1. Introduction

Voyator Travel & Tours Limited (UK) (“we”, “our”, “us”) is a travel marketing and Online Travel Agency (OTA) registered in England and Wales. We are committed to protecting your privacy in compliance with the UK Data Protection Act 2018, the UK GDPR, and the EU GDPR.

Voyator acts as the Data Controller for the personal information we collect through our website, mobile applications, and booking services. We are registered with the Information Commissioner’s Office (ICO) under registration number [Insert Your ICO Number Here].

2. What Data We Collect

We collect and process the following categories of personal data:

• Identity Data: Name, title, gender, and date of birth.

• Contact Data: Email address, telephone number, and billing/postal address.

• Booking & Travel Data: Passport details (where required for international travel), travel preferences, flight/hotel confirmations, and dietary or accessibility requirements.

• Financial Data: We process payments via secure third-party providers (e.g., Stripe, PayPal). We do not store your full credit or debit card details on our servers.

• Technical & Usage Data: IP address, browser type, device ID, and information on how you interact with our platform.

3. How We Use Your Data

We process your data based on the following lawful bases:

• Contractual Necessity: To fulfill your travel bookings and manage your account.

• Legitimate Interests: To improve our services, prevent fraud, and conduct business analysis.

• Consent: For marketing communications and the use of non-essential cookies.

• Automated Processing: We may use AI-driven tools for customer support (e.g., chatbots) and personalized travel recommendations. You have the right to request human intervention if an automated decision significantly affects you.

4. Disclosure to Third Parties

To provide our services, we share necessary data with:

• Travel Suppliers: Airlines, hotels, chauffeur operators, and local tour providers to fulfill your specific booking.

• Service Providers: Cloud hosting, analytics, and CRM platforms that support our operations.

• Legal Authorities: When required by law or to protect the safety and rights of our users.

We never sell your personal data to third parties for marketing purposes.

5. International Data Transfers

Since travel is global, your data may be transferred to suppliers outside the UK or EEA. In such cases, we ensure your data is protected using Standard Contractual Clauses (SCCs), the UK Addendum, or by verifying the destination country has an “Adequacy Decision” from the UK Government.

6. Your Data Protection Rights

Under UK and EU law, you have the following rights:

• Access: Request a copy of the data we hold about you.

• Rectification: Correct inaccurate or incomplete information.

• Erasure: Request that we delete your data (the “Right to be Forgotten”).

• Data Portability: Request a transfer of your data to another provider.

• Object/Restrict: Limit how we process your data in certain circumstances.

7. Data Retention & Security

• Retention: We typically keep booking records for 7 years to comply with UK tax and legal obligations. Marketing data is retained until you opt out.

• Security: We use industry-standard encryption (SSL/TLS) and restricted access protocols to ensure your data is protected against unauthorized access or loss.

8. Cookies

We use cookies to enhance your experience. You can manage your preferences or opt out of non-essential cookies at any time through our Cookie Settings banner.

9. Contact Us & Complaints

If you have questions about this policy or wish to exercise your rights, please contact our Data Protection Team:

Voyator Travel & Tours (UK) Office 146, Unit 5, Oxford Street, Mayfair, London W1C 2BU, United Kingdom

📧 Email: info@voyator.co.uk

📞 Phone: +44 20 3432 3874

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.