Privacy & cookie policy

Who runs this

This site is All Checked In. Anything about your data, this policy, or anything else on here reaches me at nic@allcheckedin.online, and I read it myself.

If you ever need a postal address from me, for a data request or anything formal, ask at that address and I’ll give you one.

Cookies

When you land on the site you get a real choice: accept all cookies, or reject the non-essential ones. Nothing that needs your permission fires until you choose, and neither button is favoured over the other. You can change your mind later from the “Cookie settings” link at the bottom of every page.

Accepting turns on three partner scripts. GetYourGuide’s sets its partner cookie, named visitor_id, so a booking made through my links gets credited back to me. Travelpayouts Drive helps me earn from the travel links in my posts and counts how they are used. Stay22 turns hotel links into links that credit me, can add hotel links to my posts, and now and then opens a hotel search in a new tab. Those are the only things the accept choice controls.

Rejecting doesn’t break anything on the site and it doesn’t stop affiliate links working. When you click through to book, the credit rides on the link itself. A partner ID is built into the URL, not set by a cookie earlier in your visit.

If you accept and later change your mind, switching to reject stops these scripts loading and reloads the page so it isn’t running any more. One thing I can’t do from here is delete the cookie that was already set: it belongs to the partner, not to this site, so my code can’t see it or remove it. Clearing that is a job for your browser’s own cookie settings. Left alone it expires by itself, about thirteen months after it was set.

My own analytics, which pages get read and which flop, run through a first-party endpoint. It doesn’t set a cookie or use browser storage, so it isn’t part of this choice either way.

Klook, 12Go and Travelpayouts track at click time rather than with an on-load cookie. 12Go’s search widget is the one exception, it loads its own script, but only on the handful of Asian destination pages where that widget actually appears, not sitewide.

Affiliate links

A lot of the tours, stays and kit I link to are affiliate links. Book or buy through one and I earn a small commission. You pay exactly the same either way, the price never changes.

Your data

You can read everything on the site without handing over a thing. There are two places I store anything personal about you.

If you make an account, I keep your email so I can send the magic link you sign in with. That runs on Supabase. And when you save a trip, it’s stored against your account so it’s waiting for you next time you log in.

If you sign up to the email list, that’s handled separately below, the rules around marketing email are stricter than the rules around your account.

That’s the lot. I don’t sell your data and I don’t use it for ads beyond the affiliate tracking above.

The email list

Signing up gets you the monthly email and, where offered, a free guide. Here’s exactly how that works.

What I collect: your email address, where you signed up (which page or form), and the date. Nothing else.

Why I’m allowed to email you: your consent, and only your consent. You’re not an existing customer when you sign up, so under UK rules I can’t rely on any softer basis, it has to be a genuine opt-in.

How that consent is captured: the signup form has its own tick-box, separate from the email field, and it isn’t ticked for you. Ticking it is the whole record of your consent, so nobody lands on the list by accident or as a side effect of doing something else on the site.

How long I keep it: your address stays on the list while you’re subscribed, and no personal data here is kept longer than twelve months. Unsubscribe and the row is deleted there and then, not flagged and left sitting. One honest caveat: deleted rows can survive in database backups for up to eight weeks before those snapshots roll off.

Who else sees it: the list lives on Supabase, the same processor as the rest of the site.

There is no mailing tool in the picture yet. Nothing sends from this list today, and Supabase is the only company that holds your address. If I add a tool to send the emails, it becomes a second processor and I’ll name it here before the first one goes out.

Every marketing email carries an unsubscribe link. Using it removes your row from the list outright, it isn’t just a flag.

Partnership enquiries

If you send an enquiry from the Work with me page, I keep your name, email, company and message so I can reply, for up to 12 months. It is stored with Supabase and passed to my inbox through Resend, an email delivery service. You only join the email list if you tick the box on the form.

Your rights

Whatever data I hold on you, you can ask to see it, have it corrected, or have it deleted. You can object to how it’s used, ask me to restrict it, and withdraw consent to marketing email at any time (the unsubscribe link is the fast way, emailing me works too). If you think I’ve got something wrong, you can complain to the UK’s data regulator, the Information Commissioner’s Office, though I’d rather you told me first so I can put it right.

Contact

Anything you’re not sure about, email me at nic@allcheckedin.online. For terms on the paid guide, see terms of sale and refunds.