Treehouse Travel Ltd trading as Duckling Cruises (also referred to as “us”, “our”, “we”) is the controller and is responsible for your personal data (also referred to as “personal information”).
If you book travel arrangements through us you will enter a contract with the supplier of those arrangements (e.g. tour operator, airline, cruise company, accommodation provider). Accordingly, we will pass your personal data onto the supplier(s) and they will also be a controller of your personal data (under UK data protection laws) and their privacy policy/notices will apply. Please ensure you accept these prior to confirming your travel arrangements.
We are committed to respecting your and all other persons on your booking, including any children’s, (also referred to as “you”, “your”) privacy and protecting your personal data. Any person who makes the booking of travel arrangments (known as the “Lead Passenger”) is responsible for ensuring that they have the explicit consent of all other guests on their booking and that they are made aware of and agree to their data being processed in accordance with this Privacy Notice.
This Privacy Notice covers all platforms through which we offer travel-related services, this includes our Websites, and where you interact with us on social media such as Facebook, Instagram, LinkedIn etc. (in which cases you should also refer to and accept those social media sites’ privacy notices/policies).
By using our websites, contacting us by telephone or providing information to us in person, by way of email, post and social media you indicate your acceptance of this Privacy Notice.
For the purpose of the General Data Protection Regulation (GDPR) and EU e-Privacy Directive; Privacy and Electronic Communications Regulations (PECR), our registration number is ZA483908
We’re registered in England and Wales as Treehouse Travel Ltd. Our company number is 08620541. Our registered office address is at 86-90 Paul Street, London EC2A 4NE.
We trade as ‘Treehouse Travel’ and ‘Duckling Cruises’. We operate the websites https://treehouse.travel and https://duckling.cruises (“the Websites”).
If you have questions or comments about this Privacy Notice, please contact us by email at either [email protected] or [email protected].
We collect or use the following information of all passengers in a booking to provide our holiday enquiry and booking services to you and those travelling with you:
We also collect or use the following special category information of all passengers in a booking to provide our holiday enquiry and booking services to you and those travelling with you:
We collect or use the following information for service updates or marketing purposes:
We collect or use the following information for research or archiving purposes:
We collect or use the following information of all passengers in a booking to comply with legal requirements:
We also collect or use the following special category information of all passengers in a booking to comply with legal requirements:
We collect or use the following information of all passengers in a booking for dealing with queries, complaints or claims:
We also collect or use the following special category information of all passengers in a booking for dealing with queries, complaints or claims:
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.
Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:
If you make a request, we must respond to you without undue delay and in any event within one month.
To make a data protection rights request, please contact us using the contact details at the top of this Privacy Notice.
Our lawful bases for the collection and use of your data
Our lawful bases for collecting or using personal information to provide our holiday enquiry and booking services to you and those travelling with you are:
Our lawful bases for collecting or using personal information for service updates or marketing purposes are:
Our lawful bases for collecting or using personal information for research or archiving purposes are:
Our lawful bases for collecting or using personal information for legal requirements are:
Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:
In the running of our business we interact with people in a variety of ways including on our Websites, when making enquiries or bookings, through our social media channels, at our events, through competitions or prize draws we run and via other forms of communication including email and direct mail.
In some of these and other interactions we collect personal infomation. The sources by which we collect personal information are:
We retain information for seven years from the end of the financial year in which we last had contact. We hold this information to support our legal and regulatory requirements.
If you object to this retention, please contact us.
Data processors
Automattic Inc
This data processor does the following activities for us:
Canva UK Operations Limited
This data processor does the following activities for us:
Elementor Ltd
This data processor does the following activities for us:
Freeagent Central Limited
This data processor does the following activities for us:
Google LLC
This data processor does the following activities for us:
IONOS Cloud Ltd
This data processor does the following activities for us:
LinkedIn Ireland Unlimited Company
This data processor does the folloing activities for us:
Meta Platforms, Inc
This data processor does the following activities for us:
Microsoft Corporation
This data processor does the following activities for us:
Mission Labs Limited
This data processor does the following activites for us:
Sendinblue SAS
This data processor does the following activites for us:
The Travel Network Group Ltd
This data processor does the following activities for us:
Worldpay LLC
This data processor does the following activities for us:
Data Controllers
We have controller relationships with:
Suppliers of Travel Arrangments
We have a controller relationship and we share your personal information with the controllers for the following reasons:
The Travel Network Group Ltd
We have a controller relationship and we share your personal information with the controller for the following reasons:
Others
We share personal information with:
Where necessary, we may transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place.
For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above.
