We can't find the internet
Attempting to reconnect
Something went wrong!
Hang in there while we get back on track
Privacy Policy
Last updated 15 August 2026
Who is responsible for your data
The data controller for this site is TO BE COMPLETED, Asgourou Rodos, Rhodes 85100, Greece. You can reach us at support@quoteme.travel . Full company details are on our company details page .
What we collect, why, and on what basis
The legal basis is given for each purpose, as the GDPR requires.
| Data | Why | Legal basis |
|---|---|---|
| Trip details: destination, dates, party size and children's ages, budget, preferences, notes | To pass your request to matching partners so they can quote on it | Performance of a contract — it is the service you asked for |
| Email address | To sign you in and send quote and booking notifications | Performance of a contract |
| Name and phone number, collected when you accept a quote | Passed to that one partner so they can confirm your reservation | Performance of a contract |
| Password, stored only as a salted hash | To let you sign in without waiting for a link | Performance of a contract |
| Booking and commission records | Accounting, invoicing and tax | Legal obligation |
| An anonymous visitor identifier | To count how many visitors reach each step, so we can see where the product is confusing | Legitimate interest in improving the service — no profile is built and the identifier is tied to no account |
| Partner company and billing details | To review applications and invoice commission | Performance of a contract, and legal obligation for the invoicing |
Your contact details stay hidden until you accept a quote
This is the core of how QuoteMe works. Partners quoting on your request see the trip details only — destination, dates, party, budget, notes. They do not see your name, email, phone or any other contact information unless and until you accept one of their quotes. At that point the accepted partner, and only that partner, receives your name, email and phone number, because they need them to confirm your reservation.
One thing to be aware of: the notes field on your request is free text shown to every partner who can quote on it. Please don't put contact details there — that would share them before you've chosen anyone.
How long we keep it
- Requests and quotes: 24 months from when the request closes, so you can see your own history.
- Bookings and the commission records attached to them: 7 years, as Greek tax and accounting law requires.
- Account records: as long as the account exists, then 12 months.
- Sign-in links: 20 minutes. Password reset links: 1 hour. Both are deleted once used.
- Anonymous analytics: 14 months.
Your rights
Under the GDPR you have the right to access the personal data we hold about you, to have it corrected, to have it erased, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent you may withdraw it at any time, without affecting what was done beforehand.
Email support@quoteme.travel and we'll action it within one month. If you're not satisfied with how we've handled it, you can complain to the Hellenic Data Protection Authority (www.dpa.gr).
Erasing an account can't remove booking records we're legally required to keep for tax purposes. Those are retained for the period above and used for nothing else.
Who else sees your data
- The partner whose quote you accept — your name, email and phone, so they can confirm the booking.
- Our email provider, which processes the content of a message only in order to deliver it.
- Our hosting and database provider, which stores the data on our behalf.
We don't sell your data, and we run no third-party advertising or tracking on this site.
Transfers outside the EEA
Our hosting and email providers may process data outside the European Economic Area, including in the United States. Where that happens it is covered by the European Commission's Standard Contractual Clauses, or by an adequacy decision covering the receiving country.
Cookies
We use two, both strictly necessary and neither shared with anyone: a session cookie that keeps you signed in and protects forms against cross-site request forgery, and an anonymous visitor identifier used to count how far people get through the request flow. The second is a random value tied to no name, email or account. We run no advertising or third-party tracking cookies, which is why there's no consent banner to click through.
Changes
If we change this policy materially we'll update the date at the top of this page and, where the change affects you, tell you by email.