1. About this Privacy Policy This Privacy Policy explains how we collect, use, store, disclose and protect your personal information when you visit our website, make an enquiry, search for travel services, create an account, make or manage a booking, communicate with us, subscribe to marketing, or otherwise use our services. FunTravel Holidays is a trading name of Trip Splash Group Limited. For the purposes of applicable UK data protection law, Trip Splash Group Limited is the data controller responsible for personal information processed in connection with FunTravel Holidays, unless we tell you otherwise. In this Privacy Policy, references to “FunTravel Holidays”, “FunTravel”, “we”, “us” or “our” mean Trip Splash Group Limited trading as FunTravel Holidays. Our website is: https://funtravelholidays.com Company details: Trip Splash Group Limited Trading as FunTravel Holidays Registered office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ Company number: 17412133 Privacy contact: info@funtravelholidays.com 2. Data Protection Laws We process personal information in accordance with applicable UK privacy and data protection legislation, including: - the UK General Data Protection Regulation (“UK GDPR”); - the Data Protection Act 2018; - the Data (Use and Access) Act 2025, where applicable; - the Privacy and Electronic Communications (EC Directive) Regulations 2003 (“PECR”); and - other applicable privacy, electronic communications and data protection legislation. 3. Personal Information We Collect The personal information we collect depends on how you interact with us. 3.1 Identity Information This may include: - full name; - title; - date of birth; - age; - gender where required by a travel supplier; - nationality; - passport information; - passport expiry date; - passport issuing country; and - other identification information required to arrange travel. We will only request identity information that is reasonably necessary for the relevant booking or travel service. 3.2 Contact Information This may include: - home or correspondence address; - billing address; - email address; - telephone number; and - emergency contact information. 3.3 Booking and Travel Information This may include: - departure and destination information; - travel dates; - flight details; - hotel details; - transfer arrangements; - cruise details; - package holiday selections; - passenger details; - room preferences; - meal or seating preferences; - loyalty programme details; - special requests; - booking references; - amendment and cancellation information; and - previous bookings made through us. 3.4 Payment and Transaction Information This may include: - payment status; - transaction references; - amounts paid; - refunds; - outstanding balances; - billing information; and - limited payment-related information supplied by our payment service providers. Where possible, payment-card information is processed directly by authorised payment service providers rather than stored by FunTravel Holidays. We do not intentionally retain complete payment-card security codes. 3.5 Account Information If you create an account with us, we may process: - username; - email address; - account preferences; - saved travellers; - saved holidays; - booking history; - communication preferences; and - authentication and account-security information. Passwords should be stored only in appropriately secured or cryptographically hashed form and should not be accessible to our staff in plain text. 3.6 Communications With Us We may collect information contained in: - emails; - telephone calls; - live chat; - contact forms; - social-media messages; - complaints; - feedback; - customer-service enquiries; and - communications relating to bookings or refunds. Where telephone calls are recorded, we will provide appropriate information about the recording and its purpose. 3.7 Technical and Website Information When you use our website or digital services, we may collect: - IP address; - browser type and version; - device type; - operating system; - approximate location derived from IP address; - pages visited; - referring website; - date and time of visits; - session information; - website interaction information; - diagnostic information; - security events; - cookie identifiers; and - similar technical information. Further information about cookies and similar technologies is provided in our Cookie Policy and in section 14 below. 3.8 Marketing Information This may include: - whether you have agreed to receive marketing; - marketing channels selected; - marketing preferences; - date and method of consent; - unsubscribe requests; - previous campaigns sent to you; and - interactions with marketing communications where lawful. 4. Special Category and Sensitive Travel Information Certain travel arrangements may require information that is particularly sensitive. For example, you may voluntarily tell us about: - mobility requirements; - accessibility requirements; - medical conditions relevant to travel; - dietary requirements that reveal health or religious information; - allergies; - pregnancy where relevant to travel restrictions; - requests for airport or airline assistance; or - other health-related travel requirements. Some of this information may constitute special category personal data under UK data protection law.

