1. Introduction
Homosdisfo Tours Limited ("we," "us," or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website homosdisfo.com or use our services.
We are registered in England and Wales under company number 12345678, and our registered office is at 42 Covent Garden Plaza, London WC2E 8RA, United Kingdom.
For the purpose of the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR), we are the data controller.
2. Information We Collect
2.1 Personal Information You Provide
- Contact Information: Name, email address, phone number, and postal address
- Booking Information: Tour preferences, special requirements, dietary restrictions, accessibility needs
- Payment Information: Billing address and payment details (processed securely through third-party payment processors)
- Communication Data: Records of correspondence, enquiries, and customer service interactions
- Marketing Preferences: Consent for marketing communications and newsletter subscriptions
2.2 Information We Collect Automatically
- Technical Data: IP address, browser type, operating system, referring URLs
- Usage Data: Pages visited, time spent on site, click patterns, and user journey through our website
- Device Information: Device type, screen resolution, and mobile device identifiers
- Location Data: General geographic location based on IP address
2.3 Cookies and Similar Technologies
We use cookies and similar tracking technologies to enhance your browsing experience. For detailed information about our cookie usage, please see our Cookie Policy.
3. How We Use Your Information
We process your personal information for the following purposes:
3.1 Service Provision
- Processing tour bookings and managing reservations
- Providing customer support and responding to enquiries
- Delivering tour services and experiences
- Processing payments and managing billing
- Communicating important service updates and changes
3.2 Marketing and Communications
- Sending newsletters and promotional materials (with consent)
- Personalizing marketing communications
- Conducting customer satisfaction surveys
- Informing you about new tours and special offers
3.3 Website Improvement
- Analyzing website usage to improve user experience
- Optimizing website performance and functionality
- Preventing fraud and ensuring website security
- Conducting research and analytics
4. Legal Basis for Processing
We process your personal information based on the following legal grounds:
- Contract Performance: Processing necessary to fulfill our contractual obligations for tour services
- Consent: Where you have given explicit consent for marketing communications or cookies
- Legitimate Interests: For website analytics, fraud prevention, and business improvement
- Legal Obligation: Where required by law, such as for tax or regulatory compliance
5. Information Sharing and Disclosure
We may share your personal information with:
5.1 Service Providers
- Payment processing companies (Stripe, PayPal)
- Email marketing platforms (Mailchimp, Constant Contact)
- Cloud storage providers (Amazon Web Services, Google Cloud)
- Analytics providers (Google Analytics)
- Customer support platforms
5.2 Tour Partners
- Licensed tour operators and guides
- Venue operators and attraction partners
- Transportation providers
- Accommodation partners (where applicable)
5.3 Legal Requirements
We may disclose your information when required by law, court order, or government regulation, or to protect our rights, property, or safety.
6. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:
- Customer Data: 7 years after last interaction for accounting and legal purposes
- Marketing Data: Until consent is withdrawn or 3 years of inactivity
- Website Analytics: 26 months (Google Analytics default)
- Financial Records: 6 years as required by HMRC
7. International Data Transfers
Some of our service providers are located outside the UK/EEA. When we transfer your data internationally, we ensure appropriate safeguards are in place:
- Adequacy decisions by the UK government
- Standard Contractual Clauses approved by the UK authorities
- Binding Corporate Rules
- Certification schemes and codes of conduct
8. Your Rights
Under UK GDPR, you have the following rights regarding your personal information:
8.1 Right of Access
You can request a copy of the personal information we hold about you.
8.2 Right to Rectification
You can request correction of inaccurate or incomplete personal information.
8.3 Right to Erasure
You can request deletion of your personal information in certain circumstances.
8.4 Right to Restrict Processing
You can request limitation of how we process your personal information.
8.5 Right to Data Portability
You can request transfer of your personal information to another service provider.
8.6 Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes.
8.7 Rights Related to Automated Decision Making
You have rights regarding automated decision-making and profiling activities.
9. How to Exercise Your Rights
To exercise any of your rights, please contact us:
- Email: [email protected]
- Phone: +44 20 7946 8572
- Post: Data Protection Officer, Homosdisfo Tours Limited, 42 Covent Garden Plaza, London WC2E 8RA
We will respond to your request within one month. In complex cases, we may extend this period by two months with notification.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- SSL encryption for data transmission
- Regular security assessments and updates
- Access controls and staff training
- Secure data storage and backup systems
- Incident response procedures
11. Children's Privacy
Our services are not directed at children under 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any personal information.
13. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending email notifications to registered users
- Displaying prominent notices on our website
14. Contact Information
If you have any questions about this Privacy Policy or our privacy practices, please contact us:
15. Supervisory Authority
You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues: