag Manager are blocked until you consent to analytics technologies. You can change or withdraw your choice at any time using the cookie settings control on our website. Withdrawing consent prevents future analytics collection but does not invalidate processing that took place while consent was active.

Further details about the individual technologies used should be provided in our cookie notice or cookie settings panel.

Security

We use proportionate technical and organisational measures designed to protect personal information. These include restricting access to authorised users, multi-factor authentication, least-privilege access, password-manager-protected credentials, encryption in transit and private storage where supported. No method of storing or transmitting information is completely secure.

Your rights

Depending on the circumstances, you may have the right to:

ask for a copy of your personal information;
ask us to correct inaccurate or incomplete information;
ask us to erase your information;
ask us to restrict how we use your information;
object to our use of your information;
receive information you provided in a portable format; and
withdraw consent at any time where we rely on consent.

These rights do not apply in every circumstance. To exercise a right, contact hello@triptold.co. We may need to confirm your identity before responding.

Your right to object

You have the right to object at any time to our use of your personal information for direct marketing. If you object, we will stop using it for that purpose.

You may also object where we rely on legitimate interests. We will stop the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims.

Creators can object to being researched, assessed or included in a shortlist by contacting hello@triptold.co. We will resolve the objection before making any new disclosure of their identifiable information.

Complaints

Please contact us first if you have a concern about how we use your information. You also have the right to complain to the Information Commissioner’s Office (ICO):

Website:ico.org.uk/make-a-complaint

Telephone: 0303 123 1113

Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Changes to this notice

We may update this notice when our service, suppliers or use of personal information changes. The date at the top shows when it was last updated. If a change materially affects how we use your information, we will take reasonable steps to bring it to your attention.

Stories that Travel