Privacy Policy

Last updated: 2026

This Privacy Policy explains how we handle your personal information when you use the MisteryTrips website and our travel-matching, booking, and itinerary-planning services (the “Service”). We’ve written it to help you feel confident about how your information is collected, used, and protected.

1. Who we are

The MisteryTrips Service is provided and operated by Draconx Inc. (“we”, “us”, “our”, or “MisteryTrips”). For the purposes of this Privacy Policy, Draconx Inc. is the controller of the personal information we process. Our contact details are in the Contact section at the end of this policy. This Privacy Policy should be read together with our Terms & Conditions.

2. Age requirements

The Service is intended for adults. We do not knowingly collect personal information from children under 16 years of age. Travel groups must include at least one traveller aged 18 or over, and all travellers must be 10 or older. If you are under 16, please do not provide any personal information to us. If you believe a child has provided us information, contact us and we will delete it.

3. Information we collect

We may collect and process the following information about you:

Information you provide to us

• when you complete our questionnaire or request a Trip Proposal (e.g. your name, the names of your travel companions, contact details, travel preferences, bucket-list destinations, no-go list, and budget);
• health- or accessibility-related information you choose to share so we can plan suitable experiences (e.g. dietary restrictions, phobias, mobility or medical considerations);
• when you make a booking, enter a promotion or survey, or report a problem with the Service;
• information you provide when subscribing to marketing, or in any other communications with us.

Information collected automatically

• statistical data about your browsing actions and patterns that does not directly identify you, including, where available, your IP address, device and browser information, operating system, timestamps, the pages you request, and traffic and usage data.

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your information changes.

4. How we use your information

We use information held about you to:

• provide the Service to you, including matching you to a destination and booking travel, accommodation, and experiences on your behalf;
• identify you when you use the Service and respond to your questions and requests;
• handle enquiries or complaints relating to the Service;
• present the Service in the most effective manner for you and your device;
• keep our website and systems secure and prevent or detect fraud and other crimes;
• meet legal, regulatory, and compliance requirements, and to establish, exercise, or defend legal claims;
• notify you about changes to the Service; and
• send you marketing where permitted, for example updates, new features, special offers, and competitions. You can unsubscribe at any time (see section 9).

5. The basis for processing your information

We only use your personal information where we have a proper basis to do so: where it is necessary to enter into or perform our contract with you (such as booking your trip); where we need to comply with a legal obligation; where it is in our legitimate interests (or a third party’s) and your rights do not override those interests; or where you have given consent (which you may withdraw at any time).

6. How we share your information

We may share your personal information with third parties:

• to book elements of your trip with suppliers (e.g. airlines, hotels, and tour or experience operators);
• for marketing purposes where you have consented;
• to protect the rights, property, or safety of MisteryTrips or others;
• where required or permitted by applicable law, regulation, or legal process; or
• if Draconx Inc. (or substantially all of its assets) is acquired by a third party, in which case your information may be a transferred asset.

We may share aggregated information that cannot be used to identify you. Where we transfer information internationally, we take steps to ensure it is protected by appropriate safeguards. Please note that no transmission over the internet is completely secure; while we work hard to protect your information, any transmission is at your own risk.

7. How we store and protect your information

We take appropriate organisational and technical measures to protect your personal information and to ensure it is treated in accordance with this Privacy Policy. We limit access to those who reasonably need it to do their jobs, and they are bound by a duty of confidentiality. We have procedures to deal with any suspected data breach and will notify you and any applicable regulator where we are legally required to do so.

8. Cookies

We use cookies and similar technologies to provide and optimise the Service and to understand how it is used. You can control cookies through your browser settings; if you disable them, some parts of the Service may not function properly. You can learn more about managing cookies through your browser’s help resources.

9. Marketing & your choices

We may send you information about products and services that may interest you where you have consented or where it is otherwise permitted. You can opt out at any time by using the “unsubscribe” link in our emails or by contacting us using the details below. Even if you opt out of marketing, we may still send you service messages about your bookings or upcoming trip.

10. Your rights

Depending on where you live, you may have rights in relation to your personal information, including the right to:

• Access, request a copy of the information we hold about you;
• Correct or complete, have inaccurate or incomplete information amended;
• Delete, request erasure in certain circumstances;
• Object or restrict, object to or restrict certain processing, including direct marketing;
• Withdraw consent, where our processing is based on your consent; and
• Non-discrimination, we will not discriminate against you for exercising these rights.

To exercise any of these rights, contact us using the details below. We may need to verify your identity first. Most rights are subject to limitations and exceptions, and we will explain if we are unable to comply with a request.

11. How long we keep your information

We retain your personal information only for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements. To determine the appropriate period, we consider the amount and sensitivity of the data, the potential risk of harm, the purposes of processing, and applicable legal requirements.

12. Changes to this policy

We may modify this Privacy Policy from time to time. Any changes will be posted on this page and, where appropriate, notified to you (for example, by email).

13. Contact us

If you have any questions, suggestions, or concerns about this Privacy Policy or our use of your personal information, please contact us:

Draconx Inc. (operator of MisteryTrips)
Email: privacy@misterytrips.com
Web: draconx.com

If you have an unresolved concern, you may also have the right to complain to your local data protection authority.