Privacy policy.

The short version: we collect what we need to make Flock work. We don't sell your data. You're in control of what you share, and you can delete your account at any time.

1. Who we are

Flock is a group trip planning and accommodation discovery service accessible at joinmyflock.com. This Privacy Policy covers both the trip planning app and the accommodation site.

If you have any questions, you can reach us at hello@joinmyflock.com.

2. Information we collect

Account information

When you create an account, we collect your name and email address. If you sign in with Google or Apple, we receive this information directly from them. We never see your password.

Trip data

We collect the information you provide when creating or participating in trips: trip names, descriptions, dates, destinations, poll responses, and any other content you add.

Optional personal information

Trip organisers may request additional information from group members, such as date of birth, dietary requirements, accessibility needs, or passport details. Providing this information is always optional. It is only visible to the trip organiser and is used solely for the purposes stated when it is requested.

Browsing data

When you browse the site, we automatically collect certain technical information including your IP address, browser type, device information, and pages visited. We use this to keep the service running, understand how it's being used, and improve the experience. You do not need an account to browse the accommodation site.

Newsletter signup

If you sign up for our newsletter, we collect your email address. We use it to send you updates about Flock, including new features, accommodation launches, and organiser guides. You can unsubscribe at any time using the link in any email.

Affiliate and referral data

When you click a link to an accommodation provider from the site, our affiliate partners may place cookies on your device to track whether a booking results from that click. This is how Flock earns commission on bookings made through the site. See the Cookies section below for full details.

3. How we use your information

We use the information we collect to:

• Provide and maintain the Flock web-app and site
• Enable group trip planning and coordination between members
• Show you relevant accommodation options
• Send notifications about trip activity (you can control these in your settings)
• Send service emails related to your trips (invitations, poll reminders, booking confirmations). These are part of the service, not marketing
• Send newsletter emails if you've signed up (you can unsubscribe at any time)
• Earn commission on accommodation bookings made through our affiliate links
• Respond to your questions and support requests
• Improve and develop the service
• Detect and prevent fraud or misuse
• Meet our legal obligations

We don't use your data for advertising and we don't sell it to third parties.

4. Lawful basis for processing

Under UK data protection law, we need a lawful basis for collecting and using your personal information. The bases we rely on are:

Contract:When you create a Flock account, we process your data to provide the trip planning service you've signed up for.

Legitimate interests:We process browsing data and usage data to keep our services running, improve the user experience, and understand how people use Flock. We also process data related to affiliate links to operate our business model. We've assessed that these interests don't override your rights.

Consent: We process your email address for newsletter purposes only with your explicit consent. You can withdraw this consent at any time by unsubscribing.

5. Who we share your information with

We share your information only where necessary:

Other trip members: your name and poll responses are visible to members of trips you join.

Trip organisers: organisers can see any optional booking information you choose to provide.

Affiliate partners: when you click through to an accommodation provider, our affiliate networks (currently Awin and CJ Affiliate) receive a referral identifier linking your click to Flock. They use this to track whether a booking results from the click and to calculate any commission owed to Flock. They do not receive your name, email, or any personal information from us. Their use of cookies is governed by their own privacy policies:

• Awin: awin.com/gb/privacy
• CJ Affiliate: cj.com/legal/privacy

Service providers: we use trusted third-party providers for hosting (Vercel, Supabase), authentication (Google, Apple), and email delivery (Resend). They process data on our behalf and are bound by data processing agreements.

Legal requirements: we may disclose information if required to do so by law, or to protect the rights and safety of Flock and its users.

6. Cookies

Essential cookies

These keep you signed in and remember your preferences in the trip planning app. They are necessary for the service to function and cannot be switched off.

Affiliate tracking cookies

When you click a link to an accommodation provider on the site, our affiliate partners (Awin and CJ Affiliate) may place cookies on your device. These cookies track whether a booking is made following your click, so that Flock can receive commission for the referral.

Affiliate cookies are typically stored for 30 days, though the exact duration depends on the affiliate programme. They do not collect your name, email, or any information you haven't provided to the accommodation provider directly.

You can choose to accept or reject affiliate tracking cookies when you first visit the site. You can change your preference at any time using the cookie settings link in the footer.

Analytics

We use Vercel Web Analytics to understand how people use the site. This service is cookieless and does not collect personal identifiers or track individual users. It provides aggregated, anonymous usage data only.

Managing cookies

You can control cookie settings through the cookie banner on the site and through your browser settings at any time. Disabling essential cookies may affect your ability to use the trip planning app. Disabling affiliate cookies will not affect your browsing experience but means Flock will not receive commission if you make a booking.

7. Data security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. Your data is stored securely and access is restricted to those who need it to operate the service.

No method of transmission over the internet is completely secure. If you have concerns about the security of your account, please contact us immediately.

8. Your rights

Under UK data protection law, you have the right to:

• Access the personal information we hold about you
• Correct any inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Withdraw consent for any optional data processing at any time
• Object to processing based on legitimate interests
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact us at hello@joinmyflock.com. We'll respond within 30 days.

9. Data retention

We keep your personal information for as long as your account is active, or as long as needed to provide the service. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal reasons.

If you've signed up for the newsletter, we keep your email address until you unsubscribe. After unsubscribing, your email is deleted within 30 days.

Analytics data is retained in anonymised form. Affiliate tracking cookies expire according to the affiliate programme's own retention period, typically 30 days.

10. International transfers

Some of our service providers, including Vercel (hosting) and Resend (email delivery), are US-based companies and may process data outside the UK. Where this happens, appropriate safeguards are in place, including standard contractual clauses and the UK Addendum recognised under UK data protection law. Our database (Supabase) is hosted in the EU (Ireland), which is covered by the UK's data adequacy framework.

11. Third-party links

The site contains links to accommodation providers and other third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing them with any personal information.

12. Children's privacy

Flock is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will delete it promptly.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll update the date at the top of this page. If changes are significant, we'll notify you by email or in the app. Continuing to use Flock after changes are posted means you accept the updated policy.