We will only process such information where there is an appropriate legal basis and an applicable condition permitting the processing of special category data. Depending on the circumstances, this may include obtaining your explicit consent or processing information where necessary for another legally permitted purpose. We will only request information reasonably required to arrange or support the relevant travel service. You should avoid providing medical or other sensitive information unless it is necessary for your travel arrangements. 5. Information About Other Travellers If you make a booking for another person, you may provide us with personal information relating to that traveller. You are responsible for ensuring that: - you are authorised to provide the information; - the information is accurate; - the traveller understands that their information will be provided to us and relevant travel suppliers; and - where required, you have obtained any necessary permission from them. You should make this Privacy Policy available to anyone whose personal information you provide to us. 6. How We Obtain Personal Information We may obtain information directly from you, from other travellers, from travel suppliers and partners, from payment and fraud-prevention providers, and automatically through our technology. Directly From You For example, when you: - visit our website; - perform a holiday search; - request a quotation; - create an account; - make a booking; - contact us; - make a payment; - subscribe to marketing; - enter a promotion; - submit a complaint; or - request assistance. From Another Traveller For example, where the lead passenger provides information about other passengers travelling on the same booking. From Travel Suppliers and Partners This may include: - airlines; - hotels; - accommodation providers; - cruise operators; - tour operators; - transfer providers; - attractions; - destination management companies; - travel technology suppliers; and - other organisations involved in providing your travel arrangements. From Payment and Fraud-Prevention Providers We may receive information necessary to confirm payments, prevent fraudulent transactions or investigate suspected misuse. Automatically Through Our Technology We may collect technical information from our website, applications, cookies, analytics systems, security systems and related technologies. 7. How We Use Your Personal Information We may use personal information for the following purposes. 7.1 Searching for and Providing Travel Services We may process information to: - perform travel searches; - retrieve live prices and availability; - generate quotations; - create travel itineraries; - reserve flights, hotels, cruises, transfers and other services; - create package holidays; - process bookings; - issue booking confirmations; - communicate supplier terms; - fulfil travel arrangements; and - provide associated customer support. 7.2 Managing Bookings We may use information to: - retrieve bookings; - process amendments; - process cancellations; - arrange refunds; - collect additional payments; - resolve booking problems; - communicate schedule changes; - provide travel updates; and - assist customers before, during or after travel. 7.3 Taking and Managing Payments We may process information to: - take payment; - confirm payment; - process instalments; - issue refunds; - reconcile transactions; - investigate payment disputes; and - prevent fraudulent transactions. 7.4 Customer Service We use personal information to: - answer questions; - respond to complaints; - provide assistance; - investigate service problems; - resolve disputes; and - maintain records of customer interactions. 7.5 Operating Customer Accounts We may use information to: - register accounts; - authenticate customers; - maintain account settings; - save traveller information; - display bookings; - allow customers to manage bookings; and - secure accounts against unauthorised access. 7.6 Security and Fraud Prevention We may process information to: - secure our website and systems; - detect suspicious behaviour; - prevent fraud; - prevent unauthorised account access; - investigate attempted misuse; - monitor technical security events; - enforce our contractual rights; and - protect our customers, suppliers and business. 7.7 Legal and Regulatory Compliance We may process information where necessary to: - comply with legal obligations; - respond to lawful requests from authorities; - meet accounting or tax requirements; - comply with aviation, immigration or travel requirements; - deal with legal claims; - comply with law-enforcement requirements; and - maintain appropriate business and regulatory records. 7.8 Improving Our Services We may analyse information to: - understand how customers use our website; - identify technical problems; - improve website performance; - improve our search and booking processes; - develop new features; - analyse customer demand; - measure service quality; and - improve the customer experience. Where reasonably possible, we use aggregated or anonymised information for analytics and business intelligence. 7.9 Marketing Where permitted by law, we may use your information to communicate with you about:

- holidays; - flights; - hotels; - cruises; - travel offers; - destination promotions; - competitions; - travel inspiration; - related FunTravel Holidays products and services; and - other offers that we reasonably believe may interest you. You can opt out of direct marketing at any time. 8. Our Lawful Bases for Processing UK data protection law requires us to identify a lawful basis for processing personal information. Depending on the circumstances, we may rely on the following bases. Contract We process information where necessary to: - provide a quotation or requested service; - take steps at your request before entering into a contract; - make a booking; - manage a booking; - process payment; - communicate booking information; or - otherwise fulfil our contractual obligations to you. Legal Obligation We process information where necessary to comply with an obligation imposed on us by law. Legitimate Interests We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Those interests may include: - operating and improving our business; - protecting our systems and customers; - preventing fraud; - maintaining appropriate business records; - understanding use of our services; - improving customer service; - defending or pursuing legal claims; - network and information security; and - appropriate direct marketing where permitted by applicable law. Where required, we assess the necessity and impact of processing before relying on legitimate interests. Consent We may rely on consent where you have actively agreed to a particular use of your information. Examples may include: - certain marketing communications; - optional cookies and tracking technology; and - certain processing of sensitive or special category information. Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. Vital Interests In exceptional circumstances, we may process personal information where necessary to protect somebody's life. 9. Who We Share Personal Information With Travel bookings inherently require information to be shared with organisations responsible for providing the services you request. We may therefore share relevant information with the following categories of recipient. Travel Suppliers This may include: - airlines; - hotels; - accommodation providers; - tour operators; - cruise operators; - transfer providers; - excursion and attraction providers; - destination management companies; - ground-handling organisations; and - other travel-service providers. These organisations may process your information as independent data controllers under their own privacy policies. Travel Technology and Distribution Providers We may use technology providers that facilitate: - flight searches; - hotel searches; - availability; - pricing; - reservations; - ticketing; - booking management; and - supplier connectivity. Depending on their role, those organisations may act as processors, independent controllers or joint controllers. Payment Providers We may share information with: - payment gateways; - acquiring banks; - card networks; - payment processors; - fraud-prevention services; and - financial institutions. Technology Providers We may use suppliers providing services such as: - website hosting; - cloud infrastructure; - databases; - email; - customer relationship management; - analytics; - cybersecurity; - logging and monitoring; - customer support; - communications; and - software development. Where a provider processes information solely on our behalf, we require appropriate contractual protections. Professional Advisers We may disclose information where appropriate to: - lawyers; - accountants; - auditors; - insurers; - consultants; and - other professional advisers. Government and Regulatory Authorities Where legally required or permitted, we may provide information to: - law-enforcement bodies; - courts; - regulators; - border agencies; - immigration authorities; - tax authorities; and - other competent authorities. Corporate Transactions If all or part of our business is reorganised, sold, transferred, acquired or merged, relevant personal information may be disclosed to professional advisers, prospective purchasers or successor organisations subject to appropriate safeguards. 10. Travel Suppliers as Independent Controllers Many airlines, hotels, cruise companies, tour operators and other travel suppliers determine independently how they use personal information necessary to provide their services. Where this happens, the supplier is responsible for its own processing and may have its own privacy policy. We encourage you to review the privacy information provided by the relevant supplier, particularly before providing sensitive information. 11. International Transfers Travel is international by nature. Your personal information may therefore need to be transferred outside the United Kingdom where, for example: - your destination is overseas; - an airline or hotel is located overseas; - a supplier operates outside the UK; - a technology provider processes information overseas; or - a booking system is hosted outside the UK. Some countries may not provide the same statutory level of protection for personal information as the United Kingdom.

Where UK data protection law requires us to put safeguards in place for an international transfer, we will use an appropriate transfer mechanism. Depending on the circumstances, this may include: - UK adequacy regulations; - the UK International Data Transfer Agreement; - the UK Addendum to approved standard contractual clauses; - another legally recognised transfer mechanism; or - a specific exception permitted under applicable data protection law where appropriate. Where personal information must be provided to an overseas travel supplier in order to fulfil travel arrangements requested by you, different international-transfer rules may apply depending on the circumstances. 12. How Long We Keep Personal Information We do not intend to retain personal information for longer than reasonably necessary. Retention periods depend on: - the purpose for which information was collected; - contractual requirements; - booking requirements; - legal requirements; - accounting and tax obligations; - potential legal claims; - fraud-prevention requirements; - regulatory requirements; and - operational necessity. For example, booking and transaction records may need to be retained after travel has been completed because of accounting, contractual, regulatory, dispute-resolution or legal requirements. Marketing information may be retained while you remain subscribed and for an appropriate period afterwards to maintain suppression records and demonstrate compliance with your preferences. Where information is no longer required, we will delete, anonymise or securely dispose of it in accordance with our retention procedures. 13. Direct Marketing We may send marketing communications where permitted by applicable law. For electronic marketing to individuals, this generally means that: - you have consented; or - the applicable customer “soft opt-in” requirements are satisfied. Where we rely on the customer soft opt-in, marketing will relate to our own similar products or services and you will have been given an opportunity to opt out. You can stop marketing communications at any time by: - using the unsubscribe link contained in an email; - following the opt-out instructions in the communication; - changing your account preferences where available; or - contacting us at info@funtravelholidays.com. We may retain sufficient information on a suppression list to ensure that we respect your request not to receive further marketing. Opting out of marketing does not prevent us from sending necessary transactional or service communications relating to an existing enquiry or booking. 