Privacy Policy

Last updated: 24 August 2026

This policy explains what personal information QuickTravels collects, why, and what control you have over it. It covers our websites and the corporate travel portal.

1. What we collect, and what we deliberately do not

We collect:

We deliberately do not collect:

About your IP address

We keep your full IP address only for security and fraud-prevention records. For anything else we store a one-way, keyed transformation of your network prefix rather than the address itself, so records can be correlated for fraud checks without identifying your device. The key is rotatable.

2. Cookies and similar technologies

NamePurposeLifetimeNeeds consent?
qt_sidSession identifier used for fraud and abuse detection only.30 minutes idleNo — strictly necessary
qt_consentRemembers the choice you made below, so we do not ask again.13 monthsNo — strictly necessary
qt_didDevice identifier used to link your activity across visits for analytics.13 monthsYes — only set after you allow analytics or marketing

If you decline everything, no device identifier is created. We remember only that you were asked and declined.

3. Our legal basis depends on where you are

Where you areSecurity and fraudAnalyticsMarketing
United StatesBusiness purpose — securityOn by default; you may opt outOpt out
CanadaImplied consent with noticeOff until you opt inOpt in
EU / UKLegitimate interests (assessment on file)ConsentConsent
ElsewhereSecurityOff until you opt inOpt in

We apply Quebec's standard to all of Canada. Distinguishing Quebec from other provinces would require province-level location lookup, which is unreliable; applying the stricter rule everywhere in Canada avoids getting it wrong at your expense. If your location cannot be determined, we apply the strictest rules.

4. Fraud and booking integrity

Speculative and fraudulent bookings hold airline seats that genuine travellers cannot then buy, and expose us to penalties from airlines. To limit this we record booking, payment and sign-in events, and check for patterns such as an unusual number of attempts from one network in a short period.

This runs whether or not you allow analytics, because it is necessary to provide the service safely. It uses a session identifier, a transformed network prefix, your country, and — where you have an account with us — whether your previous bookings were completed or released unpaid at their ticketing deadline. We do not use your browsing of other sites, and we do not build a marketing profile from any of it.

We do not make automated decisions that refuse you service. Risk scores, where calculated, are recorded for review and do not by themselves block a booking. If that ever changes we will update this policy first, and you will have the right to a human review.

5. Your choices and rights

You can change your mind at any time using the Cookie preferences link in the footer. Withdrawing is exactly as easy as granting — a single action, in the same place, with equal prominence. When you withdraw, we stop collecting and the device identifier is deleted.

Depending on where you live you may also have the right to access the personal information we hold about you, to have it corrected, to have it deleted, to object to processing based on legitimate interests, and to complain to your data protection authority.

Please note: our self-service tools for downloading or deleting your information are not yet available. Until they are, please contact us using the details below and we will handle your request manually. We would rather tell you this than describe a process that does not yet exist.

6. How long we keep information

Booking and financial records are kept as long as required for tax, accounting and airline settlement purposes. Analytics records are kept for no longer than 13 months.

Please note: automatic deletion at the end of these periods is still being implemented. Until it is in place, deletion is carried out manually on request.

7. Who we share information with

Airlines, hotels and our reservation provider, in order to make your booking; our payment processor, to take payment; and our hosting provider, which stores the data in Canada. If you allow analytics or marketing, Google receives measurement data — no Google tag is loaded at all until you allow it.

8. Contact

Privacy questions and requests: privacy@quicktravels.com.

Our designated Privacy Officer is responsible for the protection of personal information at QuickTravels. Their name and contact details will be published here.