Last updated: 18 February 2025
This privacy notice for WithU Travel Limited (doing business as TrvlWell) ("we", "us", or "our") describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:
Visit our website at https://trvlwell.co (or any website of ours that links to this privacy notice)
Download and use the app, whether from the Apple App Store, the Google Play store or otherwise
Engage with us in other related ways, including any sales, marketing, enquiry or events
If you have any questions or concerns, reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. For any further inquiries, please contact us at support@trvlwell.net
This summary provides key points from our privacy notice. For more details on each topic, click the corresponding link below or refer to the Table of Contents.
What personal information do we process?When you visit our website, use our Services or otherwise interact with us, we may process personal information based on your interactions, choices, and the products and features you use.
Do we process any sensitive personal information?We may collect or be able to infer health information, such as what activities you do, and how often, when you use our services. Where we are able to identify you and connect you with that information it is considered sensitive personal information under certain laws. We will not collect such information without your consent, and you can withdraw your consent at any time.
Do we collect any information from third parties?We do not collect any personal information from third parties.
How do we process your information?We process your information to provide, improve, and administer our Services, communicate with you, ensure security and fraud prevention, and comply with legal obligations.
When and with whom do we share personal information?We may share your information in specific situations and with certain categories of third parties.
How do we keep your information safe?We have organizational and technical measures in place to protect your information, though no system is 100% secure.
What are your rights?Depending on your location, applicable privacy laws may grant you certain rights regarding your personal information.
How do you exercise your rights?You can exercise your rights by submitting a data subject access request or otherwise by contacting us.
For the full details, please review the complete privacy notice below.
Please note that in general in the delivery of our services to you we will not process any personal data, meaning that the data we request from you through the App will not allow us to identify you. It may be that you provide us additional information, or contact us in a way that allows us to identify you, in which case we will be processing your personal data.
What Legal Bases Do We Rely On to Process Your Personal Information?
How Can You Review, Update, or Delete the Data We Collect From You?
In Short: We collect personal information that you voluntarily provide, or when you provide it as a representative of a business that wishes to engage with us.
Details:When you express an interest in obtaining information about us or our Services, participate in activities on our Services, use our App, or contact us, you may provide:
Personal Information Provided by You:This may include your name, phone number, and email address. In some situations you may provide us with details of your travel arrangements, health and wellness preferences. All personal information you provide must be true, complete, and accurate. Please notify us of any changes.
Sensitive Information:We do not process sensitive information.
In Short: Some information, such as your IP address and browser/device characteristics, is collected automatically when you visit our Services.
Details:We automatically collect device and usage information (e.g., IP address, browser type, operating system, language preferences, referring URLs, device name, country, location, usage data, and technical information) needed to maintain the security and operation of our Services and for analytics.
This also includes:
Log and Usage Data: Information recorded in log files.
Device Data: Information about the device you use to access our Services.
Location Data: Information about your device’s location (precise or imprecise). You can opt out by disabling your device’s location setting.
Purpose:We process your information to:
Provide, improve, and administer our Services.
Communicate with you.
Ensure security and prevent fraud.
Comply with legal obligations.
Process your information for other purposes with your consent.
Legal Reason:We process your information only when we have a valid legal reason.
Please note that if you are a consumer and download the App through the Apple App Store, or Google Play, then we do not process any payment information, or, in the first instance, your personal details. The Apple/Google system will deal with those directly, and only give us a user ID number that represents your account. Without further identifying information from you directly, this will not be personal data, and any data processed through the App without additional information will therefore not constitute personal data.
In Short:We process your personal information only when necessary and when we have a valid legal basis, such as:
Consent:You give us permission to process your information for a specific purpose (which you can withdraw at any time).
Legal Obligations:Processing is necessary to comply with legal obligations, to fulfil or negotiate a contract with you on behalf of the organisation you represent, cooperate with law enforcement, exercise legal rights, or provide evidence in litigation.
Vital Interests:Processing is necessary to protect your vital interests or those of another person.
Note: For users in the EU/UK, a version of GDPR applies; for users in Canada, processing may be based on express or implied consent or other legal grounds.
Sharing with Third Parties:We may share your information with:
Vendors, Consultants, and Service Providers:Third parties who perform services on our behalf. They are contractually obligated to protect your information and only process it as instructed by us.
Categories of other Third Parties:This may include ad networks, affiliate marketing programs, communication tools, cloud services, data analytics providers, data storage providers, finance and accounting tools, order fulfilment providers, payment processors, performance monitoring tools, product engineering and design tools, sales and marketing tools, social networks, website hosting providers, user account registration and authentication services, and testing tools.
Other Situations:
Business Transfers: In connection with mergers, acquisitions, or asset sales.
Google Maps Platform APIs: We may share location data with these APIs; you can revoke consent by contacting us.
Affiliates and Business Partners: Your information may be shared with our affiliates (including parent and subsidiary companies) and business partners under the same privacy notice.
