Privacy Policy

At VistaVoyage ("we", "us", or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website vistavoyage.com and use our travel services. Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

1. Information We Collect

We collect information you provide directly to us when you book a trip, subscribe to our newsletter, or contact us for support. This may include:

• Personal Identification Information: Name, date of birth, passport details, and gender (required for travel bookings).
• Contact Information: Email address, phone number, and mailing address.
• Financial Information: Credit or debit card details (processed securely via third-party payment gateways; we do not store your full card details).
• Travel Preferences: Dietary restrictions, seat preferences, accommodation types, and special interests to help us tailor your itinerary.

Additionally, we automatically collect certain information when you visit our website, including your IP address, browser type, operating system, referring pages, and the time spent on our site.

2. How We Use Your Information

We use the information we collect to process your travel bookings, provide customer support, and improve our services. Specific purposes include:

• Booking and Fulfillment: To purchase flight tickets, reserve hotels, and arrange tours on your behalf.
• Communication: To send you booking confirmations, travel documents, and important updates regarding your trip.
• Marketing: With your consent, we may send you promotional emails about new destinations or special offers. You can opt out at any time.
• Legal Compliance: To comply with legal obligations, such as immigration requirements or tax regulations.
• Security: To detect, prevent, and address technical issues and fraudulent activity.

3. Legal Basis for Processing

As a company operating under the General Data Protection Regulation (GDPR), we rely on the following legal bases to process your personal data:

• Contract: Processing is necessary to fulfill our contractual obligation to you (i.e., providing the travel services you purchased).
• Legal Obligation: We are required to process data to comply with travel industry laws and regulations.
• Legitimate Interests: We may process data for our legitimate business interests, such as maintaining the security of our website or preventing fraud, provided these do not override your rights.
• Consent: Where you have explicitly given consent, such as for marketing communications or non-essential cookies.

4. Sharing Your Information

We do not sell your personal data. However, we may share your information with trusted third parties necessary to operate our business:

• Service Providers: Airlines, hotels, cruise lines, tour operators, and transport companies involved in your travel itinerary.
• Payment Processors: Third-party payment gateways that facilitate secure transactions.
• Technical Services: IT service providers and hosting platforms that help us maintain and secure our website.
• Legal Authorities: If required by law, court order, or to protect our rights, property, or safety.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy. For travel bookings, we typically retain records for the duration of the trip plus a statutory period to account for potential disputes, refunds, or legal requirements (usually 7 years). Marketing data is retained until you withdraw your consent.

6. Your Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

• Access: You have the right to request a copy of the personal data we hold about you.
• Rectification: You can request that we correct any inaccurate or incomplete data.
• Erasure: You can request the deletion of your personal data, subject to certain legal exceptions (e.g., ongoing bookings or legal obligations).
• Restriction: You can request that we restrict the processing of your data.
• Portability: You can request that we transfer your data to another organization.
• Objection: You have the right to object to processing based on legitimate interests.

7. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our website and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our site effectively.

8. International Data Transfers

As VistaVoyage operates in the travel industry, your information may be transferred to and processed in countries other than the United Kingdom. When we transfer your data, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We will only transfer your data to countries that have been deemed to provide an adequate level of data protection.
• Where required, we use appropriate contractual clauses approved by the relevant authorities to ensure your data is protected.

9. Children's Privacy

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal identifiable information from children under 18. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately after they are posted on this page.

11. Contact Us

If you have any questions about this Privacy Policy, the data we hold about you, or if you would like to exercise one of your data protection rights, please contact our Data Protection Officer using the details below: