Privacy Policy

Last updated 15 June 2026

This policy explains what personal data Hopstead (“we”, “us”) collects, why, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018). Hopstead is operated by Richard Craig, a sole trader trading as “Hopstead” and based in England, who is the data controller. For any privacy question, contact us at [email protected].

What we collect

Account data - your email address, and name if you provide one, used to sign you in and contact you about your account.
Trip data - the places, routes, dates, vehicle details and notes you add when planning. Some of this is location data you choose to enter.
Billing data - handled by Stripe. We store a customer reference and your subscription status; we never see or store your full card details.
Photos - any images you upload to your stops.
Analytics & technical data - basic usage analytics via Google Analytics, loaded only if you accept analytics cookies, plus standard server logs (e.g. IP address) needed to run the service securely.

How we use it, and our legal bases

To provide the planning service and your account - performance of our contract with you.
To take payment and manage subscriptions - performance of our contract.
To generate AI trip guides and place ideas (a Premium feature) - trip text you choose to send is processed by our AI provider on your request.
To understand and improve the product via analytics - your consent, which you can withdraw at any time.
To keep the service secure and prevent abuse - our legitimate interests.

Who we share it with

We use trusted processors to run Hopstead, and share only what each needs:

Stripe - payments and subscription management.
Google - optional Google sign-in, and Google Analytics (consent-based).
Our email provider - to send sign-in links and account emails.
Our AI provider - to generate trip guides from the trip text you submit.
Our hosting and storage providers - to run the app and store uploaded photos.

We do not sell your personal data. Some providers may process data outside the UK; where they do, we rely on appropriate safeguards (such as UK/EU adequacy or standard contractual clauses).

Retention

We keep your account and trip data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must keep certain records (e.g. payment records) to meet legal obligations.

Your rights

Under UK GDPR you have the right to access, correct, delete, or restrict processing of your personal data, to object to processing, and to data portability. To exercise any of these, email [email protected]. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies

We use only essential cookies needed to run the site, plus analytics cookies that load solely if you accept them in our cookie banner. You can change your choice at any time by clearing the stored preference.

Changes to this policy

We may update this policy from time to time. We’ll change the “last updated” date above and, for material changes, take reasonable steps to let you know.