travlyr

Privacy Policy

Last updated: 20 February 2026

1. Introduction

This Privacy Policy explains how Travlyr Ltd ("we", "us", "our") collects, uses, stores and protects your personal data when you use our software and services. We are committed to protecting your privacy and complying with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR).

Travlyr provides software infrastructure only. We are not an accommodation provider. Property owners and operators who use our platform are solely responsible for their guests, bookings and compliance with their own legal obligations.

2. Who We Are

Travlyr Ltd is a company registered in the United Kingdom (England and Wales). We operate internationally, including in Southeast Asia. We build booking infrastructure for boutique hotels, villas, guesthouses and other hospitality operators. Our registered address and contact details are set out in section 12 below.

3. What Data We Collect

We may collect the following categories of personal data:

  • Account data: name, email address, business name, and other details you provide when registering or managing an account.
  • Booking data: information related to bookings made through the platform (e.g. dates, guest details where you choose to store them). This is processed on behalf of property owners who use our software.
  • Payment related data: billing details, transaction identifiers and related information. Card details are processed by our payment providers; we do not store full card numbers.
  • Technical data: IP address, device type, browser type, and similar technical information when you access our services.
  • Communication data: messages you send to us, support requests, and records of communications.

4. How We Use Your Data

We use your data to provide and improve our software, process payments, communicate with you, comply with legal obligations, and protect our rights and the security of our systems. We do not use your data for marketing unless you have consented or we have another lawful basis, and we do not sell your personal data.

5. Legal Basis for Processing under UK GDPR

Where UK GDPR applies, we process personal data on the basis of: performance of a contract with you; your consent; our legitimate interests (e.g. providing the service, security, analytics); or compliance with legal obligations. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

6. Data Sharing

We may share data with:

  • Service providers: parties that help us operate the platform (e.g. hosting, support tools), under strict confidentiality and data processing terms.
  • Payment processors: to process subscriptions and payments (e.g. Stripe). They have their own privacy policies and comply with applicable payment regulations.
  • Hosting providers: to store and serve data securely. We choose providers that meet appropriate security and compliance standards.

We do not sell or rent your personal data. We may disclose data where required by law or to protect our rights.

7. International Data Transfers

Your data may be transferred to and processed in countries outside the UK, including for hosting and support. Where we transfer data outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy decisions, standard contractual clauses approved by the UK authorities, or other mechanisms recognised under UK law. You may request details of the safeguards we use for specific transfers by contacting us.

8. Data Retention

We retain your data only for as long as necessary to provide the service, comply with legal obligations (e.g. tax, regulatory), or resolve disputes. Account and booking related data is typically retained while your account is active and for a reasonable period after closure. You may request deletion subject to our legal retention requirements.

9. Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure. This includes encryption, access controls, and regular review of our security practices. No system is completely secure; we encourage you to use strong passwords and keep your account details secure.

10. Your Rights

Under UK GDPR, where it applies to you, you have the right to: access your data; have inaccurate data corrected; request erasure in certain circumstances; restrict or object to certain processing; and data portability where applicable. You also have the right to lodge a complaint with a supervisory authority (in the UK, the ICO). Your rights may vary depending on your location; we will honour your rights to the extent required by the law that applies to you.

To exercise any of these rights, please contact us using the details in section 12.

11. Cookies

We use cookies and similar technologies as described in our Cookie Policy. Please see our Cookie Policy for details of the cookies we use and how to manage them.

12. Contact Information

For questions about this Privacy Policy or your personal data, please contact us:

Travlyr Ltd
Email: hello@travlyr.com