DirectWorldHolidays

Create your account

Already have an account?

Sign in to your account

Don't have an account?

Privacy Policy

Last updated: February 1, 2026

Your Privacy at a Glance

  • No analytics cookies — We do not use analytics cookies, tracking pixels, or third-party advertising trackers.
  • Essential cookies only — We only use session cookies required for authentication and your language/currency preferences.
  • No data selling — We never sell your personal information to third parties.
  • Minimal collection — We only collect what's necessary to provide our booking service.

1. Who We Are

DirectWorldHolidays is an online travel booking platform that helps travelers find and reserve accommodations worldwide. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and services.

2. What Data We Collect

Information you provide to us

  • Account information: Name, email address, password (stored as a secure hash), phone number, country, and address when you register an account.
  • Support requests: Subject, category, and message content when you submit a support ticket.
  • Preferences: Your preferred currency and language settings.

Information collected automatically

  • Session data: A temporary session token stored in a cookie to keep you logged in.
  • Preference cookies: Your selected currency and language, stored in cookies on your device.

We do not collect: IP addresses for analytics, browsing history, device fingerprints, location data, or any other tracking information.

3. How We Use Your Data

We use your personal information solely for the following purposes:

  • Account management: To create and maintain your user account, and authenticate your sessions.
  • Service delivery: To process your accommodation searches and display relevant results.
  • Saved preferences: To remember your favorite properties, preferred currency, and language.
  • Customer support: To respond to your support requests and resolve issues.
  • Service improvement: To maintain and improve the functionality of our platform.

4. Cookies and Tracking

We do not use analytics cookies, tracking pixels, third-party advertising trackers, or any form of cross-site tracking.

We only use the following essential cookies:

Cookie Purpose Duration
session_token Keeps you logged in to your account Session
preferred_currency Remembers your currency preference 1 year
preferred_language Remembers your language preference 1 year

No consent banner is required because we only use strictly necessary cookies that are essential for the service to function.

5. Data Sharing

We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:

  • Accommodation providers: When you make a booking, the necessary reservation details (name, dates, guest count) are shared with the property to fulfill your reservation.
  • Legal requirements: If required by law, regulation, or legal process.

6. Data Retention

  • Account data: Retained as long as your account is active. You can request deletion at any time.
  • Support tickets: Retained for up to 2 years after resolution for quality assurance.
  • Session cookies: Automatically expire when you close your browser or after the session timeout.
  • Saved properties: Retained as long as your account is active.

7. Your Rights

You have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate personal data.
  • Deletion: Request deletion of your account and associated data.
  • Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to processing of your personal data.

To exercise any of these rights, please contact us at support@directworldholidays.uk or submit a request through our Help Center.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Passwords are stored using bcrypt hashing and are never stored in plain text.
  • Session tokens are generated using cryptographically secure random number generators.
  • Database access is restricted and uses parameterized queries to prevent injection attacks.

9. Children's Privacy

Our service is not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: