Privacy Notice
1. Introduction & summary
This Privacy Notice explains how we will use your personal data and your rights. For the purposes of this Privacy Notice, references to “we”, “us” or “our” are to Travel Trade Support trading as The Reward House (company number 17078931).
Our full Privacy Notice can be read below but here is a quick summary:
- The main reasons we use your personal data are to provide our services to you, to communicate with you, to improve our services and to provide you with a more personalised experience. We rely on contract, legitimate interests and/or consent to do this.
- We collect personal data directly from you when you use our services or from third party retailers and businesses that enable you to use our services.
- We may share your personal data across our business, with our service providers and with third party retailers and businesses that enable you to use our services. This may include sending your data outside of the UK, but we make sure this is done with appropriate measures in place.
- We won’t keep your personal data for longer than we need it.
- You can make an enquiry about how we use your personal data or exercise any of your rights to access, delete or limit the way we use your personal data by contacting our Data Protection Officer at admin@therewardhouse.com.
Defined terms that we use in this Privacy Notice have the same meaning as in the our Account Holder Agreement.
2. What personal data do we collect?
The personal data we process about you depends on which of our services you use, how you interact with us and may include data falling under the following groups:
- Claims Data includes data about purchases you have made from a retailer as part of the process of raising and processing a cashback claim on your behalf.
- Customer Service Contact Data includes records of your contact with our customer care team, including live chat, online tickets raised, emails and contact through any other customer contact channels.
- Financial Data includes bank account and PayPal account details (including Identifier Card and Cashback Withdrawal Method).
- Identity Data includes formal identification such as passport or driver’s license where required e.g. to validate your identity before responding to a rights request.
- Marketing and Communications Data includes your email address and phone number, preferences for receiving marketing from us and your communication methods preferences e.g. email, push notifications, SMS.
- Profile Data includes your name, email address, date of birth, gender, username and password, social sign in details (where you have signed in via that method), registration date, account type, purchases or orders made by you, cashback allocated to you, renewal dates, your interests, preferences, favourite brands, feedback, reviews and survey responses.
- Technical Data includes internet protocol (IP) address, your login data, browser type and version, device type and model, time zone setting and location, browser plug-in types and versions, operating system and platform, mobile app/extension installed status and other technology on the devices you use to access The Reward House.
- Transaction Data includes details about Cashback payments that may be due to you and details of transactions that may give rise to Cashback.
- Usage Data includes information about how you use The Reward House and the websites that you accessed prior to accessing The Reward House.
If you do not provide personal data that is necessary for a contract with you, we may not be able to provide our Services to you, for example, if you do not provide a cashback withdrawal method, we will be unable to pay you. We will tell you if this is the case and will not be liable to you.
We also process Aggregated Data such as statistical or demographic data which may be derived from your personal data but is put together in an aggregated and anonymous manner and does not constitute personal data. For example, we may aggregate your Usage Data and Transaction Data and (a) use it for internal management purposes, and (b) share it with current or prospective retailers. This type of information includes, for example, usage of an Account Holder's Cashback Withdrawal Method, including the types of products that the individual Account Holder purchases, the value of those purchases and the web, app or other channels through which the purchases are made.
If you are providing us with another person's information (for example where you use our Compare service and provide information about another person when requesting a quote for a car insurance policy) we recommend you ask them to read this Privacy Notice and our Terms and Conditions, and confirm with them that they are happy for you to provide the information to us and that they understand how their details will be used.
3. How is your personal data collected?
We use different methods to collect data about you including through:
- Direct interactions.
- Create an account with us;
- Use a Service with us;
- Request marketing to be sent to you;
- Enter a competition, promotion or survey; or
- Give us feedback.
You may give us your Identity, Contact and Financial Data by filling in forms or by corresponding with us, for example when you:
- Automated technologies or interactions. As you use The Reward House, we may automatically collect Technical Data about your equipment, browsing actions and patterns by using cookies, server logs and other similar technologies. We may also receive Technical Data and Usage Data about you if you visit other services employing our cookies. Details of our cookie policy and the cookies used by us are available here.