Organisation name: Automattic Inc
Category of recipient: Supplier
Country the personal information is sent to: The United States of America
How the transfer complies with UK data protection law: The country or sector has a UK data bridge (also known as Adequacy Regulations)
Organisation name: Elementor Ltd
Category of recipient: Supplier
Country the personal information is sent to: Israel
How the transfer complies with UK data protection law: The country or sector has a UK data bridge (also known as Adequacy Regulations)
Organisation name: Google LLC
Category of recipient: Supplier
Country the personal information is sent to: The United States of America
How the transfer complies with UK data protection law: The country or sector has a UK data bridge (also known as Adequacy Regulations)
Organisation name: LinkedIn Ireland Unlimited Company
Category of recipient: Supplier
Country the personal information is sent to: Ireland
How the transfer complies with UK data protection law: The country or sector has a UK data bridge (also known as Adequacy Regulations)
Organisation name: Meta Platforms, Inc
Category of recipient: Supplier
Country the personal information is sent to: The United States of America
How the transfer complies with UK data protection law: The country or sector has a UK data bridge (also known as Adequacy Regulations)
Organisation name: Microsoft Corporation
Category of recipient: Supplier
Country the personal information is sent to: EU member states
How the transfer complies with UK data protection law: The country or sector has a UK data bridge (also known as Adequacy Regulations)
Organisation name: Sendinblue SAS
Category of recipient: Supplier
Country the personal information is sent to: EU member states
How the transfer complies with UK data protection law: The country or sector has a UK data bridge (also known as Adequacy Regulations)
Where necessary, our data processors may share personal information outside of the UK. When doing so, they comply with the UK GDPR, making sure appropriate safeguards are in place.
For further information or to obtain a copy of the appropriate safeguard for any of the transfers below, please contact us using the contact information provided above.
Organisation name: Canva UK Operations Limited
Category of recipient: Supplier
Country the personal information is sent to: The United States of America
How the transfer complies with UK data protection law: The country or sector has a UK data bridge (also known as Adequacy Regulations)
Organisation name: Mission Labs Limited
Category of recipient: Supplier
Country the personal information is sent to: Ireland
How the transfer complies with UK data protection law: The country or sector has a UK data bridge (also known as Adequacy Regulations)
We do not target our websites or offer any of our products/services for sale to anyone under the age of 18 (a child), nor do we knowingly collect personal information from a child. The only circumstance in which information is collected in relation to a child is where you make a booking of travel services and you have a child in your party. In this situation, you must only submit these details if you are the parent or legal guardian of the child under 18 and waive all claims in relation to that child.
If you become aware of any information we have collected from a child, please contact us using the contact information provided above.
We may also pass your personal information to an organisation we sell or transfer (or enter into negotiations to sell or transfer) any of our businesses or any of our rights or obligations under any agreement we may have with you. If the transfer or sale goes ahead, the organisation receiving your personal information can use your data in the same way as us.
We realise that your emergency contact or any person you refer to us, may not have heard of us previously, and so we ask you to inform them that you will be sharing their information with us. If they have any queries, they can contact us using the details we have provided in this Notice.
Where we provide links to websites of other organisations, this Privacy Notice does not cover how that organisation processes personal information. We encourage you to read the privacy policies/notices on the other websites you visit.
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this Privacy Notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address is: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline number: 0303 123 1113
We keep our Privacy Notice under regular review. The last update was on 26 February 2025 and historic versions can be obtained by contacting us.
It is important that the personal information we hold about you is accurate and current. Please keep us informed if any of the details you provide to us should change, during the course of your relationship with us.
The Foreign, Commonwealth & Development Office has up-to-date advice on health and safety across the globe, as well as local laws and passport & visa infomation. Please check travelaware.campaign.gov.uk regularly for updates ahead of travel, as the advice can change.
For all booking we act as an Agent at all times. Your contract for the supply of a Package or Travel Arrangements will be with the disclosed Principal Supplier of the Package or Travel Arrangements.
When making your booking with us, we will arrange for you to enter into a contract with that Principal Supplier. Your booking will be subject to our Agency Booking Conditions for our booking services, and also the specific booking conditions of the Principal Supplier you contract with for your Package or Travel Arrangements.
You are advised to read all applicable conditions carefully prior to booking. Copies of applicable conditions are available on request from us.
© 2025 Treehouse Travel Ltd (trading as Duckling Cruises) – All rights reserved. Members of the Travel Trust Association and a Private Limited Company registered in England and Wales. Company No: 8620541. Registered Address: 86-90 Paul Street London EC2A 4NE. TTA No: Q4783. VAT No: 246 9371 76. Terms of Use and Privacy Notice.