Dose of Holiday

Privacy Policy

Last updated: May 2026

Dose of Holiday ("we", "us", "our") operates doseofholiday.com. This Privacy Policy explains what personal data we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.

1. Who we are

Dose of Holiday is an independent travel website operated from the United Kingdom. For data protection enquiries, contact: privacy@doseofholiday.com.

2. What data we collect

Email address

If you subscribe to our newsletter, we collect your email address. This is stored securely in Kit (ConvertKit), our email service provider.

Usage and analytics data

With your consent, we collect anonymised usage data including pages visited, time on page, and general location (country/city level) via Google Analytics 4 and behavioural data via Hotjar. IP addresses are anonymised before storage. This data is never sold to third parties.

Cookies

We use cookies to store your consent preferences and (with your permission) to run analytics. See our Cookie Policy for full details.

3. How we use your data

  • Email address: to send you our newsletter and holiday deals you opted into. You can unsubscribe at any time.
  • Analytics data: to understand which content is useful and to improve the site.
  • Affiliate click data: tracked by our affiliate partners (Travelpayouts, Booking.com, etc.) for commission attribution. We receive aggregate reporting only — not your personal identity.

4. Legal basis for processing

  • Newsletter subscription: consent (you opted in)
  • Analytics: consent (cookie banner acceptance)
  • Affiliate commission reporting: legitimate interest

5. Data retention

Email subscribers are retained until they unsubscribe. Analytics data is retained for 14 months in Google Analytics (default). We do not hold any other personal data longer than 12 months.

6. Third-party services

We use the following third-party processors:

  • Sanity.io — CMS, hosted in the EU (content only, no user data)
  • Vercel — web hosting (processes server logs for up to 30 days)
  • Kit (ConvertKit) — email marketing, US-based, EU-UK data transfer covered by SCCs
  • Google Analytics 4 — analytics, US-based, anonymised
  • Hotjar — heatmaps, EU-based
  • Travelpayouts — affiliate tracking (click data only)

7. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Object to or restrict processing
  • Data portability
  • Withdraw consent at any time (e.g. unsubscribe from emails)

To exercise any of these rights, email privacy@doseofholiday.com. We will respond within 30 days.

If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page reflects the most recent revision.