Privacy Policy

Last updated: January 2024

1. Introduction

garnet-river ("we", "our", "us") is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services.

We operate as a travel agency based in Manchester, United Kingdom, and are subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We may collect and process the following categories of personal data:

Identity Data: First name, last name, title
Contact Data: Email address, postal address
Travel Preferences: Destination preferences, accommodation requirements, dietary needs, accessibility requirements
Technical Data: IP address, browser type and version, time zone setting, operating system
Usage Data: Information about how you use our website

3. How We Use Your Information

We use your personal data for the following purposes:

To process and fulfil travel booking enquiries
To communicate with you regarding your travel arrangements
To provide personalised travel recommendations
To send service-related communications
To improve our website and services
To comply with legal obligations

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

Contract: Processing necessary to perform our contract with you
Legitimate Interests: Processing necessary for our legitimate business interests
Consent: Where you have given consent for specific processing activities
Legal Obligation: Processing necessary to comply with legal requirements

5. Data Sharing

We may share your personal data with:

Travel service providers (airlines, hotels, tour operators) to fulfil your bookings
Payment processors to handle transactions securely
Professional advisers including lawyers and accountants
Regulatory authorities when required by law

We do not sell your personal data to third parties for marketing purposes.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. For completed travel bookings, we typically retain records for seven years to comply with financial and legal requirements.

7. Your Rights

Under data protection law, you have the following rights:

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure (right to be forgotten)
Right to restrict processing
Right to data portability
Right to object to processing
Rights related to automated decision-making

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission, secure server environments, and restricted access controls.

9. International Transfers

When we arrange international travel, your personal data may be transferred to countries outside the United Kingdom. We ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any significant changes by posting the new policy on our website with an updated revision date.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

garnet-river
47 Portland Street
Manchester, M1 3LF
United Kingdom

Email: [email protected]

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.