1. Who we are
ZimBound is a flight discovery, comparison and referral website operated by The UGC Playbook Ltd, registered in England and Wales, company number 16626561. The company is the data controller for personal information it decides to use to operate ZimBound.
Our registered office is 3rd Floor, 86–90 Paul Street, London, England, EC2A 4NE. For privacy questions or requests, contact support@zimbound.com.
This policy covers this website, not the separate policies of independent flight-search, airline or booking providers.
2. Information and why it is used
- Website operation and security: visits can involve your IP address, request time, page/request details, browser or device information, and security or error logs. This information supports page delivery, fault investigation and protection against misuse. For essential operation and security, we rely on legitimate interests in running a secure, reliable website, limited to information reasonably needed for that purpose. Where information is required to meet a legal obligation, that obligation provides the lawful basis.
- Enquiries: when you email us, your email address, message and information you provide are used to handle your enquiry. The lawful basis is legitimate interests in responding to enquiries, or steps at your request before a contract where applicable. Please do not send card details, passport copies or sensitive travel documents.
- Flight searches: when you visit the flight-search page, embedded Travelpayouts services may receive technical request information such as your IP address, browser/device data, referring page and affiliate identifiers. If you search for flights, they may also receive your chosen routes/airports, dates, passenger numbers and preferences. Those services can use cookies or similar storage. See our cookie policy.
Essential website operation is distinct from optional marketing and tracking. The flight-search page uses third-party embedded services, which may load when the page is visited. Its cookie notice and related browser storage are described in our cookie policy. The waitlist checkbox controls whether you consent to receiving ZimBound launch emails; it is not a flight-search cookie setting.
3. Email updates
Joining the ZimBound waitlist is optional. When you enter your email address and tick the separate, unticked-by-default consent box, we store your email address, the exact wording you agreed to, the date and time of your consent, and the signup source. We use this information to manage your subscription and send the ZimBound early access and launch updates you requested. Consent is our lawful basis for these marketing communications. We do not send a confirmation email when you sign up.
Waitlist records are stored using Supabase on our behalf. Repeat signups with the same email address update the existing record rather than creating additional subscribers. We also use limited technical information to protect the signup service from misuse.
You can withdraw your marketing consent and request that we remove your address by emailing support@zimbound.com. If we begin sending launch emails, each marketing email will provide a way to unsubscribe. Withdrawal does not affect processing already carried out lawfully. Joining the waitlist is not a flight booking and does not guarantee access, prices or availability.
4. Providers and sharing
- Replit: provides website hosting and handles technical requests needed to serve the website.
- Travelpayouts and its embedded service partners: supply flight search, destination widgets and affiliate-linked functionality. When the flight page loads or you interact with its tools, browser requests may go directly to provider services, including tpwgts.com, emrldtp.cc, apistp.com services and avsplow.com. External booking sites have their own privacy notices.
- Supabase: hosts ZimBound's waitlist signup records and receives requests to our email-signup service for storing consented subscriptions and protecting the form from abuse. We do not use Supabase to send emails from this form.
- Google Fonts: the flight page may request external font resources, which involves sending technical request information to the font provider.
- Professional advisers, authorities or service providers: information may be shared where necessary for a genuine legal requirement, dispute or protection of the website, with the recipient and lawful basis assessed for that purpose.
If you follow a flight link and make a booking, the independent booking merchant and airline use information under their own privacy policies and terms. They may be separate controllers. ZimBound does not take ticket payments through this website. See our affiliate disclosure and terms.
5. International processing
External hosting and flight services may process information outside the UK. Independent providers' privacy notices explain their own use of information. Contact us if you have questions about international processing connected with your use of ZimBound.
6. Retention and security
How long information is needed depends on its purpose, including answering an enquiry, investigating a security issue, resolving a dispute or meeting a legal obligation. We keep waitlist email and consent records while they are needed for the requested early-access and launch communications, or until you withdraw consent and ask for removal, subject to any applicable legal obligations. Contact support@zimbound.com to withdraw or request deletion.
Flight-page language and currency preference cookies may be set for around 12 months. Third-party services apply their own retention arrangements; see the cookie policy for more about browser storage.
No website or email service can guarantee absolute security. Please avoid sending sensitive documents or payment details in general enquiries.
7. Your rights and complaints
Depending on the circumstances, UK data protection law gives you rights to access your personal information, correct it, ask for deletion, restrict processing, object to processing based on legitimate interests, and receive or transfer certain information in a portable form. You can withdraw consent where processing relies on it. These rights have conditions and exceptions.
Use the privacy contact above to make a request. We may need proportionate information to confirm your identity. Requests should normally receive a response within one month, subject to lawful extensions or exceptions. You can complain to the Information Commissioner's Office (ICO); you do not have to contact us first.
8. Changes to this policy
The date at the top of this page identifies the latest version. Changes to how personal information is used will be reflected here, with an additional notice where appropriate. If a new use requires your consent, we will ask for it separately.