Privacy Policy
Last updated: 5 September 2026
TravelRx is a trading name of YL Digital Ltd, a company registered in England and Wales (company number 16307552), with its registered office at Apartment 4 Farrer Estate, Binnegar, Wareham, Dorset, BH20 6AT, United Kingdom.
We are the data controller for the personal data described in this policy.
If you have any question about this policy or about how we handle your data, contact us at help@travelrx.co.uk.
1. Who this policy covers
This policy explains how we handle personal data when you:
visit travelrx.co.uk
enquire about our services through our website, through a Facebook or Instagram lead form, or by phone, email or WhatsApp
become a client of ours, or work for a client of ours
It does not cover the websites we build and operate for pharmacy clients. Those sites carry their own privacy notices, and the pharmacy is the data controller for patient information collected through them. We act as a processor on their behalf under a separate agreement.
2. The information we collect
When you enquire about our services, we collect the details you give us: your name, business email address, phone number, the name and postcode of your pharmacy, and anything else you choose to tell us. If you enquire through a Facebook or Instagram lead form, Meta passes us the answers you gave on that form together with an identifier for your submission.
When you speak to us, we keep a record of the conversation: emails, WhatsApp messages, and notes from calls. Calls made through our system may be recorded for training and quality purposes — you will be told at the start of any call that is being recorded.
When you visit our website, we collect standard technical information: your IP address, browser type and device, the pages you visit and how you arrived. Some of this is collected through cookies and similar technologies — see section 8.
When you become a client, we additionally hold the contact and business details needed to deliver and invoice for our services.
We do not intentionally collect any special category data (such as health information) about you through this website or our enquiry forms. Please do not send us health information about yourself or anyone else through these channels.
3. Why we use it, and our lawful basis
Responding to your enquiry and arranging a call — legitimate interests, replying to someone who has asked to hear from us.
Following up on an enquiry by phone, email or WhatsApp — legitimate interests, pursuing a business enquiry you started.
Providing our services and managing our relationship with clients — performance of a contract.
Sending marketing about our services to business contacts — legitimate interests, or your consent where the law requires it.
Measuring how our advertising performs — consent, through your cookie choices.
Keeping accounting records and meeting our legal obligations — legal obligation.
Protecting our systems from misuse — legitimate interests.
Where we rely on legitimate interests, we have considered whether our interest is overridden by your rights, and we have concluded it is not — but you can object at any time, and you can tell us to stop contacting you at any point. See section 7.
4. Who we share it with
We do not sell your personal data. We share it only with the suppliers who help us run our business, each of whom acts on our instructions under a written agreement:
Supabase — our database and application hosting
Twilio — telephone calls and WhatsApp messaging
Resend — transactional and marketing email
Meta Platforms — advertising, lead forms, and measurement of ad performance
Google — advertising and website analytics
Make.com — connecting our systems together
Cal.com — booking and scheduling calls
Lovable — hosting our internal business system
We also share data with our professional advisers (such as our accountant), and with authorities or regulators where we are legally required to do so.
Some of these suppliers process data outside the UK. Where that happens, we rely on the UK Government's adequacy regulations, or on the International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses, to make sure your data has equivalent protection.
5. How we use Meta lead forms
If you submit a Facebook or Instagram lead form advertising our services, Meta collects your answers and passes them to us. Meta processes that submission as an independent controller under its own Data Policy, and we then hold and use your details as described in this policy.
We also send Meta information about what happened after your enquiry — for example, that a discovery call was booked — so that we can measure which of our adverts work. Where this involves your email address or phone number, it is sent in a hashed (irreversible) form, and we do it only where you have consented through our cookie banner or where we are otherwise permitted to.
6. How long we keep it
Enquiries that do not become clients — up to 24 months from your last contact with us, then deleted.
Client records — for the duration of our relationship and 6 years afterwards, to meet our accounting and legal obligations.
Call recordings — 12 months.
Website and advertising analytics — up to 26 months.
We may keep information for longer where we need it to establish, exercise or defend a legal claim.
7. Your rights
Under UK data protection law you have the right to:
access the personal data we hold about you
ask us to correct anything that is wrong
ask us to delete your data (see section 9)
ask us to restrict how we use it
object to our use of it, including for direct marketing — if you object to direct marketing we will always stop
receive a portable copy of data you gave us
withdraw consent at any time, where we rely on it
To exercise any of these, email help@travelrx.co.uk. We will respond within one month. There is no charge.
You can stop marketing messages at any time: reply STOP to a WhatsApp or text message, use the unsubscribe link in any email, or simply tell us.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, or by calling 0303 123 1113. We would appreciate the chance to put things right first.
8. Cookies
We use cookies that are strictly necessary to make the site work, and — only with your consent — analytics and advertising cookies that help us understand how the site is used and measure our advertising.
You can accept or reject non-essential cookies when you first visit, and change your mind at any time through the Cookie Settings link. Rejecting non-essential cookies will not stop you using the site.
9. Deleting your data
You can ask us to delete the personal data we hold about you at any time.
Email help@travelrx.co.uk with the subject line "Data deletion request", telling us the name, email address or phone number you gave us so we can find your record.
We will confirm your identity, delete your data from our systems and instruct our suppliers to do the same, and confirm to you when it is done. We will complete this within one month.
We may need to retain a minimal record of your request, and any information we are legally required to keep — such as accounting records — and we will tell you if that applies.
10. Keeping your data secure
We restrict access to personal data to the people who need it to do their job, protect our systems with multi-factor authentication, and encrypt data in transit and at rest with our hosting providers. No system is completely secure, but we take these obligations seriously and will notify you and the ICO of any breach where the law requires it.
11. Children
Our services are sold to businesses and our website is not directed at children. We do not knowingly collect data about anyone under 18 through this site.
12. Changes to this policy
We will update this page when our practices change, and we will change the "last updated" date at the top. If the change is significant, we will tell affected clients directly.
13. Contact us
YL Digital Ltd, trading as TravelRx
Email: help@travelrx.co.uk
Apartment 4 Farrer Estate, Binnegar, Wareham, Dorset, BH20 6AT, United Kingdom
This notice describes our actual practices. If anything here does not match your experience of dealing with us, please tell us — we would want to know.