Last updated: 20 September 2026
This policy applies to Travel On Stay at travelonstay.com and www.travelonstay.com. It does not cover other websites linked from articles.
Information you provide
The contact form asks for a name, reply email, topic and message, with an optional page URL. Those details are stored in a private WordPress inbox so administrators can review the enquiry. The form does not add you to a marketing list. Do not send identity documents or payment details.
Technical information
Serving a page involves an IP address, requested URL, time, browser type and similar request headers. Hosting, backups and Cloudflare can process that information to deliver and protect the site. The contact form uses a short-lived keyed hash of the network address to limit repeated submissions; that rate-limit entry expires after one hour. It also uses a form token and a hidden spam-trap field.
Cookies now in use
A first-party tos_notice cookie can remember that you closed the site notice, for about 180 days. WordPress may set cookies for signed-in administration and for the contact-form token. Cloudflare may set security cookies as part of delivery. These are described further in the Cookie and Cache Policy.
Google advertising and your choices
Google AdSense is not currently loaded on this website. If advertising is added, Google and other vendors may use cookies or similar identifiers to select, measure and, where allowed, personalise ads. Read how Google uses information from sites that use its services and manage personalisation in Google My Ad Center. Participating vendors may also offer choices at YourAdChoices.
For personalised ads to visitors in the EEA, UK or Switzerland, Google requires a certified consent-management platform. The notice on this site is not that platform. Optional advertising cookies will not be loaded until such a tool is configured, if ads are introduced.
Other processors
- Cloudflare: delivery and security. Request information such as IP addresses and headers may be processed. Provider information.
- Hosting on this origin server: page files, the WordPress database and backups needed to operate the site.
Retention, security and requests
Inbox messages are scheduled for deletion after 180 days. Backups and security logs rotate on their own schedule. Access to the inbox is limited to administrators. No website can guarantee absolute security. Use Contact Us to ask about access, correction or deletion of a message you submitted. Rights depend on applicable law. Continuing to read a page is not consent to optional tracking.
Children and changes
The contact form is not intended for children to send personal information without adult involvement. Material changes to this policy should carry a new update date.