HOW DO WE STORE, USE, SHARE AND DISCLOSE YOUR SITE VISITORS' PERSONAL INFORMATION?

Our website and services are hosted on the Wix.com, Travel Exchange, HVN Travel Group and Cybersource platforms. These provide us with online platforms that allow us to advertise and sell our products and services to you. Your data may be stored through any of these platform’s data storage, databases, and the general applications. We store your data on secure servers behind a firewall.

All direct payment gateways offered and used by our company adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

In certain circumstances we may share the information you provide to us with third parties. The third parties who we might share your data with include:

• Service Providers: If you make a booking, we’ll have to share your booking data with the third parties, such as hoteliers, airlines, insurers, and transfer providers to complete your booking contract. The data shared may include your name and the names and ages of any guests travelling with you, any preferences, or special requests you told us about when you made your booking and your contact details. If you contact us with a query about your booking, we may pass this on to our providers if they are needed to answer you.

• Third party support services: These includes anyone who provides support services or functions on our behalf, including payment card processing, business analytics, review agencies, advertising, and customer support services. This may be to send you marketing material on our behalf or to collate information that can be analyzed to improve our service. They have access to and may collect information only as required to perform their agreed functions and are not permitted to share or use information for any other purpose.

• Payment Processors and other financial institutions: When you make a payment on your booking, we use a third-party payment processor to take your payment. If you request a chargeback on your booking, it may be necessary for us to share certain details with the payment processor and the relevant financial institution, so they can manage the chargeback. This may include a copy of your booking confirmation, financial details and the IP address that was used to make your booking.

• Referring websites: If you were referred to our site via another webpage, we may share some information about you with that referring website so that they can contact you about their products and services, which may include Google Analytics.

• Business Affiliates: We may share your data with our business affiliates with whom we offer relevant joint services. This may include other agencies and advertising networks. We do this to maximize the services that we provide you and so they may contact you directly about their relevant products and services that may interest you. You can unsubscribe from these emails at any time.

• Advertising: We use third-party advertising companies to serve ads when you visit our Website. These companies may use information (not including your name, address, email address, or telephone number) about your visits to this and other Web sites in order to provide advertisements about goods and services of interest to you. If you would like more information about this practice and to know your choices about not having this information used by these companies, visit www.networkadvertising.org/managing/opt_out.asp.

• Law enforcement authorities: We will disclose personal information insofar as it is required by law or where we believe it is necessary for the prevention, detection, or prosecution of potentially criminal acts, including for fraud, immigration, customs, security, or anti-terrorism purposes.

Please note that while we have procedures and security features to protect your information from access by unauthorized persons and against unlawful processing, accidental loss, destruction, and damage, we don’t control the privacy practices of any of these third-parties or your Service Providers and we would encourage you to review their own privacy policies where appropriate.

Furthermore, any information that you provide directly to your Service Providers or other suppliers is not covered under this Privacy Policy and we would urge to check their own privacy policies before providing any personal information.

​

Legal Basis for Processing Personal Data

When we process your information as described above, we will be relying on one or more of the following legal rights: 

• Performance of a contract: We use your information to carry out the contract that you have with us and your Service Providers. We’ll use the information that you provide us when making a booking to conclude and process the reservations with the relevant third-party Service Providers. 

• Consent: You may, through your action(s) of providing us your details, consent to us sending you marketing and promotional material. If you do kindly give us this consent, we’ll rely on this consent when contacting you. You can always withdraw your consent at any time by simply unsubscribing. 

• Legitimate interest: We may use your information for our own legitimate interest, for example to provide you with the most relevant content on our site or to promote new services and for certain administrative and legal purposes. If you fail to complete a purchase, we may send you some follow-up emails to try and help you, or seek your feedback or offer you alternative products related to your selection. 

• Business transaction: We may use your data in connection with a business transaction such as the sale of a part or the whole of our business. 

• To Comply with a legal obligation:  We may share your personal data with regulatory authorities such as immigration, border control, security, anti-terrorism, and any other legitimate legal obligation as required.

• To protect your vital interests or those of another individual: We may share your information in the case of an emergency.  For example, with insurance companies or medical personnel.

​