Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:

1. Identity Data
2. This includes data relating specifically to your identity, such as your first name, maiden name, last name, marital status, title, date of birth and gender.
3. Contact Data
4. This includes data relating to how you may be contacted, such as your billing address, delivery address, email address and telephone numbers.
5. Financial Data
6. This include data relating to your means and methods of payment, such as your bank account and payment card details.
7. Transaction Data
8. This includes data relating to the transactions you have carried out with us, such as details about payments to and from you and other details of products and services you have purchased from us.
9. Technical Data
10. This includes more technical data that we may obtain when you make use of our website, such as your internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
11. Profile Data
12. This includes the data that we receive when you create a profile on our website and make use of that policy, such as your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
13. Usage Data
14. This includes information about how you use our website, products and services.
15. Marketing and Communications Data
16. This includes your preferences in relation to whether or not you want to receive marketing from us and our third parties and also your communication preferences.
17. We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we will treat the combined data as personal data which will be used in accordance with this privacy notice.

Special Categories of Personal Data

We collect the following special categories of personal data about you.

Details about your:

• dietary requirements which may disclose your religious or philosophical beliefs;
• health.

We collect and process the above data only where it is strictly necessary to do so in order to deliver the travel service that you have purchased. Furthermore, we will only collect and process the above special categories of sensitive personal data where you have provided us with your explicit consent to do so.

You are not under any obligation to consent to us processing your sensitive personal data.

If you are happy to consent to our use of your sensitive personal data, you will also be able to withdraw your consent at any time. However, as this will prevent us from providing the travel service you have booked, we will be required to treat any withdrawal of consent as a cancellation of your booking and the cancellations in clause Cancellation of our Booking Terms and Conditions will become payable.

If You Fail to Provide Personal Data



Where we need to collect personal data by law or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you.

In other words, where we require details from you in order to provide you with your chosen travel services, if you do not provide us with the necessary details then we will not be able to provide the services you have booked or are attempting to book.

In this case, depending upon when you fail to provide the necessary date, we may either not be able to process your booking or we may have to cancel your booking, in which case we will treat this as a ‘cancellation by you’ in accordance with our Booking Terms and Conditions. We will notify you if we are unable to process a booking or are required to cancel a booking for this reason.

We use different methods to collect data from and about you including through:

• Direct interactions
• You may give us your Identity, Contact and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
• make an enquiry with us;
• make a booking of travel services;
• create an account on our website;
• subscribe to our newsletter or other publications;
• request marketing to be sent to you;
• enter a competition, promotion or survey; or
• give us some feedback.
• Automated technologies or interactions
• As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns.
• We collect this personal data by using cookies, and other similar technologies. Please see our cookie policy for further details.

We may have to share your personal data with the parties set out below for the purposes set out in the table in paragraph 4 above.

1. External Third Parties as set out in the [Glossary].
2. Specific third parties, such as Feefo Holdings Ltd, based inside the EU and who act as a data processor on our behalf for the purposes of sourcing reviews and feedback from you regarding the performance of any bookings that you place with us.
3. Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.