- Third parties or publicly available sources.
- Technical Data and Usage Data from:
- Analytics providers such as Google and Meta;
- Affiliate advertising networks that are involved as intermediaries in the process of administering your Cashback-generating transactions such as Affiliate Window, Commission Junction and Performance Horizon; and
- Technical monitoring and error reporting service providers that we engage to assist us with continuous monitoring and improvement, such as New Relic and Papertrail.
- Profile Data, Enquiry Data, Financial Data and Transaction Data from:
- Providers of sign in or payment services such as PayPal or Apple;
- Retailers from which you have made a purchase;
- Affiliate advertising networks;
- Online third party businesses that help us provide our services,
- Profile Data, Marketing and Communications Data, and Technical Data from businesses that assist us with marketing, such as lead generation campaigns, social media marketing, display advertising and the promotion of our app.
4. How do we use your personal data?
These are the legal bases we use for processing your personal data:
- Contract: To enter into, or perform, a contract with you
- Legitimate Interest: For our (or third parties’) legitimate interests, as long as they aren’t overridden by your interests and rights
- Consent: Your consent
- Legal Obligation: To comply with our legal obligations
We may use your personal data for any of the below purposes depending on how you interact with us.
| Purpose for using personal data | Personal data used | Legal basis and, where applicable, the legitimate interest(s) pursued |
|---|---|---|
| To verify your identity and manage your account and relationship with The Reward House or use of any mobile applications if you choose to set up an account or download any mobile applications. | Identity Data, Profile Data, Transaction Data, and Enquiry Data | Contract |
| To track your transaction and to receive and process Referral Fees. | Identity Data, Profile Data, Enquiry Data, Financial Data and Transaction Data | Contract and Legitimate Interest (to receive payment of sums owed to us and you) |
| To provide you with an online quote for the product/service requested by you if you choose to use our Compare service. As part of this we will pass your enquiry data to our product partnerswho will act as controllers of your personal data to provide a quote. | Enquiry data | Contract |
| To process and distribute Cashback to you. | Financial Data | Contract |
| To provide and improve our customer service including claims or complaints as to Cashback that may be owed, quality control and training. As part of this, we use Artificial Intelligence (AI) to automate some processes and generate responses. | Identity Data, Customer Service Contact Data, Profile Data, Financial Data, Transaction Data and Claims Data | Contract and Legitimate Interest (to provide and improve our customer service) |
| To prevent fraud and the misuse of our Services. | Identity Data, Enquiry Data, Profile Data, Payment Data and Transaction Data | Legitimate Interest (prevent fraud and protect our business) |
| To carry out and improve our marketing activities. We do this via various methods including email, SMS and other electronic means such as social and digital media. When you use our services, we and our service providers will also collect and combine data to make our products, services, offers and marketing you receive, better and more relevant to you, and to enable us to create content that is more suited to you. | Identity Data, Enquiry Data, Profile Data, Transaction Data, Financial Data, Technical Data, Usage Data and Marketing and Communications Data | Consent and Legitimate Interest (marketing our products and services to you and making our products and services more specific to you) |
| To communicate Profile Data when you apply to or register with a retailer or third party that helps us provide our services. | Profile Data | Contract |
| To improve personalised content and insights on other websites for you and others.We use audience tools from digital and social media providers which enable them to match your hashed contact information that we provide them against the contact information they hold and target you on their sites based on information about your use of our Site. They might also use the same information to target advertising to other users on their websites who they have identified as being potentially interested in the same recommendations and insights. We may also submit information about your use of the Site, collected through cookies, to social media providers as part of these audience tools. | Identity Data, Profile Data, Technical Data, Usage Data and Marketing and Communications Data | Legitimate interest (marketing our products and services and making our products and services more specific to you and others) |
| To market other goods and services to you where you have consented to a third party providing us with Transaction Data concerning your purchase, which we will combine with your Enquiry Data and Profile Data. For example, if you have booked a hotel through a retailer, we may be provided with details of your stay which we may use to market car hire opportunities that we think may interest you. | Transaction Data, Identity Data, Enquiry Data and Profile Data | Consent |
