Last updated: June 18, 2026
We comply with the General Data Protection Regulation and respect the data protection rights of individuals in the European Economic Area and the United Kingdom.
This document outlines how we meet GDPR requirements and how you can exercise your rights regarding personal data.
We process personal data under the following legal bases:
Contractual necessity: When you request our travel planning services, processing your information is necessary to fulfill that service agreement.
Legitimate interests: We process certain data to improve our services, maintain security, and communicate with existing clients about relevant updates.
Consent: Where required, we obtain explicit consent before processing specific categories of data.
Right to access: You can request a copy of the personal data we hold about you.
Right to rectification: You can ask us to correct inaccurate or incomplete information.
Right to erasure: You can request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
Right to restriction: You can ask us to limit how we use your data in certain circumstances.
Right to data portability: You can request your data in a structured, commonly used format for transfer to another service provider.
Right to object: You can object to processing based on legitimate interests or for direct marketing purposes.
We retain personal data only as long as necessary to provide our services and meet legal obligations. Travel planning documents are typically retained for three years after service completion to address potential follow-up inquiries.
Technical logs and website analytics data are retained for shorter periods, generally not exceeding twelve months.
Your data is processed and stored within the European Economic Area and the United Kingdom. We do not transfer personal information outside these regions without appropriate safeguards.
For questions about data protection or to exercise your rights, contact our data protection contact at [email protected].
If you believe we have not addressed your data protection concerns adequately, you have the right to lodge a complaint with the relevant supervisory authority in your country.
To exercise any of your data protection rights, send a request to [email protected]. We will respond within one month of receiving your request, or inform you if additional time is needed.
We may request verification of your identity before processing certain requests to protect against unauthorized access to your personal data.
We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.
Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children without parental consent.