Privacy policy
Last updated 14 August 2026
This policy explains what personal data Out There: Together collects, why, and what you can do about it. It covers both this website and the Out There mobile app.
The short version. We collect what we need to show you sailings and connect you with other people. With your permission, we also use Meta Pixel to measure our advertising. We do not sell your data for money. Anything about your identity or who you are looking to meet is optional, kept separate from your public profile, and only stored if you explicitly ask us to. We do not take payments, so we never hold your card details.
Contents
1. Who we are
Out There: Together is a cruise discovery and social planning service for LGBTQ+ travellers, operated by Blockbeam Ltd of 6 Moulton Close, Knutsford, WA16 8BJ, United Kingdom.
Blockbeam Ltd is the data controller for the personal data described in this policy. We are registered with the Information Commissioner's Office under reference ZC056342. You can find us at blockbeam.co.uk.
You can reach us about anything in this policy at hello@outtheretogether.com.
2. What we collect
When you use this website
The website does not ask you to create an account. Our analytics provider, Metricool, records a page view when you load a page. That record contains the address of the page, the size of your browser window, your IP address and your browser user agent. It does not store anything on your device and does not follow you to other websites.
If you choose to accept marketing cookies, we also use Meta Pixel. It sends Meta a PageView event and information about your visit, such as the page address, browser and device information, IP address and referrer. Meta may use cookies and similar identifiers to associate this with information it already holds about you. We use the Pixel to measure the performance of our Facebook and Instagram advertising and to improve who sees those ads. We do not send Meta your waitlist email address through the Pixel.
Marketing cookies are optional and the legal basis is your consent. You can reject them without affecting your use of the site, or change your mind at any time through Cookie settings. Meta explains its own processing in its Privacy Policy.
If you join the waitlist, we store the email address you enter, the date you gave it and the wording you agreed to. That is all we keep, and we use it only to tell you when the app opens. We do not pass it to anyone else and we do not use it to advertise to you elsewhere. Consent is the lawful basis, and you can withdraw it at any time by emailing hello@outtheretogether.com, which removes your address from the list.
When you use the app
| What | Detail |
|---|---|
| Account | Email address and a password, which is stored only as a secure hash and is never visible to us. |
| Profile | Display name, and optionally a home port, a photo, interests and a short description you write yourself. |
| Sailings | Which sailings you join, and whether you have marked yourself as planning or booked. Changes to that status are recorded. |
| Crews | Which crews you belong to, invitations you send or accept, and shared sailing shortlists. |
| Events | Events you host or are invited to, and your replies to them. |
| Messages | The content of messages you send in sailing chats and crew chats, and when you sent them. |
| Identity and intent | Optional. See section 4, which explains how this is treated differently. |
| Safety | Reports you make, accounts you block or mute, and the outcome of any moderation decision. |
| Partner clicks | When you tap through to a booking partner we record that it happened, which sailing and partner it was for, and a reference code. See section 6. |
| Technical | Basic device and app information needed to keep the service working and to sync your data when you reconnect. |
3. Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Creating and running your account, showing you sailings, crews, events and messages | Performance of a contract with you |
| Storing your identity and intent preferences | Your explicit consent, which you can withdraw at any time |
| Keeping the community safe: reports, blocking, moderation, and preventing abuse | Our legitimate interests in protecting members, and our legal obligations |
| Recording clicks through to booking partners so we are paid correctly | Our legitimate interests in running a viable service |
| Understanding how the website is used, in aggregate | Our legitimate interests in improving what we offer |
| Measuring Meta advertising and improving who sees it | Your consent to marketing cookies |
| Meeting our legal and regulatory obligations | Compliance with a legal obligation |
Where we rely on legitimate interests, we have considered whether that interest is overridden by your rights, and you can object at any time using the contact details below.
4. Identity and intent data
Information about your gender, your sexual orientation, and what you are looking for on a sailing is special category data under UK data protection law. We treat it differently from everything else.
- It is entirely optional. The app works without it.
- We only store it if you give explicit consent, and we record the version of the wording you agreed to and when you agreed to it.
- It is held separately from your public profile, in a restricted part of our database that ordinary application access cannot read.
- It is never shown to other members unless you have chosen to make it visible.
- You can withdraw consent at any time. When you do, we delete the stored preferences.
5. Who we share it with
We do not sell your personal data, and we never will.
We share it only with service providers who process it on our instructions:
- Supabase, which hosts our database, authentication and file storage.
- Metricool, which provides website analytics.
- Meta, which provides Meta Pixel for advertising measurement when you have accepted marketing cookies.
- GitHub, which hosts this website.
We may also disclose personal data where we are legally required to, or where it is necessary to protect the safety of our members.
Other members see only what your settings allow: your display name, your photo if you have added one, your home port if you have added one, your status on a sailing you have both joined, and anything you post in a chat you are both part of.
6. What happens when you click through to book
Out There is an introducer, not a travel agent. We never take payments, hold deposits or confirm bookings.
When you tap through to a booking partner, we record that the click happened, along with the sailing, the partner and a reference code that lets the partner tell us the referral came from you. We do this so that we are paid the referral fee we are owed.
Once you arrive on the partner's website you are dealing with them, under their privacy policy, not ours. We have no visibility of what you book or what you pay.
The same applies to tours and activities. Where we show things to do at a port of call, those come from Viator, a Tripadvisor company, and tapping one takes you to Viator's website to book. The link identifies Out There rather than you, so no personal information about you is sent to Viator when you tap it. From that point Viator's own privacy policy applies and they may set their own cookies.
We earn a commission on bookings made this way. Our affiliate disclosure explains which links earn us money, and why it does not change what you pay or the order things are shown in.
8. How long we keep it
| Data | Kept for |
|---|---|
| Account and profile | While your account is open. Deleted within 30 days of you closing it. |
| Messages | While the sailing or crew exists, so that other members keep a coherent conversation. |
| Identity and intent preferences | Until you withdraw consent, then deleted. |
| Consent records | Six years after the consent ends, because we need to show what was agreed and when. |
| Safety reports and moderation decisions | Up to six years, so repeat behaviour can be identified. |
| Partner click records | Six years, for commission reconciliation and tax records. |
| Website analytics | As set by Metricool's own retention policy. |
| Meta Pixel advertising data | As set by Meta's retention and account settings. We do not retain a separate identifiable copy of this Pixel data. |
| Waitlist email address | Until the app opens and we have told you, or until you ask to come off the list, whichever is first. |
7. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted, in some circumstances;
- restrict or object to how we use it;
- receive your data in a portable format;
- withdraw consent at any time, where we rely on consent.
Ask us at hello@outtheretogether.com and we will respond within one month. There is no charge.
9. Deleting your account
You can delete your Out There account and the personal data attached to it at any time. There are two ways:
- In the app. Go to You, then Settings, then Delete account.
- On the web. Use the account deletion request page, which does not require you to have the app installed.
When you delete your account we remove your profile, your photo, your sailing and crew memberships, your event replies, and your identity and intent preferences within 30 days.
Some records are kept longer, and we explain why in section 8. In short: messages you sent stay visible to the people you sent them to so their conversations still make sense, though they are no longer linked to your profile; records of consent, of safety reports, and of clicks through to booking partners are retained because we are required to be able to evidence them.
10. Where your data is held
Our database and files are hosted by Supabase. Our website is hosted by GitHub Pages. Our analytics provider, Metricool, is based in Spain. When you consent to marketing cookies, Meta may process Pixel data in the UK, European Economic Area and other countries, including the United States.
Where personal data is transferred outside the UK, we rely on the UK International Data Transfer Agreement or the UK Addendum to the European Commission's standard contractual clauses, together with the adequacy decisions that apply to the country concerned.
11. Security
Access to your data is controlled at the database level, so members can only read the records they are entitled to see. Passwords are hashed and never stored in a readable form. Identity and intent preferences are held in a separate restricted schema. Supplier credentials and tracked partner links are held on our servers and are never exposed to the app.
No system is perfectly secure. If a breach occurs that is likely to put your rights at risk, we will tell you and the ICO without undue delay.
11. Age
Out There is for adults. You must be 18 or over to hold an account. We do not knowingly collect data about anyone under 18, and we will delete any account we find belongs to someone under that age.
13. Changes
If we change this policy we will update the date at the top. If a change materially affects how we use your data, we will tell you in the app or by email before it takes effect.
14. Contact and complaints
Email hello@outtheretogether.com.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, by calling 0303 123 1113, or by writing to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We would rather you came to us first so we can put it right.