Privacy Policy
Your travel data is yours. This explains what we collect, why, and the control you keep over it.
Last updated 28 June 2026 · Draft pending counsel review.
This Privacy Policy explains how Carryon (“Carryon”, “we”, “us”) handles personal data when you visit https://carryon.world, request an invitation, or use the Carryon application. We have written it to be read, not just filed.
Who we are
Carryon is operated by [Legal entity name], registered at [Registered address]. For any privacy matter, the data controller can be reached at contact@carryon.world.
What we collect
- Account details — your name, email and the information you provide when requesting access.
- Travel data — loyalty programs, balances, itineraries and preferences you choose to connect, used solely to provide the service to you.
- Usage data — how you interact with the site and app, collected in aggregate to improve the product.
- Device & technical data — IP address, browser and device type, for security and performance.
How we use your data
- To provide, personalise and improve Carryon.
- To communicate with you about your membership and request.
- To secure the service and prevent abuse.
- To meet legal and regulatory obligations.
We do not sell your personal data, and we do not share it with advertisers. Carryon is funded by membership.
Legal bases
Where the UK GDPR or EU GDPR applies, we rely on: performance of a contract (to provide the service), legitimate interests (to secure and improve it), consent (for optional analytics and marketing), and legal obligation where required.
Sharing & processors
We share data only with service providers who help us operate Carryon — for example hosting, email and analytics — under contracts that require them to protect it. A current list of sub-processors is available on request at contact@carryon.world.
Retention
We keep personal data only as long as needed to provide the service or meet legal obligations. When you close your account, we delete or anonymise your data within [retention period].
Your rights
- Access a copy of your data.
- Correct or update it.
- Export it in a portable format.
- Delete it, in one request.
- Object to or restrict certain processing.
- Withdraw consent at any time.
To exercise any right, email contact@carryon.world. You may also lodge a complaint with your local supervisory authority (in the UK, the ICO).
Security
We encrypt data in transit and at rest, restrict access on a need-to-know basis, and review our practices regularly. No system is perfectly secure, but protecting your data is fundamental to what Carryon is.
International transfers
Where data is processed outside your region, we use appropriate safeguards such as Standard Contractual Clauses.
Cookies & analytics
We use a small number of cookies for essential functionality and, with your consent, privacy-respecting analytics. See our [Cookie Policy] for detail.
Children
Carryon is intended for adults. We do not knowingly collect data from anyone under 18.
Changes
We will post any changes here and, where significant, notify you directly. The date above reflects the latest revision.
Contact
Questions about this policy? Write to contact@carryon.world.