Processing of your personal data Under the GDPR (General Data Protection Regulation) we control and / or process any personal information about you electronically using the following lawful bases. We are registered with the ICO under the Data Protection Register. If, as determined by us, the lawful basis upon which we process your personal information changes, we will notify you about the change and any new lawful basis to be used if required. We shall stop processing your personal information if the lawful basis used is no longer relevant.
Your GDPR individual rights
Personal information we collect
Personal information is information that relates to an identifiable natural person. An identifiable natural person is someone that can be identified both directly and indirectly by their name, location data and identification number or by factors specific to the social, cultural, physiological, genetic, mental or economic identity of the natural person. Personal Information does not include any information that has been anonymised so that it can no longer be used to identify a natural person.
When you use our travel services, we do collect some personal information from you and any devices you use. Personal identifying information can include your name, telephone numbers, address, email addresses and financial information such as card details (in connection with online transactions). Provision of any other personal information is voluntary on your account, but it may become necessary in order to use some of our services, such as when you complete a transaction online.
We automatically collect information about your interaction with our website and communications with us. This is the information that we receive via devices you use when you access our website. This information may include a device identifier, a unique device token, a device type or an advertising identifier. We may also receive location information from your mobile device, but most mobile devices now allow you to disable the use of your location settings on internet browsers. We also collect computer and connection information such as your page view statistics, referral URL, browsing history, IP address and web log information.
We allow you to share pages and information from our website on social media sites, and these social media sites may give us automatic access to personal information they have retained from you, for example, content liked by you or viewed by you, and information about advertisements that you may have been shown or clicked on.
If you allow us access to websites with video content, then you agree that we can share your video viewing information from social media sites for at least two years, unless you withdraw any connections or authorisation of the social media sites. You are in control of the personal information that you allow us to have access to on the privacy settings included on social media sites, and also by the permission you give us when you allow us access to this personal information that is retained by the social media site about you.
How we use the personal information we collect from you We use your personal information for many business purposes and for different legal reasons. Below is a summary of how we may use your information and for which legal bases.
Your choices about how we can use your personal information
If you no longer want to receive any marketing communications from us, you have the option to unsubscribe via the link at the bottom of any emails you receive. From there you can change your communication preferences.We do not sell or disclose any personal information to third parties for their own marketing purposes without asking for your consent.Advertising
How we may share your personal information
We may disclose personal information to financial institution partners, third party service providers, law enforcement or government agencies and credit agencies or bureaus authorised by law for the following purposes:
In the unlikely event that there is a change of ownership, we may share information with them (in accordance with international privacy standards). We will require that the new organisation will follow this privacy notice to respect any personal information given. If we handle your personal information for any purposes not included in this policy, you will receive a notification prior to the processing of this information for the new purposes.