Privacy & Data Rights
Last updated: October 2026
DATA COLLECTION
ROUTE & ROOM collects the absolute minimum amount of data required to deliver our service. We collect your email address solely for the purpose of transmitting private travel curations and managing your membership.
DATA RETENTION
Your email address is retained only for as long as you remain an active member. We do not sell, trade, or distribute your data to third parties under any circumstances.
THE RIGHT TO BE FORGOTTEN
Under GDPR and UK GDPR you maintain control over your personal data. Account deletion is self-service: sign in, open Account, and use “Delete account & data”. Your personal data is removed after a 90-day retention window, and billing is cancelled immediately.
COOKIES & LOCAL STORAGE
Route & Room uses strictly necessary cookies and local-storage tokens solely to operate the platform, authenticate your account, and maintain your session security. Because these are essential to provide you with access to the service, they do not require prior consent under PECR. We do not use non-essential, tracking, or third-party advertising cookies.