| To calculate commission due to the businesses that assist in performing the relevant marketing campaign and help us to analyse your use of The Reward House. | Profile Data, Enquiry Data, Technical Data and Marketing and Communications Data | Legitimate Interest (in the marketing and understanding the use of The Reward House) |
| To maintain accounting records and meet legal requirements. | Financial Data and Transactional Data | Legal Obligation |
| To send you service messages, such as confirmation of cashback and changes to this Privacy Notice. | Marketing and Communications Data, Enquiry Data and Profile Data | Legitimate Interest (in notifying you of updates and providing good service) |
| To serve you with advertising that is thought to be relevant to you, based on your previous browsing habits. Gathered data is also used to limit the number of times you see an advertisement and to help measure the effectiveness of the advertising campaign. | Technical Data and Usage Data | Consent |
| To enable a sale or potential sale of all or part of our business | Claims Data, Customer Service Contact Data, Enquiry Data, Financial Data, Identity Data, Marketing and Communications Data, Profile Data, Technical Data, Transaction Data and Usage Data | Legitimate Interest (achieve our strategic objectives and to enable the long-term commercial success of our company) |
| To monitor and protect our website and app, including its performance and security | Usage Data and Technical Data | Consent and Legitimate Interest (maintaining the integrity and security of our website and app and providing the best browsing experience) |
| For legal purposes, including complying with court, regulator, government and law enforcement agency requests; sharing data in relation to legal claims and proceedings; and preventing and detecting crime. | Claims Data, Customer Service Contact Data, Enquiry Data, Financial Data, Identity Data, Marketing and Communications Data, Profile Data, Technical Data, Transaction Data and Usage Data | Legal Obligation and Legitimate Interest (protecting our business and assisting law enforcement, regulators and government bodies) |
| For research, such as analysing market trends and customer demographics to improve our services. As part of this, we may ask you to provide feedback or complete reviews, surveys or market research. Where possible, we use anonymised or pseudonymised data for this. | Claims Data, Enquiry Data, Identity Data, Marketing and Communications Data, Profile Data, Technical Data, Transaction Data and Usage Data | Legitimate Interest (understanding our customers’ views and improving our service) |
| To manage your participation in any prize draw or competition you may enter through us | Profile data | Consent |
We may process your personal data without your knowledge or consent where this is required or permitted by law.
5. How long will we keep your personal data for?
We keep your personal data for as long as is necessary based on the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of that data, the purposes for which we process it, whether we can achieve those purposes through other means, as well as legal, taxation, accounting and industry requirements and guidelines. We may delete your data sooner if you request erasure, but it may persist on backup or archival media for legal, tax, or regulatory purposes.
When the need to keep your personal data ends, we either delete or anonymise it.
6. Who is your personal data shared with?
Your personal data is used to:
- To improve products and services from us;
- To provide customer service;
- To detect, prevent and report crime,
- To manage our IT infrastructure; and
- To carry out marketing activities, where permitted.
Depending on how you interact with us, we may also share information with third parties who act as independent controllers such as:
- Affiliate networks that are involved in the transaction and cashback allocation process
- Comparison providers and product partners when using our Compare service to request a quote
- Payment and transactional service providers
- Advertising service providers, such as Google Ad Manager, providing cookie display advertising on The Reward House and on other sites you visit
- Marketing campaign service providers
- Retailers, listed on our site
- Government agencies, regulators and other authorities
- Actual or proposed buyers of our business or assets, and their professional service providers
We may also share your personal data with businesses that act as our processor who only process personal data under our instructions and cannot use it for their own purposes, such as:
- Website and app-hosting services
- Website optimisation services
- Website usage services
- Email service providers
- Mobile push notification services
- Data management platform providers
- Digital gift card distribution services
- Customer relationship management services
- Marketing tracking partners
- Messaging services
- Social media platforms
- Online and offline marketing services
- Research and profiling services
7. Transferring your data outside of the United Kingdom
It might be necessary to transfer your personal data outside of the UK to provide our services. We only do this if the UK government has determined a jurisdiction as adequate for data protection purposes or if we have put in place appropriate safeguards, for example the UK’s international data transfer agreement. You can request details of those safeguards by contacting us.
