Privacy Policy

Last updated 1 June 2026

This privacy policy (together with our terms of use available here) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us when you use our services.

The Spontaneous Travel Company as data controller

The data controller is The Spontaneous Travel Company Limited of 76 Atlantic Close, Southampton, United Kingdom, SO14 3TB.

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to hello@autoura.com

UK Data Protection Act registration: ZA822421

EU GDPR Representative (Article 27): Prighter (Maetzler Rechtsanwalts GmbH & Co KG, Schellinggasse 3/10, 1010 Vienna, Austria)

How do we collect information about you?

We mainly collect and process data in connection with app, website or API usage:

• Our apps (Autoura Connect, Autoura Host) available from the Apple App Store and the Google Play Store (our Apps)
• Our websites, available at www.Autoura.com, www.Autoura.me, www.PlanMyVisit.to, www.Uptaste.com, www.PlanMyVisit.to (our Websites)
• Our API, available at api.Autoura.com (our API)
• any of the services (whether provided by us or a third party) accessible through the App or our Website (the Services).

What information do we collect from you?

Information you give us

This is information you give us about you by filling in forms via our App or Website, by corresponding with us (for example, by e-mail or chat), or by using specific functionality. It includes information you provide when you register to use our App or Website, create an account with our App or Website, share data via our App or Website’s social media functions, enter a competition, promotion or survey, when you report a problem with our App, our Website, or the Services, or through data you have shared with us from other applications or services.

During your use of our Apps or Website, you may also give us information about your wishlist, upcoming and current trip plans, friends and current group make-up.

If you contact us, we will keep a record of that correspondence. The information you give us may include your name, address, e-mail address and phone number, the device’s phone number, age, username, password and other registration information (such as your dietary preferences), financial and credit card information, personal description and photograph.

Information we collect automatically

Each time you use our App or Website, we will automatically collect the following information:

Technical information, including the type of device you use, a unique device identifier (for example, your device’s IMEI number, the MAC address of the device’s wireless network interface), mobile network information, your mobile operating system, the type of mobile browser you use, user interface language and time zone setting

Details of your use of our App or your visits to our Website including, but not limited to traffic data, weblogs and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access.

Location information

We also use your device’s inbuilt system (such as GPS) to determine your current location. Some of our (and integrated third party) location-enabled services (such as navigation) require your personal data for the feature to work.

If you wish to use the particular feature, you will be asked to consent to your data being used for this purpose. You can withdraw your consent at any time by changing the settings on your phone.

Deleting your personal data

Designers, Brands & Suppliers

You may set your profile as disabled. This data is considered commercial (not personal) data and is disabled rather than deleted.

Consumers

You may delete your Autoura profile via the Autoura.me website or the Autoura Connect app.

After 3 years of inactivity we will consider you inactive. We may delete your profile automatically.

Ticketing data will be retained for 10 years and is not deleted as part of the profile deletion process.

Exercise your data subject rights under GDPR

We provide you with an easy way to submit us privacy related request like a request to access or erase your personal data. If you want to make use of your data subject rights. Please visit our public privacy landing page.

Within Autoura.me website and the Autoura Connect app you can export your profile data. This includes information you have set, bookings & activity. (You must have verified your email address in order to use this option).

Personal data sharing

We do not disclose information about identifiable individuals to third parties, but we may provide them with anonymous aggregate information about our users.

Where you are taking a service from a third party (such as navigating a route or buying a ticket) we may share with the third parties identified to you in the App and on our Website to which you have consented to us transferring your data. This enables the third parties to deliver or more accurately tailor their services to meet your needs and preferences.

Where you use the Autoura preferences technology (Access with Autoura) to share your profile & preferences with independent organisations, the extent of your data that is shared, and selection of who you share with are under your direct control.

Where you use the Autoura Connect companions features to share your profile & preferences with friends you are connected to, the extent of your data that is shared, and selection of who you share with are under your direct control. In some situations, your friends that you are currently travelling with may share your profile & preferences on your behalf. If you don't want them to do this, don't connect to them as a friend. If your friends do this the share is logged and visible within your profile.

Any data sharing associated with an Autoura profile is logged and visible within your profile so you can see who has your data. In some integrations, consumers may book using our services without creating a profile on the Autoura platform, in which case data sharing is not logged.

In addition, we will disclose your personal information to third parties:

In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets;

If The Spontaneous Travel Company Limited or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets;

If we are under a duty to disclose or share your personal data in order to comply with any legal or regulatory obligation or request.

In order to:

• enforce or apply our Terms of Use and other agreements or to investigate potential breaches; or
• protect the rights, property or safety of The Spontaneous Travel Company Limited, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

Additionally, we have the right to disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the Companies Act 2006.

Where we store your personal data

The data that we collect from you will be transferred to, and stored at, a destination outside the European Economic Area (EEA). It will also be processed by staff operating outside the EEA who work for us or for one of our suppliers. These staff may be engaged in the fulfilment of your request, order or reservation, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

All information you provide to us is stored on our secure servers. Where we have given you (or where you have chosen) a password that enables you to access certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

We will collect and store personal data on your device using application data caches and browser web storage.

Internet & links

Our Website and App may, from time to time, contain links to and from the websites of our partner networks (including, but not limited to, websites on which the App or the Services are advertised). If you follow a link to any of these websites, please note that these websites and any services that may be accessible through them have their own privacy policies and that we do not accept any responsibility or liability for these policies or for any personal data that may be collected through these websites or services, such as contact and location data. Please check these policies before you submit any personal data to these websites or use these services.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Website or App; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Changes

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you when you next start the App or signin to the Website. The new terms may be displayed on-screen and you may be required to read and accept them to continue your use of our App, our Website or the Services.

Sub-contractors & Sub-processors