Privacy Policy

Last updated 15 August 2026

Who is responsible for your data

The data controller for this site is TO BE COMPLETED, Asgourou Rodos, Rhodes 85100, Greece. You can reach us at support@quoteme.travel . Full company details are on our company details page .

What we collect, why, and on what basis

The legal basis is given for each purpose, as the GDPR requires.

Data Why Legal basis
Trip details: destination, dates, party size and children's ages, budget, preferences, notes To pass your request to matching partners so they can quote on it Performance of a contract — it is the service you asked for
Email address To sign you in and send quote and booking notifications Performance of a contract
Name and phone number, collected when you accept a quote Passed to that one partner so they can confirm your reservation Performance of a contract
Password, stored only as a salted hash To let you sign in without waiting for a link Performance of a contract
Booking and commission records Accounting, invoicing and tax Legal obligation
An anonymous visitor identifier To count how many visitors reach each step, so we can see where the product is confusing Legitimate interest in improving the service — no profile is built and the identifier is tied to no account
Partner company and billing details To review applications and invoice commission Performance of a contract, and legal obligation for the invoicing

Your contact details stay hidden until you accept a quote

This is the core of how QuoteMe works. Partners quoting on your request see the trip details only — destination, dates, party, budget, notes. They do not see your name, email, phone or any other contact information unless and until you accept one of their quotes. At that point the accepted partner, and only that partner, receives your name, email and phone number, because they need them to confirm your reservation.

One thing to be aware of: the notes field on your request is free text shown to every partner who can quote on it. Please don't put contact details there — that would share them before you've chosen anyone.

How long we keep it

  • Requests and quotes: 24 months from when the request closes, so you can see your own history.
  • Bookings and the commission records attached to them: 7 years, as Greek tax and accounting law requires.
  • Account records: as long as the account exists, then 12 months.
  • Sign-in links: 20 minutes. Password reset links: 1 hour. Both are deleted once used.
  • Anonymous analytics: 14 months.

Your rights

Under the GDPR you have the right to access the personal data we hold about you, to have it corrected, to have it erased, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent you may withdraw it at any time, without affecting what was done beforehand.

Email support@quoteme.travel and we'll action it within one month. If you're not satisfied with how we've handled it, you can complain to the Hellenic Data Protection Authority (www.dpa.gr).

Erasing an account can't remove booking records we're legally required to keep for tax purposes. Those are retained for the period above and used for nothing else.

Who else sees your data

  • The partner whose quote you accept — your name, email and phone, so they can confirm the booking.
  • Our email provider, which processes the content of a message only in order to deliver it.
  • Our hosting and database provider, which stores the data on our behalf.

We don't sell your data, and we run no third-party advertising or tracking on this site.

Transfers outside the EEA

Our hosting and email providers may process data outside the European Economic Area, including in the United States. Where that happens it is covered by the European Commission's Standard Contractual Clauses, or by an adequacy decision covering the receiving country.

Cookies

We use two, both strictly necessary and neither shared with anyone: a session cookie that keeps you signed in and protects forms against cross-site request forgery, and an anonymous visitor identifier used to count how far people get through the request flow. The second is a random value tied to no name, email or account. We run no advertising or third-party tracking cookies, which is why there's no consent banner to click through.

Changes

If we change this policy materially we'll update the date at the top of this page and, where the change affects you, tell you by email.