14. Cookies and Similar Technologies Our website may use cookies and similar technologies. Some cookies are necessary for the operation, security and functionality of the website. Others may be used, where legally permitted, for purposes such as: - analytics; - remembering preferences; - measuring website performance; - personalisation; - advertising; and - measuring marketing effectiveness. Where consent is legally required, optional cookies will not be placed until you have made the relevant choice. You can manage cookie choices through our cookie-management functionality where available. More detailed information is provided in our separate Cookie Policy, including information about the specific cookies and third-party technologies used on the website. 15. Automated Processing and Personalisation We may use automated systems to help with: - sorting search results; - displaying relevant travel products; - detecting fraud or suspicious behaviour; - identifying technical problems; - personalising website experiences; or - supporting customer-service processes. Where we carry out solely automated decision-making that produces legal effects or similarly significant effects on an individual and special legal rules apply, we will provide the information and safeguards required by applicable data protection law. We do not intend to make materially significant decisions about customers solely through automated processing unless appropriate legal requirements and safeguards are satisfied. 16. Security We use appropriate technical and organisational measures intended to protect personal information against: - unauthorised access; - accidental loss; - unlawful disclosure; - alteration; - destruction; and - misuse. Measures may include, as appropriate: - encryption; - secure communications; - access controls; - authentication; - restricted administrative privileges; - monitoring and logging; - system patching; - backups; - security testing; - supplier controls; and - staff security procedures. No internet-based service can guarantee absolute security. Customers are also responsible for keeping account credentials confidential and should contact us if they believe their FunTravel Holidays account has been compromised. 17. Your Data Protection Rights Depending on the circumstances and the lawful basis on which we process your information, you may have rights including the following. Right of Access You may ask whether we process your personal information and request a copy of information we hold about you. Right to Rectification You may ask us to correct inaccurate or incomplete personal information. Right to Erasure In certain circumstances, you may ask us to delete personal information. This right is not absolute and we may need to retain certain information where there is a legal or legitimate reason to do so.

Right to Restrict Processing In certain circumstances, you may ask us to restrict how personal information is used. Right to Object You may have the right to object to processing based on legitimate interests. You have the right to object at any time to the use of your personal information for direct marketing. Right to Data Portability Where applicable, you may request certain personal information in a structured, commonly used and machine-readable format or request its transfer to another organisation. Rights Concerning Automated Decision-Making Where applicable, you may have rights relating to certain decisions made solely by automated means that have legal or similarly significant effects. Right to Withdraw Consent Where we rely on your consent, you can withdraw it at any time. Withdrawal does not affect processing that occurred lawfully before consent was withdrawn. 18. Exercising Your Rights To exercise a data protection right, contact: Privacy Team / Data Protection Contact FunTravel Holidays Trip Splash Group Limited Email: info@funtravelholidays.com Address: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ We may need to confirm your identity before complying with a request. We will handle requests within the timeframes required by applicable data protection law. 19. Complaints If you have concerns about how we use your personal information, please contact us first so that we have an opportunity to investigate. You also have the right to complain to the UK data protection regulator: Information Commissioner's Office (ICO) Website: www.ico.org.uk You may contact the ICO directly if you believe that your personal information has been handled in breach of applicable data protection law. 20. Children's Information Our travel services may involve bookings for children. Where a parent, guardian or lead passenger makes a booking involving a child, we may process information about that child as necessary to: - arrange the booking; - fulfil supplier requirements; - meet aviation or immigration requirements; - provide assistance; and - deliver the requested travel services. Our services are not intended to enable children to independently enter into travel contracts where they do not have legal capacity to do so. We do not knowingly use children's personal information for marketing in circumstances where doing so would be inappropriate or unlawful. 21. Third-Party Websites Our website may contain links to websites operated by: - travel suppliers; - payment providers; - social-media platforms; and - other third parties. Those websites operate under their own privacy policies. We are not responsible for the privacy practices of third-party websites merely because our website links to them. You should review their privacy information before providing personal information directly to them. 22. Social Media If you interact with FunTravel Holidays through social-media platforms, the platform may separately process information about you. Depending on the activity, we and the social-media provider may each act as independent controllers or, in limited circumstances, joint controllers. You should review the relevant platform's privacy policy and account settings. 23. Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect: - changes to our services; - changes to our suppliers or technology; - changes to legal requirements; - changes to regulatory guidance; or - changes to how we process personal information. The latest version will be published on our website and will show the date on which it was last updated. Where a change materially affects how we use personal information, we will take appropriate steps to bring the change to your attention where required. 24. Contact Us Questions concerning this Privacy Policy or our use of personal information should be sent to: FunTravel Holidays A trading name of Trip Splash Group Limited Privacy/Data Protection Contact: Privacy Team Email: info@funtravelholidays.com Registered office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ Company number: 17412133 Website: https://funtravelholidays.com