In all cases we will ensure that the contracts we have with third parties that involve the processing of your personal data will bind those third parties to their legal obligations to protect your data. In addition, we will not provide your data to third parties for marketing or advertising purposes without your consent.
In Short:We use cookies and similar technologies to collect and store your information.
Details:These tracking technologies help us:
Maintain the security and functionality of our Services.
Prevent crashes, fix bugs, save your preferences, and assist with site operations.
Provide analytics and advertising, tailored to your interests.
Opt-Out:Third parties may use these technologies; you can opt out of targeted advertising through the options provided in our Cookie Notice.
Example: We use Google Analytics. To opt out, visit Google Analytics Opt-out and refer to the Google Privacy & Terms page.
Retention:We keep your personal information only as long as necessary to fulfil the purposes outlined in this notice, unless a longer retention period is required or permitted by law (e.g., for tax or accounting purposes).
Typically, no personal information is kept for longer than 2 years after our last contact with you, or if you are subscribed to the App, two years after you cease to use it. When no longer needed, your information will be deleted or anonymised.
Security Measures:We have implemented appropriate technical and organisational security measures designed to protect your personal information.
Please note: No method of electronic transmission or storage is 100% secure. Although we work hard to protect your information, we cannot guarantee absolute security. You should access our Services only within a secure environment.
Children Under 18:We do not knowingly collect data from or market to children under 18. By using our Services, you represent that you are at least 18 years old, or that you are the parent or guardian of a minor who has consented to use our Services.
If we learn that we have collected personal information from a child under 18, we will take steps to delete it promptly.
Your Rights:Depending on your jurisdiction (e.g., US, EEA, UK, Switzerland, or Canada), you may have rights such as:
The right to access and obtain a copy of your personal information.
The right to request rectification or erasure.
The right to restrict processing.
The right to data portability.
The right not to be subject to automated decision-making.
In some cases, the right to object to processing.
To exercise these rights, please contact us as outlined in Section 13.
In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by contacting us by using the contact details provided in the section 13 below.
We will consider and act upon any request in accordance with applicable data protection laws. If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority.
If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.Withdrawing your consent: If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section 13 below. However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ('DNT') feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.
California law requires us to let you know how we respond to web browser DNT signals. Because there currently is not an industry or legal standard for recognising or honouring DNT signals, we do not respond to them at this time.
In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Montana, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law.
You have rights under certain US state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include:
• Right to know whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request the deletion of your personal data
• Right to obtain a copy of the personal data you previously shared with us
• Right to non-discrimination for exercising your rights
• Right to opt out of the processing of your personal data if it is used for targeted advertising (or sharing as defined under California’s privacy law), the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ('profiling')
Depending upon the state where you live, you may also have the following rights:
• Right to obtain a list of the categories of third parties to which we have disclosed personal data (as permitted by applicable law, including California's and Delaware's privacy law)
• Right to obtain a list of specific third parties to which we have disclosed personal data (as permitted by applicable law, including Oregon’s privacy law)
• Right to limit use and disclosure of sensitive personal data (as permitted by applicable law, including California’s privacy law)
• Right to opt out of the collection of sensitive data and personal data collected through the operation of a voice or facial recognition feature (as permitted by applicable law, including Florida’s privacy law)
How to Exercise Your Rights. To exercise these rights, you can contact us by submitting a data subject access request, by emailing us at privacy@trvlwell.co, or by referring to the contact details at the bottom of this document. We will honour your opt-out preferences if you enact the Global Privacy Control (GPC) opt-out signal on your browser. Under certain US state data protection laws, you can designate an authorised agent to make a request on your behalf. We may deny a request from an authorised agent that does not submit proof that they have been validly authorised to act on your behalf in accordance with applicable laws.
Request Verification. Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes. If you submit the request through an authorised agent, we may need to collect additional information to verify your identity before processing your request and the agent will need to provide a written and signed permission from you to submit such request on your behalf.
Appeals. Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing us at support@trvlwell.net We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may submit a complaint to your state attorney general.California 'Shine The Light' LawCalifornia Civil Code Section 1798.83, also known as the 'Shine The Light' law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year.
If you are a California resident and would like to make such a request, please submit your request in writing to us by using the contact details provided in the section 13
Updates:We may update this privacy notice from time to time. When we do, we will revise the "Last updated" date at the top of this document. We encourage you to review this notice periodically for any changes.
Contact Information:If you have any questions or concerns regarding this privacy notice, please contact us at:
Email: support@trvlwell.net
by post at: WithU Travel Limited, Data Protection Officer, The Carriage House, Mill St, Maidstone ME15 6YE, UK
Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information.
You may also have the right to withdraw your consent to our processing of your personal information.
These rights may be limited in some circumstances by applicable law.
To request to review, update, or delete your personal information, please fill out and submit a data subject access request.
