Legal

Privacy Policy

This page is a draft. It describes, in plain language, what our systems actually do with your data today. It has not yet been reviewed by a solicitor qualified in UK data protection law, and it isn't a final statement of your legal rights. It will be replaced with reviewed copy before this becomes the live version of the site.

Who we are

Rooetd is operated by MLRL Ltd, a company registered in England & Wales. We're the "data controller" for the personal data described on this page — the decisions about why and how it's used are ours. You can reach us at hello@rooetd.com.

What we collect

When you use the inquiry form or the trip finder quiz, we collect:

Your full name, email address, and phone number if you give it.
Anything you write in the free-text notes field.
The trip, service tier, group size, timing and any module swaps you select.
Your quiz answers and matched trip, if you took the trip finder.

We also collect some information automatically:

Marketing attribution: which campaign, link or search brought you here (UTM parameters), the page you landed on, and the site that referred you — stored in a cookie called ro_attr. See ourCookie Policyfor how this is gated behind your consent.
A coarse, network-level location (country/city/timezone) derived from your connection when you submit an inquiry — this is not GPS or precise location data.

Why we use it, and our legal basis

We use your inquiry details to respond to you, work out an itinerary and pricing, and keep a record of the conversation — this is necessary to take steps towards a contract with you, at your request. We use attribution data (only if you consent to it) to understand which marketing channels are actually working — our legitimate interest, balanced against the low-impact, non-essential nature of that data. We don't use your data for automated decision-making, and we don't sell it.

Where it goes

Submitted inquiries are stored in our database (hosted on Cloudflare) and trigger two emails, sent via Cloudflare's email service: a receipt to you, and a notification to our own team inboxes so someone can follow up. If your inquiry turns into a confirmed booking, the trip details necessary to deliver it — typically your name and travel dates, not your full inquiry record — are shared with our destination partner on the ground in India so they can arrange hotels, transport and guides.

That last transfer sends personal data outside the UK. Once we've settled on our ground-partner agreements, this section will name the specific safeguard we rely on (for example, the UK's International Data Transfer Addendum) rather than describe one in the abstract.

How long we keep it

We keep inquiry records for as long as reasonably useful for following up with you and for our own records, and no longer than necessary for that purpose. If your inquiry doesn't lead to a booking, we intend to set a fixed deletion window here once it's confirmed with an adviser — for now, you can ask us to delete your data at any time (see "Your rights" below).

Your rights

Under UK data protection law you can ask us to: tell you what we hold about you, correct it, delete it, restrict how we use it, give you a copy in a portable format, or stop using it for a particular purpose (including withdrawing attribution-cookie consent at any time). Email hello@rooetd.comand we'll act on it. If you're not satisfied with our response, you can complain to the UK's Information Commissioner's Office (ico.org.uk).