Privacy Policy

At Ticked Bucket List (“TBL”, “we”, “us”, “our”), we know that many of the people who visit this site are already carrying a lot — pain, fatigue, admin, decisions. We try to keep our digital footprint as light as possible. This Privacy Policy explains, in clear terms, what we do (and don’t do) with your information when you use tickedbucketlist.com.

Our starting point is simple: no medical or health-related data from TBL tools leaves your device unless you choose to share it or sync it using a feature that clearly says so.

By using this website, you agree to the practices described below.

1. Who we are

Ticked Bucket List is a chronic-pain-informed travel brand providing education, tools and services to help people plan and experience trips in a body-friendly way.

If you have any questions about this Privacy Policy, you can reach us at:

Email: info@tickedbucketlist.com

2. Information we collect

We collect two broad types of information:

a) Information you choose to share with us

This may include:

  • Name and contact details (for example, when you fill in a contact form, join a mailing list or book an appointment).
  • Information you provide in questionnaires, intake forms or feedback forms.
  • Messages you send to us by email or through our contact page.
  • Any health or travel context you choose to describe in your own words when asking for help or support.

Please avoid sharing highly sensitive details by email or general contact forms unless it is necessary for us to respond to your request. If we ever offer a specific secure channel for clinical information, we will signpost that clearly.

b) Technical and usage information

When you visit our website, we may automatically collect:

  • Basic device and browser details (e.g. type of device, browser version).
  • General usage data such as which pages you visit and how long you stay on them.
  • Aggregated information about which tools and resources are used most, to help us improve them.

We currently use only simple, privacy-respecting tools for this and do not attempt to identify you as an individual from this data.

We do not knowingly collect information from children under the age of 16. If you believe a child has provided us with personal information, please contact us so we can remove it.

3. How we use your information

We use your information to:

  • Provide, operate and improve our website, tools and services.
  • Respond to enquiries, booking requests and messages.
  • Understand which content, tools and offers are most useful so we can improve them.
  • Send you updates you have explicitly asked to receive (for example, newsletters or appointment confirmations).
  • Maintain the security, reliability and legal compliance of our services (for example, by keeping basic logs and payment records).

We do not sell or rent your personal information to third parties, and we do not use your inputs into TBL tools to train general-purpose AI models.

4. How TBL tools handle your data

a) Data that stays on your device (default)

Most interactive tools on TBL are designed to run locally in your browser. That means:

  • Tool inputs: ratings, checklists, notes, preferences, plans and similar inputs you enter into tools are usually stored in your browser’s localStorage so they are available next time you visit.
  • On-device sensors: where a tool uses motion, noise level, light or coarse location, that data is processed on your device by your browser. We do not record audio, we do not run background location tracking, and these signals are not uploaded to our servers.
  • Exports you create: if a tool allows you to export a file (for example, a PDF or JSON file), that file is created for you to save, keep or share. We do not automatically receive a copy.

You can clear this data at any time by using any “Reset/Clear” options inside a tool or by clearing site storage for tickedbucketlist.com in your browser settings.

b) Data we process on our servers (limited)

Some data needs to be processed on our servers or by our service providers so we can run TBL as a business. This may include:

  • Accounts and membership: if we offer accounts or subscriptions, we may process your name, email address, login details (passwords stored in hashed form only) and membership tier to provide the service you requested.
  • Payments: card details and billing information are handled by our payment processor. We do not see full card numbers. We keep basic transaction records for accounting and legal purposes.
  • Support and feedback: emails, form submissions and other messages you send to us so we can respond and improve our tools.
  • Basic analytics and security logs: information such as page views, referrers, approximate region, device type and error logs, so we can keep the site reliable, understand usage in aggregate and protect against abuse.

Where required by law (for example in the EEA/UK), we rely on a mix of consent (for certain cookies, sensors or newsletters), contract (to provide services you sign up for), legitimate interests (to run, secure and improve TBL) and legal obligations (such as tax and accounting rules) as legal bases for processing.

c) Data we deliberately do not collect or use

  • We do not sell personal information.
  • We do not run cross-site targeted advertising or share your data with data brokers.
  • We do not require you to upload formal medical records or diagnoses in order to use TBL tools.
  • We do not use your tool inputs to build individual advertising profiles.

