deft-canyon

Last updated: January 2024

Introduction

deft-canyon ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our travel planning services.

We are based in the United Kingdom and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information We Collect

Personal Information You Provide

When you enquire about our services or make a booking, we may collect:

Full name
Email address
Postal address
Travel preferences and requirements
Passport details (when required for bookings)
Dietary requirements or accessibility needs
Payment information

Information Collected Automatically

When you visit our website, we may automatically collect certain information about your device, including:

IP address
Browser type and version
Pages visited and time spent on pages
Referring website
Device type and operating system

How We Use Your Information

We use the information we collect for the following purposes:

To provide and manage our travel planning services
To process bookings with airlines, hotels, and other travel suppliers
To respond to your enquiries and communicate with you
To send you relevant travel information and updates about your bookings
To improve our website and services
To comply with legal obligations

Legal Basis for Processing

We process your personal data on the following legal bases:

Contract: Processing necessary to fulfil our contract with you when arranging travel services
Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services
Consent: Where you have given explicit consent, such as for marketing communications
Legal Obligation: Processing required to comply with applicable laws

Data Sharing

We may share your personal information with:

Travel suppliers (airlines, hotels, tour operators) necessary to fulfil your booking
Payment processors to handle transactions securely
Professional advisors (accountants, lawyers) as required
Regulatory authorities when required by law

We do not sell your personal information to third parties for marketing purposes.

International Transfers

When you book international travel, your information may be transferred to countries outside the UK. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses approved by the UK Information Commissioner's Office.

Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including:

Booking records: 7 years after the travel date (for legal and accounting purposes)
Marketing preferences: Until you withdraw consent
Website analytics: 26 months

Your Rights

Under UK data protection law, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data (subject to legal requirements)
Object to or restrict certain processing
Data portability
Withdraw consent at any time

To exercise any of these rights, please contact us at [email protected].

Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Cookies

Our website uses cookies and similar technologies. For detailed information about the cookies we use and your choices, please see our Cookie Policy.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Email: [email protected]

Address: 47 Clerkenwell Road, London, EC1M 5RS, United Kingdom

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.