UK Holidays

Privacy policy

Last updated: 29 April 2026

In short

ukholidays.pages.dev does not collect personal data, does not use Google Analytics, and does not share data with ad networks or other third parties. The site can be used freely without cookie banners.

If you send a message via the contact form, we forward it as email — this is described in more detail below.

1. Data controller

Name: Marti Veski
Legal status: private individual
Location: Tallinn, Estonia
Contact for data-protection questions: via the contact form on https://ukholidays.pages.dev/en/about/

2. What data is collected

2.1 Automatic technical data (logs)
The site’s technical infrastructure (Cloudflare) briefly records for each visit: IP address, request timestamp, requested URL, browser User-Agent string and referrer. These data are used for security and operational stability (DDoS protection, load balancing, troubleshooting). Cloudflare’s privacy policy defines retention periods. These logs are not used for marketing or analytics purposes.
2.2 Visitor statistics (Cloudflare Web Analytics)
We use Cloudflare Web Analytics — server-side visitor statistics that do not use cookies and store nothing in the user’s browser. Data collected: pageviews per page, country (IP-based, at country level), browser type, referring page. Not stored: IP address, unique user ID, or browser fingerprint.
2.3 Contact form
When you send a message via the contact form, we collect: name (for correspondence), email address (for reply), message content, IP address (anti-spam, 24 h).
The message is forwarded via a Cloudflare Worker to the data controller as an email. The reply is sent to the email address you provided in the form. The site itself does not store the message content. The IP address is held in Cloudflare KV for 24 hours (rate limiting), after which it is deleted automatically.
2.4 What we do NOT collect
  • Google Analytics — not used
  • Google AdSense or other ad networks — not used
  • Facebook / Meta Pixel — not used
  • Retargeting cookies — not used
  • Newsletter / mailing list — does not exist
  • User accounts / login — does not exist

3. Third parties

3.1 Cloudflare Inc.
Role: data processor (hosting, CDN, DDoS protection, web analytics, email forwarding). Location: San Francisco, California, USA + EU servers. Privacy policy.
3.2 Cloudflare Workers + Email Routing
Role: forwards contact form messages to the data controller as email. What it sees: form content + sender IP. Storage: the email passes through Cloudflare servers, no storage takes place (forwarding only).
3.3 Other third parties
None. No other external services are involved in operating the site.

4. Your rights

Under the UK General Data Protection Regulation (UK GDPR) and the EU GDPR (Regulation 2016/679, applicable because the data controller is established in Estonia, EU), you have the following rights:
  • Right of access — to be told what data are held about you
  • Right to rectification — correction of incorrect data
  • Right to erasure ("right to be forgotten")
  • Restriction of processing
  • Data portability
  • Right to object
  • Right not to be subject to automated decision-making (does not apply — no automated decisions are made)
To exercise these rights please write to us via the contact form. We respond within one month.

5. Cookies

The site itself sets no cookies. No functional, analytical or advertising cookies.
The browser may locally store one cookie: the user’s theme preference (light/dark). This information is not sent to the server.

6. Supervisory authority

In the United Kingdom the Information Commissioner’s Office (ICO) is the supervisory authority to which you may lodge a complaint about the processing of personal data:
Website: https://ico.org.ukPhone: 0303 123 1113Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom
As the data controller is established in Estonia (EU), the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, https://www.aki.ee) is the lead supervisory authority under the EU GDPR. UK visitors may also contact the ICO.

7. Changes to the policy

When the privacy policy is updated, the "Last updated" date above is changed. Material changes are clearly described.
Policy history: first version published 29 April 2026.