5. Cookies, local storage and privacy signals

We may use a small number of cookies and similar technologies to:

  • Keep the site running securely and reliably (essential cookies).
  • Remember basic preferences, such as display choices (functional cookies or localStorage).
  • Measure anonymous, high-level usage patterns on our site (analytics cookies or similar), without cross-site ad tracking.

You can control cookies through your browser settings. If you block some types of cookies, parts of the site may not function perfectly, but core pages should still load.

Where required by law, we rely on your consent for non-essential cookies. We aim to respect relevant browser-level privacy signals (such as Global Privacy Control) where technically and legally appropriate.

We do not use invasive tracking to follow you around the web or build detailed advertising profiles.

6. Social media and Pinterest

We have a presence on social platforms such as Pinterest and Facebook so people can discover Ticked Bucket List content there.

On this website, we take a conservative approach:

  • We do not embed Pinterest Save buttons or Pinterest tracking pixels that automatically load on every page.
  • We also avoid auto-loading other social media widgets that track you just because you’re browsing our site.

This means Pinterest and other social platforms do not receive data about you merely from visiting tickedbucketlist.com.

If you click a link from our website to Pinterest or any other social media platform, that platform may collect data directly from you in line with its own privacy policy. We do not control that processing. We recommend reviewing the privacy notices of any external services you choose to use.

7. Service providers and international transfers

We work with a small number of trusted service providers to run TBL. These may include website hosting, email services, payment processors, basic analytics and customer support tools.

  • Each provider only receives the information they reasonably need to perform their function.
  • They must process that information under our instructions and are not allowed to use it for their own independent marketing.

Some of these providers may be located in other countries. If we transfer your data across borders (for example, between Kenya, the EU, the UK or the US), we will take appropriate steps to protect it, such as using Standard Contractual Clauses or other safeguards where required by law.

8. Security

We take appropriate technical and organisational measures to keep your information secure, including:

  • Using reputable hosting and software providers.
  • Limiting access to personal data to people who need it for a clear purpose.
  • Keeping systems and plugins updated where possible.
  • Using encryption in transit and other standard security practices where appropriate.

No website or electronic system is perfectly secure, but we aim to reduce unnecessary risk and collect only the minimum information we need to deliver our services. You can help by using strong, unique passwords and keeping your devices and browsers updated.

9. Your rights

Depending on where you live, you may have certain rights over your personal information. These may include:

  • The right to access the personal information we hold about you.
  • The right to ask us to correct inaccurate information.
  • The right to request deletion of your personal information, where applicable.
  • The right to object to or restrict certain types of processing.
  • The right to withdraw consent where we rely on consent.
  • The right to data portability in some circumstances.

If you live in the European Economic Area (EEA) or the United Kingdom, these rights are set out in the GDPR/UK GDPR. If you live in Kenya, they are set out in the Data Protection Act, 2019. If you live in California, you may have additional rights under the CCPA/CPRA, including rights relating to “selling” or “sharing” personal information. We do not sell personal information or share it for cross-context behavioural advertising.

If you would like to exercise any of these rights or ask us to stop using your data in a particular way, please email info@tickedbucketlist.com and we will respond within a reasonable timeframe. We may ask you to verify your identity before we act on your request.

You also have the right to lodge a complaint with your local data protection authority. We would appreciate the chance to address your concerns directly first, if possible.

10. Children

TBL is designed for adults and older teens traveling with appropriate support. We do not knowingly collect personal information from children under the age at which parental consent is required in their jurisdiction. If you believe a child has provided us with personal information, please contact us so we can delete it.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect new tools, services, legal requirements or changes in how we operate. When we make significant changes, we will update the “Last updated” date below and may post a notice on the website.

Last updated: 19 November 2025