DeluxeBreaks Limited is committed to protecting any personal data that you give to us. Below, we describe how
we use and protect your personal data. Please also read our Cookie Statement, which explains how we use
cookies on our websites. If you have any questions about what we do with your personal data after reading this,
please contact us using the contact details provided below.
This Privacy Notice covers all platforms through which we offer travel-related services, this includes our Website
and where you interact with us on social media such as Facebook (in which case you should also refer to those
social media sites' privacy notices).
What kind of personal data do we collect?
When you book any travel arrangements with us, we need you to provide us with certain information, including
your name, address, e-mail address, phone number/s; date of birth for flights, and payment information.
If you fill in a booking form but don’t actually complete the booking, we will use your information (which we will
have collected using cookies) to check whether you need any further assistance, or whether you would like to
complete your booking. For more information about how we do this (and how to prevent this if you wish to do
so), please see our Cookie Statement .
You may also provide us with information if you subscribe to our mailing list, for example to receive our
brochure, Cruise Ahoy, or to enter a competition.
Personal data you give us about others
If there are other people on your booking, or if you are booking a holiday for someone else, we will ask you to
conform that you have their permission to give us their personal data as described above. It is your
responsibility to ensure that anyone about whom you have provided personal data has given their consent and is
aware of how we use and process their information.
Personal Information we collect automatically
When you visit our Website, even if you don’t make a booking, we will automatically collect certain information
such as your IP address, the date and time you accessed the Website, the hardware, software or internet
browser you use and information about your visit, including pages you viewed and interaction information.
If you are using a mobile device, we may collect data that identifies your mobile device, location details and any
specific settings.
Sharing Information with Third Parties
-
Suppliers: Your personal information will only be shared with suppliers relevant to your booking, and
where your booking cannot be fulfilled without your information being provided, e.g. your flight operator,
hotel, transport provider, etc. Only the information that is necessary to deliver your travel will be shared.
-
Payment Providers and other financial institutions: If you request a chargeback for your booking, it
may be necessary for us to share certain reservation details with the payment service provider and the
relevant financial institution so they can handle the chargeback. This may include a copy of your booking
confirmation or the IP address that was used to make your reservation.
-
Any law enforcement body, regulator, government agency, court or other third party where we
believe disclosure is necessary as a matter of applicable law or regulation or to exercise, establish or
defend our legal rights
What do we do with your personal data?
Once we have collected your information, it will be used for the following purposes:
-
Booking travel arrangements: We will use your personal data to provide to you the services that we
sell, which may include flights, hotels, transport, and other ancillary products. We would not be able to
fulfil our contract with you without this information.
-
To communicate with you in relation to your holiday: We will use the contact information you have
previously shared with us to communicate with you in relation to your holiday and to provide you with
information relevant to your holiday. This may include information about your destination, security alerts,
and reminders of balance payments due.
-
Customer Services: We will use the information that you have provided to respond to any requests or
queries you may have. If contact is by telephone, your call may be recorded for quality control and
training purposes.
-
Marketing: Where you have booked with us and you have not opted out of future contact, we may
contact you by telephone e-mail, post or text message, to provide information about other goods and
services that we offer that we think will be of interest to you.
-
Promotional: If you participate in a promotion, such as a survey or competition, we will use the
information you provide to carry out that promotion.
-
Consent: You will be asked for your consent for us to provide you with future marketing information. You
can opt-out of receiving marketing communications from us at any time by contacting our Customer
Services department.
-
Legal and Vital requirements: We sometimes have a legal obligation to collect personal data from you,
e.g. to comply with tax laws, or where we need your personal data to protect your vital interests or those
of another person, e.g. if you are involved in an accident or emergency in resort.
How and where will your data be processed?
Any information that we hold about you is stored on our secure servers and all payment transactions are
encrypted. Only authorised personnel are permitted to access personal data in the course of their work. Whilst
we do our best to protect your personal data, no information transferred over the internet can be guaranteed to
be completely secure and you provide your information at your own risk.
When your credit card details are required as part of the booking process, we store the last 4 digits and an
authorisation code. In the case of some low-cost airlines, we will use the payment details you provide to
purchase the flight seats on your behalf.
The data that we collect from you may be transferred to, and stored at, a destination outside the European
Economic Area ("EEA"), including (in some instances) where we transfer your data to our suppliers so that they
can assist us with providing our services to you. Where your information is transferred outside of the EEA, we
will take steps to ensure that the information receives the same level of protection as if it remained within the
EEA, including by entering into data transfer agreements, using the EU Commission approved Standard
Contractual Clauses, or by relying on certification schemes such as the EU-US Privacy Shield. You have the
right to details of the mechanism under which your data is transferred outside of the EEA – for this information,
please contact us using the details set out under "How can you contact us?" below.
Retention of your personal data
When we have no ongoing legitimate business need to process your personal data (for example, to provide
products or services to you or to retain records to manage any claims which you or we may have in respect of
the products and services we provide to you), we will either delete or anonymise it or, if this is not possible (for
example, because your personal data has been stored in backup archives), then we will securely store your
personal data and isolate it from any further processing until deletion is possible.
Your rights in respect of your personal data
You have the following rights in relation to the personal data that we hold about you:
- You can access, correct, update or request deletion of your personal data, at any time.
- You have the right to opt-out of marketing communications we send you at any time by contacting us.
-
Once we have collected and processed your personal data with your consent, you can withdraw your
consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we
conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in
reliance on lawful processing grounds other than consent.
-
You have the right to complain to a data protection authority about our collection and use of your
personal data. For more information, please contact your local data protection authority. The Information
Commissioner's Office is the data protection authority for the UK.
Personal data of children
Our Website is not intended to be used by children under 18 years of age. We only process information about
children with the consent of their parents or legal guardians.
Changes to our Privacy Notice
We may update this Privacy Notice from time to time in response to changing legal, technical or business
developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent
with the significance of the changes we make. We will obtain your consent to any material Privacy Notice
changes if and where this is required by applicable data protection laws.
