Privacy Policy

Triply (“we”, “us”, “our”) is the data controller for the personal data described in this policy.

• Legal entity: [Company legal name]
• Registered in England & Wales, company number: [Company number]
• Registered office: [Registered address, postcode]
• Trading name: Triply
• ICO registration number: [ICO registration number, if applicable]
• Contact: [privacy@triply.example]
• Data protection contact: [Name / role, or DPO if appointed]

At this pre-launch stage we collect only what we need:

• Waiting-list data: your email address, and optionally your first name or family name if you choose to provide it.
• Voluntary feedback: any route ideas, notes or messages you send us.
• Technical data: limited information such as IP address, browser type and pages visited, collected by our hosting provider for security and reliability.
• Locally stored data: saved itineraries and custom routes you create are stored in your own browser’s local storage and are not sent to us.

We do not knowingly collect personal data from children. Our waiting list is intended for adults aged 18 or over; please do not enter your children’s details.

• To manage the waiting list and send launch updates — lawful basis: consent (UK GDPR Art. 6(1)(a)), given when you submit the sign-up form. You may withdraw consent at any time.
• To respond to your enquiries and feedback — lawful basis: legitimate interests (Art. 6(1)(f)) in communicating with people who contact us.
• To keep the site secure and improve it — lawful basis: legitimate interests in operating a safe, functioning service.
• To meet legal obligations — lawful basis: legal obligation (Art. 6(1)(c)).

We will not use your waiting-list email for unrelated marketing, and we will never sell your data.

We share personal data only with service providers acting on our instructions as processors, under written data processing terms:

• Website hosting and database: [Hosting / backend provider]
• Email delivery: [Email service provider]
• Analytics (if enabled): [Analytics provider]
• Professional advisers, or authorities where required by law

Some providers may process data outside the UK. Where that happens we rely on UK adequacy regulations or the International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses, together with appropriate supplementary safeguards. Details are available on request from [privacy@triply.example].

• Waiting-list details: until launch and for up to [12] months afterwards, or until you unsubscribe or ask us to delete them — whichever is sooner.
• Enquiry correspondence: up to [24] months after the matter is closed.
• Technical logs: [90] days.

Under UK GDPR you have the right to:

• be informed about how we use your data;
• access a copy of your data;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to processing;
• data portability;
• withdraw consent at any time, without affecting prior processing.

To exercise any right, email [privacy@triply.example]. We respond within one month. If you are unhappy with our response you can complain to the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow SK9 5AF — ico.org.uk.

We use appropriate technical and organisational measures including encryption in transit (HTTPS), access controls on our database, and least-privilege access for team members. No online service can be completely secure, but we take reasonable steps to protect your data and will notify you and the ICO of any qualifying breach where required.

We may update this policy as Triply develops. Material changes affecting waiting-list members will be notified by email or a prominent notice on this site.