8. How do we keep your data secure?
We take the security of your data seriously. Our Security Page explains the steps we take to ensure information about you is kept secure and confidential.
9. Your rights
Under the UK GDPR, you have the right to:
- Request access to a copy of the personal data we hold about you (commonly known as a subject access request).
- Request correction of inaccurate or incomplete personal data that we hold about you. Remember you can review, change or correct some of your data by signing into your Account and going to the settings tab.
- Request erasure of your personal data where there is no good reason for us continuing to process it (commonly known as the right to be forgotten).
- Object to processing of your personal data for direct marketing purposes, or in some circumstances, where we are relying on legitimate interests.
- Request restriction of processing of your personal data in some circumstances, for example, while we investigate a complaint that the personal data we hold about you is inaccurate.
- Request data portability whereby we will transfer your personal data either directly to you or to a third party in a machine readable format. This only applies to personal data provided by you that is processed by automated means on the basis of consent or contract.
- Withdraw consent where we rely on consent to process your personal data.
There are exceptions to some of these rights and if applicable, we will explain this in our response to you.
If you wish to exercise any of the rights set out above, please contact admin@therewardhouse.com. You will not have to pay a fee to exercise any of these rights unless your request is manifestly unfounded or excessive, in which case we may charge a reasonable fee. Alternatively, we may refuse to comply with your request in these circumstances.
We may need to request information from you to help us confirm your identity and the information you are referring to.
We try to respond to all requests within one month, but occasionally may extend this by two months if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
You also have the right to complain to the ICO at any time, but we’d appreciate the chance to deal with your concerns first.
10. Marketing and your preferences
We like to tell you about the great offers, ideas, products and services we think you might be interested in and let you know about renewal quotes when you use our Compare cashback service.
We will contact you (depending on your contact preferences) via email, SMS and push notifications. If you feel you're getting too many marketing communications from us, you can change the settings in your Account at any time. We have a one click unsubscribe policy, and each communication gives you the opportunity to opt-out of receiving similar future communications.
It may take a little while for all marketing to stop once you opt out. Marketing may already be in transit to you, in which case we may not be able to immediately stop it. If you opt out of receiving marketing communications from us, your personal data will still be used to improve The Reward House Services as described earlier above.
Please note there are some non-marketing communications that cannot be opted-out of, such as, changes to the The Reward House Services and your transactions with retailers. They can be stopped by de-registering your Account.
If you agree to us contacting you for marketing purposes, we may also show you advertising by other electronic means such as social and digital media. We may disclose a de-identified version of your personal information such as your name, telephone number, and email address (we use a process called hashing means that the third party does not receive a plain text version of your personal information to protect your details) to third-party providers including affiliate marketing platforms like AWIN to enable them to display our marketing to you via online streaming services, search engines, or social media sites; or to other users who have similar interests or are from a similar demographic as you. See the Awin Privacy Notice at https://www.awin.com/gb/privacy, which explains how they collect and use your personal information.
If you would like more information about online advertisements and your choices about how this information may be used by these companies, please click here http://www.youronlinechoices.com/uk/your-ad-choices.
11. Changes to this Privacy Notice
This privacy notice was last updated in July 2026 to make it clearer what personal data is used for each purpose and the lawful basis applicable. We may make changes to this privacy notice at any time and any changes will be published on our website so please check back regularly. If we make significant changes to this policy, we may also notify you by other means such as sending an email.