Privacy Policy (GDPR Compliant)
At Yule Trips Ltd ("We", "Us", "Our"), we value your privacy and are committed to protecting your personal data. This policy outlines how we collect, use, store, and share your information when you use our services (flight bookings, hotel reservations, visa consultations) or visit our website.
This policy adheres to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Yule Trips Ltd acts as the "Data Controller" for your personal information.
Registered Office: Office 211, Unit 5, 399-405 Oxford Street, Mayfair, London, W1C 2BU.
Data Protection Officer (DPO) Contact: info@yuletrips.co.uk
1. The Data We Collect About You
To provide travel services, we must collect specific personal data ("Personal Information"). This includes:
- Identity Data: First name, maiden name, last name, username, marital status, title, date of birth, and gender.
- Contact Data: Billing address, delivery address, email address, and telephone numbers.
- Travel Data (API): Passport details (Number, Expiry, Nationality), Visa details, and Redress Control Numbers. This is known as Advance Passenger Information (API).
- Financial Data: Bank account and payment card details (Processed securely via our payment providers).
- Transaction Data: Details about payments to and from you and details of products/services you have purchased from us.
- Health Data: Information regarding dietary requirements (which may disclose religious beliefs) or health conditions requiring special assistance (e.g., wheelchair access).
2. How We Collect Your Data
We use different methods to collect data from and about you including:
- Direct Interactions: You may give us your Identity, Contact, and Financial Data by filling in forms or by corresponding with our agents (e.g., Sam, Adam, or Jason) via Email, WhatsApp, or Phone.
- Automated Technologies: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns (Cookies).
- Third Parties: We may receive data about you from other travel providers if you are part of a group booking made by someone else.
3. How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we use your personal data in the following circumstances:
- Performance of Contract: To process your booking with Airlines, Hotels, and Visa Authorities. Without this data, we cannot issue your ticket.
- Legal Obligation: To comply with government requirements (e.g., sharing API data with Border Control/Immigration).
- Legitimate Interests: To manage our relationship with you, ask for reviews, or notify you about changes to our terms or privacy policy.
4. Sharing of Your Data (Third Parties)
As a Travel Agency, we MUST share your data with third parties to fulfill your booking. We do not sell your data. We share it with:
- Service Providers: Airlines, Hotels, Car Rental Agencies, and Tour Operators who fulfill your travel services.
- Government Authorities: Customs, Border Control, and Immigration authorities in the UK and your destination country (required by law for safety and security).
- Payment Processors: To securely process your Debit/Credit card payments.
Note: Many of these third parties (e.g., an airline in the USA or a hotel in Dubai) are based outside the UK/EEA. By making a booking, you acknowledge that your data will be transferred internationally to fulfill the contract.
5. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. Access to your personal data is limited to employees, agents (e.g., our specific travel consultants), and contractors who have a business need to know. They are subject to a duty of confidentiality.
6. Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. By law, we have to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they cease being customers for tax purposes.
7. Your Legal Rights
Under strict circumstances, you have rights under data protection laws in relation to your personal data, including the right to:
- Request access to your personal data.
- Request correction of the personal data that we hold about you.
- Request erasure of your personal data ("Right to be forgotten").
- Object to processing of your personal data.
- Request restriction of processing your personal data.
If you wish to exercise any of the rights set out above, please contact our Data Privacy team at info@yuletrips.co.uk.
8. Third-Party Links
Our website may include links to third-party websites (e.g., Embassy websites, Airline check-in portals). Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.
Contact Us Regarding Privacy
If you have any questions about this privacy policy or our data handling practices, please contact us.
📱 +44 7446 230755