Privacy Policy
How we collect, use, and protect your personal information
Last updated: January 2024
Introduction
velvet-leap ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
Information We Collect
We may collect information about you in various ways, including:
- Personal Data: Name, email address, postal address, and other contact details you voluntarily provide when making enquiries or bookings.
- Travel Information: Passport details, travel preferences, dietary requirements, and health information necessary for booking travel services.
- Payment Information: Credit card numbers and billing information processed through secure third-party payment providers.
- Usage Data: Information about how you use our website, including IP addresses, browser type, pages visited, and time spent on pages.
How We Use Your Information
We use the information we collect for purposes including:
- Processing and managing your travel bookings
- Communicating with you about your enquiries and reservations
- Providing customer support and responding to requests
- Sending promotional communications (with your consent)
- Improving our website and services
- Complying with legal obligations
Legal Basis for Processing
Under UK data protection law, we process your personal data on the following legal bases:
- Contract: Processing necessary to fulfil our contractual obligations to you
- Consent: Where you have given explicit consent for specific processing activities
- Legitimate Interests: For purposes that are in our legitimate business interests, provided these do not override your rights
- Legal Obligation: Where processing is necessary to comply with applicable laws
Data Sharing
We may share your information with:
- Travel suppliers (airlines, hotels, tour operators) as necessary to fulfil bookings
- Payment processors to complete transactions
- Service providers who assist our operations under confidentiality agreements
- Legal authorities when required by law or to protect our rights
We do not sell your personal information to third parties for marketing purposes.
Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Travel booking records are typically retained for seven years following completion of travel.
Your Rights
Under UK GDPR, you have rights including:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure (in certain circumstances)
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure.
International Transfers
Some of our travel suppliers and service providers may be located outside the UK. Where we transfer your data internationally, we ensure appropriate safeguards are in place in accordance with data protection law.
Contact Us
For questions about this Privacy Policy or to exercise your data rights, contact us at:
Email: [email protected]
Address: 42 Rose Street, Edinburgh EH2 3JD, United Kingdom
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.