DeluxeBreaks Limited is committed to protecting any personal data that you give to us. Below, we describe how we use and protect your personal data. Please also read our Cookie Statement, which explains how we use cookies on our websites. If you have any questions about what we do with your personal data after reading this, please contact us using the contact details provided below.

This Privacy Notice covers all platforms through which we offer travel-related services, this includes our Website and where you interact with us on social media such as Facebook (in which case you should also refer to those social media sites' privacy notices).

What kind of personal data do we collect?

When you book any travel arrangements with us, we need you to provide us with certain information, including your name, address, e-mail address, phone number/s; date of birth for flights, and payment information.

If you fill in a booking form but don’t actually complete the booking, we will use your information (which we will have collected using cookies) to check whether you need any further assistance, or whether you would like to complete your booking. For more information about how we do this (and how to prevent this if you wish to do so), please see our  Cookie Statement .

You may also provide us with information if you subscribe to our mailing list, for example to receive our brochure, Cruise Ahoy, or to enter a competition.

Personal data you give us about others

If there are other people on your booking, or if you are booking a holiday for someone else, we will ask you to conform that you have their permission to give us their personal data as described above. It is your responsibility to ensure that anyone about whom you have provided personal data has given their consent and is aware of how we use and process their information.

Personal Information we collect automatically

When you visit our Website, even if you don’t make a booking, we will automatically collect certain information such as your IP address, the date and time you accessed the Website, the hardware, software or internet browser you use and information about your visit, including pages you viewed and interaction information. If you are using a mobile device, we may collect data that identifies your mobile device, location details and any specific settings.

Sharing Information with Third Parties

• Suppliers: Your personal information will only be shared with suppliers relevant to your booking, and where your booking cannot be fulfilled without your information being provided, e.g. your flight operator, hotel, transport provider, etc. Only the information that is necessary to deliver your travel will be shared.
• Payment Providers and other financial institutions: If you request a chargeback for your booking, it may be necessary for us to share certain reservation details with the payment service provider and the relevant financial institution so they can handle the chargeback. This may include a copy of your booking confirmation or the IP address that was used to make your reservation.
• Any law enforcement body, regulator, government agency, court or other third party where we believe disclosure is necessary as a matter of applicable law or regulation or to exercise, establish or defend our legal rights

What do we do with your personal data?

Once we have collected your information, it will be used for the following purposes:

• Booking travel arrangements:  We will use your personal data to provide to you the services that we sell, which may include flights, hotels, transport, and other ancillary products. We would not be able to fulfil our contract with you without this information.
• To communicate with you in relation to your holiday: We will use the contact information you have previously shared with us to communicate with you in relation to your holiday and to provide you with information relevant to your holiday. This may include information about your destination, security alerts, and reminders of balance payments due.
• Customer Services:  We will use the information that you have provided to respond to any requests or queries you may have. If contact is by telephone, your call may be recorded for quality control and training purposes.
• Marketing: Where you have booked with us and you have not opted out of future contact, we may contact you by telephone e-mail, post or text message, to provide information about other goods and services that we offer that we think will be of interest to you.
• Promotional: If you participate in a promotion, such as a survey or competition, we will use the information you provide to carry out that promotion.
• Consent: You will be asked for your consent for us to provide you with future marketing information. You can opt-out of receiving marketing communications from us at any time by contacting our Customer Services department.
• Legal and Vital requirements: We sometimes have a legal obligation to collect personal data from you, e.g. to comply with tax laws, or where we need your personal data to protect your vital interests or those of another person, e.g. if you are involved in an accident or emergency in resort.

How and where will your data be processed?

Any information that we hold about you is stored on our secure servers and all payment transactions are encrypted. Only authorised personnel are permitted to access personal data in the course of their work. Whilst we do our best to protect your personal data, no information transferred over the internet can be guaranteed to be completely secure and you provide your information at your own risk.

When your credit card details are required as part of the booking process, we store the last 4 digits and an authorisation code. In the case of some low-cost airlines, we will use the payment details you provide to purchase the flight seats on your behalf.

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"), including (in some instances) where we transfer your data to our suppliers so that they can assist us with providing our services to you. Where your information is transferred outside of the EEA, we will take steps to ensure that the information receives the same level of protection as if it remained within the EEA, including by entering into data transfer agreements, using the EU Commission approved Standard Contractual Clauses, or by relying on certification schemes such as the EU-US Privacy Shield. You have the right to details of the mechanism under which your data is transferred outside of the EEA – for this information, please contact us using the details set out under "How can you contact us?" below.

Retention of your personal data

When we have no ongoing legitimate business need to process your personal data (for example, to provide products or services to you or to retain records to manage any claims which you or we may have in respect of the products and services we provide to you), we will either delete or anonymise it or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store your personal data and isolate it from any further processing until deletion is possible.

Your rights in respect of your personal data

You have the following rights in relation to the personal data that we hold about you:

• You can access, correct, update or request deletion of your personal data, at any time.
• You have the right to opt-out of marketing communications we send you at any time by contacting us.
• Once we have collected and processed your personal data with your consent, you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent.
• You have the right to complain to a data protection authority about our collection and use of your personal data. For more information, please contact your local data protection authority. The Information Commissioner's Office is the data protection authority for the UK.

Personal data of children

Our Website is not intended to be used by children under 18 years of age. We only process information about children with the consent of their parents or legal guardians.

Changes to our Privacy Notice

We may update this Privacy Notice from time to time in response to changing legal, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws.