Privacy Policy

Wicket Travel is a trading name of Wicket Travel Limited, a private limited company registered in England and Wales (company number 17001759), registered office Lampton Avenue, Hounslow, England, TW3 4EW. We are the controller of the personal data described in this policy.

Questions about your data, or a request to use any of your rights: email info@wickettravel.comwith “Privacy” in the subject, or write to us at our registered office.

Hotels, car hire and holidays linked from our site are sold by our sister company, Wicket Travel Holidays, which has its own privacy policy. This policy covers wickettravel.com and our booking portal (portal.wickettravel.com).

We collect what you give us, and a small amount of technical data needed to run the site:

• Flight bookings.The details an airline needs to issue a ticket: each traveller's name as on their passport, date of birth, gender, nationality, passport number and expiry where the airline or destination requires them, contact details, travel dates and preferences, any special assistance you ask for, the price we quoted, your payment record (method, amount, date — not your full card number), and the messages and documents in your booking.
• Your portal account. Name, email address, phone number and sign-in details for our booking portal. Passwords are stored only in hashed form by our authentication provider.
• Contact and quote requests. Your name, email address, phone number (optional), the topic, route and dates you give, and your message.
• Dubai visa service. Your enquiry (visa type, name, email, phone and notes). If you go ahead, the details the UAE application asks for: travel dates and plans, full name, date and place of birth, nationality, gender, marital status, UK address, passport details, UK visa or residence permit details, previous UAE visas, occupation and employer, who pays for the trip, whether you have been refused entry to the UAE or have a criminal conviction, and the documents you upload (such as a passport scan and photograph).
• Parent Travel Assist.If you post a request or offer: your name and contact details, the route, date and airline, languages spoken, your notes and amount, and, for a family request, your relative's name, age, your relationship and the help or mobility support they need. If you verify your identity: your legal name, date of birth, phone number and a photo ID document. If you report a safety concern: what you tell us.
• Deal emails. Your email address and a record of when and how you agreed to receive them.
• WhatsApp and phone. Your number, name as shown on WhatsApp, and our conversation with you.
• Technical data. Our hosting provider records your IP address, browser type and the pages requested, to deliver and secure the site. We store your cookie choice and your language choice on your device. With your consent only, analytics tools record how the site is used (see our Cookie Policy).

If you give us details about other travellers (for example family members, or a parent for Parent Travel Assist), please make sure they know you are sharing them with us and point them to this policy.

Some of what you may tell us is special category or criminal offence data under UK GDPR:

• Health and mobility needs, such as a wheelchair request for a flight or the support a relative needs on Parent Travel Assist.
• Whether you have a criminal conviction, which the UAE visa application asks.

We only collect this when you choose to give it, and only with your explicit consent, which we ask for separately before you give it (UK GDPR Article 9(2)(a), and for criminal offence data the consent condition in Schedule 1 of the Data Protection Act 2018). We use it only to arrange the help or application you asked for, share it only with the airline, the UAE visa authorities or the matched helper who needs it, and you can withdraw your consent at any time by emailing info@wickettravel.com. If you do, we may not be able to continue with that request.

Under UK GDPR we need a lawful basis for each use:

• To quote for, book and look after your flights — including changes, cancellations, refunds and airline notifications (performing our contract with you, or steps you ask for before it).
• To prepare and submit your visa application and keep you updated (contract; explicit consent for criminal-record answers).
• To run Parent Travel Assist — reviewing posts, publishing the shortened listing you asked for, introducing matches and handling safety reports (contract; explicit consent for health and mobility details; our legitimate interest in keeping members safe).
• To answer your messages and quote requests (our legitimate interest in replying to enquiries, or steps before a contract).
• To keep booking, payment and accounting records (legal obligation).
• To send deal emails (your consent, which you can withdraw at any time).
• To keep the site and portal secure, prevent fraud and fix problems (legitimate interests).
• To measure how the site is used, only if you allow analytics cookies (consent).
• To handle complaints and legal claims (legitimate interests; legal obligation).

We do not make decisions about you by purely automated means, and we do not use your data for profiling or targeted advertising.

We only send deal emails if you ticked the opt-in box when you signed up. Every email has an unsubscribe link, or you can email info@wickettravel.com. We never send marketing by WhatsApp or text unless you ask us to, and we never sell or rent our mailing list. Booking messages (confirmations, schedule changes) are not marketing and are sent whether or not you have opted in.

We share personal data only where needed to provide what you asked for:

• Airlines and their ticketing systems, to book and issue your ticket. Airlines may pass passenger details to border and immigration authorities, as the law requires.
• UAE immigration authorities, and any authorised application channel we must use, to submit your visa application.
• Other Parent Travel Assist members: only the shortened listing you agreed to publish (first name and last initial, route, date, airline and amount), and to a matched member only the details needed for the introduction you both agreed to.
• Our service providers, who process data for us under contract: Netlify (hosting the website), Vercel (hosting the portal), Supabase (the portal's database, sign-in and private document storage), Resend (delivering emails sent from our website forms), our business email provider, WhatsApp (Meta) for chats you start with us, our card payment provider and bank for payments, and — only with your consent — Google Analytics and Trustpilot's review widget.
• Professional advisers, insurers, and authoritiessuch as HMRC or the police, where the law requires it or to protect someone's safety.
• Wicket Travel Holidays, only if you ask us to pass on a hotel, car hire or holiday enquiry.

We do not sell your personal data.

Some providers (such as Netlify, Vercel, Supabase, Resend, Meta and Google) may store or access data outside the UK, for example in the United States. We rely on UK adequacy regulations (including the UK–US data bridge) or the UK International Data Transfer Agreement or Addendum. When you book with an airline based abroad, or apply for a UAE visa, your details must go to that country to provide the service you asked for.

• Bookings (traveller details, quotes, payment records, messages): 6 years after the end of the financial year in which you travelled, to meet tax and accounting rules and deal with claims; then deleted.
• Passport scans and other documents uploaded for a booking: deleted 3 months after your return date (or travel date for a one-way trip), unless a claim or dispute is open.
• Visa applicationsand their documents: deleted 6 months after the UAE authorities' decision; payment records are kept as booking records.
• Parent Travel Assist: listings come off the board once the travel date has passed or you withdraw them; posts and messages are deleted 12 months after the travel date. Photo ID documents are deleted within 30 days of our verification decision (we keep only the result). Safety reports are kept for up to 6 years.
• Contact and quote messagesthat don't lead to a booking: up to 24 months, then deleted.
• Portal accounts: until you ask us to close yours, or after 3 years without a sign-in or booking (bookings themselves are kept as above).
• Deal emails: until you unsubscribe. We then keep only your email address on a do-not-contact list, so we don't email you again.
• Your cookie choice: 6 months, then we ask again. Analytics data, if you allowed it: no more than 14 months.

The website and portal use encrypted connections (HTTPS). Documents you upload are kept in private storage that only you and our team can open, through links that expire. Staff access is limited to what each person needs. We never ask for your full card details by WhatsApp or email. If a personal data breach is likely to put you at risk, we will tell you and the ICO as the law requires.

Under UK data protection law you can ask us to:

• give you a copy of the personal data we hold about you (access);
• correct anything inaccurate (rectification);
• delete your data where we no longer need it (erasure);
• restrict how we use it, or object to a use based on our legitimate interests;
• give you your data in a portable format;
• stop marketing at any time, and withdraw any consent you gave.

Email info@wickettravel.com. It's free, and we reply within one month (we may ask for proof of identity first). Some data we must keep by law, for example booking and payment records, and we'll tell you if that applies.

Bookings must be made by an adult (18 or over). We process children's details only as travellers on a booking made by their parent or guardian. Our deal emails, portal accounts and Parent Travel Assist posts are for adults only.

If you are unhappy with how we have handled your data, please tell us first at info@wickettravel.comso we can put it right. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint or 0303 123 1113.

We update this policy when what we do changes, and show the date at the top. If a change affects how we use data you have already given us, we will tell you before it applies.