Privacy Policy

Draft for business review. Text in [square brackets] must be completed by the business, and this page should be reviewed by a qualified adviser before launch.

This policy explains what information we collect through this website and how it is used. [Legal business name] (“we”) is responsible for it.

What we collect

Holiday package, bespoke trip and corporate enquiry forms collect the details you type in: your name, contact details, travel preferences, dates, group size, and any notes you add.

The flight enquiry form collects only a departure place, an arrival place, a travel date and the number of passengers. We do not ask for passenger names, passport details or payment details anywhere on this website.

How we use it

We use enquiry details only to respond to you, prepare options and follow up. We do not use them for unrelated marketing without your consent.

The flight form opens WhatsApp with a message prepared from your details. You choose whether to send it. Once sent, WhatsApp’s own terms and privacy policy apply to that conversation.

Security and abuse prevention

To limit spam we use a hidden form field, a minimum-time check and rate limits. Rate limits use a one-way hash of your IP address, not the address itself. Where enabled, a Cloudflare Turnstile challenge may also run on forms.

Where data is stored

Enquiries are stored in a database hosted by Supabase, and the website is hosted by Vercel. Only authorised staff can view enquiries.

Retention and your rights

We keep enquiries for [retention period]. You can ask us to access, correct or delete your information by contacting [contact email].

Contact

[Business name, address and contact email]

Last updated: [date]