TixLayer

Privacy Policy

Last updated: July 2026

Samio Technology Ltd, trading as TixLayer (“we”, “us”, “our”), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you use tixlayer.com (“the Platform”). Samio Technology Ltd is the data controller for your personal data. We are registered in England and Wales under company number 16407750, with our registered office at Felden, Brentor, Devon, PL19 0LR, United Kingdom.

1. Information We Collect

Information you provide:

  • Account information: Name, email address, and password (hashed — we never store plaintext passwords). If you sign in with Google, we receive your name, email address, and profile picture from Google
  • Booking information: Activity details, dates, guest names, phone number (optional)
  • Payment information: Processed securely by Stripe. We do not store your full card number, CVV, or other sensitive payment details on our servers
  • Communications: Messages you send to our support team and conversations with our chat assistant
  • Reviews: If you review an activity, the rating, text, photos, display name, and country you choose to submit
  • Newsletter: Your email address, if you subscribe to our newsletter

Information collected automatically:

  • Device information: Browser type, operating system, screen resolution
  • Usage data: Pages visited, search queries, and booking flow interactions — collected through our own first-party analytics and, with your consent, Google Analytics 4
  • Location: Approximate location based on IP address (used for currency and language detection — we do not use precise GPS location)
  • Cookies: See our Cookie Policy for details

2. How We Use Your Information

We use your personal data for the following purposes:

  • Booking fulfilment: Processing your bookings, issuing vouchers, and communicating booking details to activity suppliers
  • Transactional emails: Sending booking confirmations, cancellation notices, and vouchers (these are essential and cannot be opted out of)
  • Service communications: Visit reminders and post-visit feedback requests (you can unsubscribe from these)
  • Marketing: Sending our newsletter if you have subscribed (every email includes an unsubscribe link)
  • Customer support: Responding to your enquiries — via email, our support team, and our AI chat assistant — and resolving booking issues
  • Reviews: Publishing your review, display name, country, and photos on the relevant activity page
  • Analytics: Understanding how our Platform is used to improve the experience (using anonymised data)
  • Fraud prevention: Detecting and preventing fraudulent transactions

3. Legal Basis for Processing

Under GDPR and UK data protection law, we process your data on the following legal bases:

  • Contract: Processing necessary to fulfil your booking (name, email, payment, activity details)
  • Legitimate interest: Analytics, fraud prevention, service improvements, and visit reminders
  • Consent: Marketing communications (including our newsletter), publishing your reviews, and non-essential cookies
  • Legal obligation: Retaining financial records for tax and accounting purposes

4. Who We Share Data With

We share your personal data only with trusted third parties necessary to provide our service:

  • Activity suppliers: Your name and booking details are shared with the activity operator to fulfil your booking and issue vouchers
  • Stripe: Payment processing and fraud prevention. Stripe acts as an independent data controller for payment data. See Stripe's Privacy Policy
  • Brevo: Delivery of transactional, service, and marketing emails
  • Google: Analytics (GA4 via Google Tag Manager, with your consent), Maps, Places API, and sign-in with Google if you use it
  • OpenAI: Our chat assistant is powered by OpenAI's language models. Messages you send in chat, along with limited booking context needed to answer your question, are processed by OpenAI in the United States. Under OpenAI's API terms, this data is not used to train its models. Please avoid sharing sensitive personal information in chat that isn't needed to resolve your query

We do not sell your personal data to third parties. We do not share your data for third-party marketing purposes.

5. International Data Transfers

Your data may be transferred to and processed in countries outside the UK/EEA, including the United States (for Stripe, Google, and OpenAI services) and the countries where activity suppliers operate. These transfers are protected by appropriate safeguards including Standard Contractual Clauses (SCCs) and the service providers' compliance with applicable data protection frameworks.

6. Data Retention

  • Booking records: Retained for 7 years for legal, tax, and accounting purposes
  • Account data: Retained until you request deletion
  • Analytics data: Anonymised after 26 months
  • Email logs: Retained for 12 months
  • Support communications and chat conversations: Retained for 2 years
  • Reviews: Retained while published; removed on request

7. Your Rights

Under GDPR and UK data protection law, you have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Correct any inaccurate or incomplete data
  • Erasure: Request deletion of your personal data (subject to legal retention requirements)
  • Restriction: Request that we limit how we use your data
  • Portability: Receive your data in a structured, commonly used format
  • Objection: Object to processing based on legitimate interests
  • Withdraw consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, email us at [email protected] or contact us via our Help Centre. We will respond within one month.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use cookies and similar technologies for essential site functionality, analytics, and user preferences. You can change your cookie choices at any time using the “Cookie preferences” link in the footer. For full details, see our Cookie Policy.

9. Children's Privacy

TixLayer is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Platform or sending an email. The “Last updated” date at the top indicates when this policy was last revised.

11. Contact Us

For privacy-related questions or to exercise your data rights, contact us at:

Samio Technology Ltd (trading as TixLayer)
Felden, Brentor, Devon, PL19 0LR, United Kingdom
Email: [email protected]
Or visit our Help Centre to get in touch.