Privacy

What we collect

You can search Orlero without an account. Searching does not require your name, your email address or a sign in.

If you create an account we store your email address, a hash of your password, and your given and family name where you give them. We never store your password itself, only a hash from which it cannot be recovered.

If you sign in with Google or Apple instead, we store which provider you used and the identifier they give us for you. We do not receive or store your password for those services.

If you book, we store the travellers on the booking, which means their names, their dates of birth where the operator requires one, and any discount card or railcard you apply. We store the itinerary, the reference the supplier gave us, and the tickets issued against it.

We store your language and display currency so the site does not ask twice, and a hash of your session token with the browser and device description that session was created from, so you can see and end your own sessions.

What we do not collect

We never see or store your full card number, expiry or security code. Card details go directly to our payment processor and reach us only as a token that cannot be used to make a payment anywhere else.

We do not collect your precise location. If you allow location access in your browser, the coordinates are used in that browser to suggest nearby places and are not sent to us.

We do not sell personal data, and we do not share it with advertisers.

Why we are allowed to hold it

To perform a contract with you: everything needed to make and honour a booking, including passing traveller details to the operator or supplier who has to carry them.

For our legitimate interests: keeping the service secure, preventing fraud, and understanding which searches fail so the product can be fixed. These uses are balanced against your interests and never involve profiling you as an individual.

To comply with the law: payment, tax and accounting records we are required to keep.

With your consent, where consent is the right basis, such as optional email you can decline without losing anything else.

Who else sees it

A booking cannot happen without giving your details to the party who will carry you. When you book through Orlero we pass the travellers on that booking to the supplier and, through them, to the operating carrier. They become responsible for that data under their own notices.

Our payment processor receives the information required to take the payment and handle any refund or dispute.

Our email provider receives your address and the contents of the messages we send you, such as a ticket or a disruption alert.

Our hosting and database providers process the data on our instructions and for no purpose of their own.

When you follow a link from Orlero to another travel retailer, that link may carry a code identifying us so that we are credited if you buy. Every such link is marked. What you then do on that site is governed by that site, not by this notice, and we do not receive your booking from them.

Cookies

We use a small number of cookies and none of them are advertising cookies.

A session cookie keeps you signed in. Without it, an account is not usable.

A preference cookie remembers your display currency and language, so the site does not reset them on every visit.

We do not run third party advertising or cross site tracking cookies.

How long we keep it

Booking, payment and tax records are kept for as long as the law requires us to keep them, which is longer than an account lasts and is not a period we can shorten at request.

An account and everything attached to it that is not a legally retained record is deleted when you delete the account.

Sessions expire on their own and are removed after they do.

What you can make us do

These are working features, not a postal address that leads to a queue. Signed in, from your account page, you can do the first two immediately and without asking anyone.

• Export everything we hold about you, as a single machine readable file.
• Delete your account and the personal data attached to it, other than records we are legally required to retain.
• Correct anything wrong, by editing it in your account or by asking us.
• Object to a use of your data that relies on our legitimate interests, and ask us to restrict it while we consider that objection.
• Complain to your national data protection authority. In the European Union and the United Kingdom that right exists whatever we say, and you do not have to come to us first.

Where your data is processed

Orlero sells journeys across borders, so a booking will often be sent to an operator outside the country you are in. That transfer is necessary to perform the contract you have asked us to perform: a carrier cannot carry a passenger it has not been told about.

Where we transfer personal data out of the European Economic Area or the United Kingdom to a processor of our own choosing, we do so under the standard contractual clauses or an adequacy decision.

Children

Orlero is not intended for children to use on their own and we do not knowingly create accounts for them. Children travel as passengers on an adult account, which is why a booking can carry a date of birth without the child having an account.

Changes, and how to reach us

If this notice changes in a way that affects you, we will say so on this page and date it, rather than changing it quietly.

For anything in this notice, including a request we have not built a button for, write to privacy@orlero.com.