Privacy Policy

Privacy Policy

The Revealed Travel group uses its absolute best endeavours at all times to keep all the information given to us by enquirers, clients, staff and suppliers safe at all times.

We adhere to strict operating procedures and practices as well as data privacy and protection legislation on how your personal information is stored and used, and who sees it, to help stop any unauthorised person getting hold of it.

Please take the time to read this Privacy Notice as it explains what types of personal data we collect and why we collect it; when and how we may share personal data within the Revealed Travel group as well as with other organisations; plus your choices for how to access and update your personal data.

 

Legal basis for Revealed Travel processing personal data

The Data Controller is Mercator Enterprises Ltd, trading as Revealed Travel.

The Data Controller determines the purpose and manner in which personal data is used.

We will only collect and use your personal data if at least one of the following conditions applies:

We have your consent;

Example: client enquiry

You give us permission to process your personal data when you request travel services from us.

It is necessary for a contract with you or to take steps at your request prior to entering into a contract;

Example: to provide the products and services you request

We need to process your personal data so that we can manage your account or booking, provide you with the products and services you want to buy and help you with any orders and refunds you may ask for.

It is necessary for us to comply with a legal obligation;

Example: sharing personal data with regulatory authorities

So that you can travel, it may be mandatory (as required by government authorities at the point(s) of departure and/or destination) to disclose and process your personal data for immigration, border control, security and anti-terrorism purposes, or any other purposes which they determine appropriate.

It is necessary to protect your vital interests or those of another individual;

Example: in an emergency

Your insurance company, their agents and medical staff may exchange relevant personal data and special categories of personal data with us in circumstances where we/they need to act on your behalf or in the interest of other clients or in an emergency.

It is in the public interest or we have official authority;

Example: security operations

We may use personal data to respond to and to manage security operations, accidents or other similar incidents, including medical and insurance purposes.

It is in our or a third party’s legitimate interests and these are not overridden by your interests or rights.

Example: to personalise your experience

We may use your personal data to better understand your interests so that we can try to predict what other products, services and information you might be most interested in. This enables us to tailor our communications to make them more relevant and interesting for you.

Where we need to process special categories of personal data, for example health data for medical reasons, we will only do so if one or more additional conditions apply. For example, we have your explicit consent; it is necessary to protect the vital interests of you or another individual and you are physically or legally incapable of giving consent; it is necessary to establish, exercise or defend legal claims; it is necessary for reasons of substantial public interest.

 

Personal Information

We collect personal details in the following circumstances:

When you contact us with a holiday enquiry and ask us to provide you with a travel quote

  • You provide us with personal details such as your sex, name, email address, phone number (land line and mobile) and date of birth of the enquirer – this may also include personal information of other people travelling with you such as the enquirer’s friends, family or colleagues. By providing other people’s personal data, you must be sure that they agree to this and you are allowed to provide it. You should also ensure that, where appropriate, they understand how their personal data may be used by us.

When you make a travel booking with Revealed Travel

  • You provide us with further personal information such as but not limited to passport information, nationality, postal address, any dietary requirements, travel insurance details, any medical information relevant for us to know in order to organise your booking. You may provide us with debit/charge/credit card details and bank account details in order to facilitate payments and any refunds from or to you relating to your booking.

When you enter one of Revealed Travel’s Prize Draws

  • You provide us with your name, email address and phone number

When you sign up to receive our email Newsletter via one of our websites

  • You provide us with your name, email address

When you provide us with completed feedback questionnaires on return from your holiday

  • You provide us with your view and opinion about the holiday and travel services we have provided

We will only use this information to respond to your enquiry, to help us obtain and provide you the information or services you have requested, to send you information we think will be of interest to you. We never share your information with any other company not associated with either delivering the holiday(s) and destinations and services about which you have enquired or that you have booked – or delivering the prize draw you have entered.

You should never send sensitive or personal information by email.

 

Using your personal data

We use your personal data in a number of ways:

To provide the products and services you request

  • We need to process your personal data so that we can manage your enquiry or booking, provide you with the products and services you want to buy and help you with any orders and refunds you may ask for.

To manage and improve our products, services and day-to-day operations

  • We use personal data to manage and improve our products & websites
  • We monitor how our services are used to help protect your personal data, detect and prevent fraud, other crimes and the misuse of services. This helps us to make sure that you can safely use our services.
  • We may use personal data to respond to and to manage security operations, accidents or other similar incidents, including medical and insurance purposes.
  • We use personal data to carry out market research and internal research and development, and to develop and improve our product range, services, IT systems, security, know-how and the way we communicate with you.

To personalise your experience

  • We want to ensure that marketing communications relating to our products and services are relevant to your interests.
  • To do this, we may use your personal data to better understand what you’re interested in so that we can try to predict what other products, services and information you might find useful. This enables us to tailor our communications to make them more relevant for you.
  • We may also measure your responses to marketing communications relating to products and services we offer, which enables us to offer you products and services that better meet your needs as a client.
  • If you do not want to receive a personalised service from us, you can change your preference at any time by ringing us or by writing (e.g. email). We will update our records as soon as we can.

To make contact and interact with you

  • We want to serve you better as a client so if you contact us, for example by email, post, phone or via social media, we may use personal data to provide clarification or assistance to you.
  • We need to process your personal data so that we can manage any promotions and prize draws you choose to enter, including those we run with our suppliers and retail partners. For example, if you win a prize.
  • We may invite you to take part in customer surveys, questionnaires and other market research activities.
  • We do not sell your personal data to third parties

Marketing communications

From time to time we may send you relevant offers and news about our products and services; we do this in a number of ways, including by email.

You can change your marketing preferences over the phone, using the ‘unsubscribe’ link in our marketing emails, or by writing to us (e.g. email) at any time.

You may still receive service-related communications from us. For example, confirming bookings you make with us and providing important information about the use of our products or services.

 

Sharing personal data with suppliers and trading partners

In order to provide products or services requested by you we may share personal data with suppliers of your travel arrangements, including airlines, ferry operators, bus & coach operators, transfer and taxi operators, car hire companies, hotels and accommodation providers and/or offline and web-based consolidators and aggregators who wholesale such services. Given that Revealed Travel sell international travel services many of these suppliers and trading partners are based outside of the UK and outside the EU and the EEA.

We also work with carefully selected suppliers that carry out certain functions on our behalf. For example, companies that help us with IT services, storing and combining data, marketing, advertising campaign, market research, processing payments and delivering products and services.

We may need to share personal data to establish, exercise or defend our legal rights; this includes providing personal data to others for the purposes of preventing fraud and reducing credit risk.

When we share personal data with other organisations we require them to keep it safe, and that they must not share your personal data with any other third-party or use your personal for their own marketing purposes without your express permission.

We only share the minimum personal data that enable our suppliers and trading partners to provide their services to you and us.

 

Sharing personal data with regulatory authorities

So that you can travel, it may be mandatory (as required by government authorities at the point(s) of departure and/or destination) to disclose and process your personal data for immigration, border control, security and anti-terrorism purposes, or any other purposes which they determine appropriate.

Some countries will only permit travel if you provide your advance passenger data (for example US Secure Flight Data). These requirements may differ depending on your destination and you are advised to check. Even if not mandatory, we may assist where appropriate.

We may share the minimum personal data necessary with other public authorities if the law says we must, or we are legally allowed to do so.

 

Sharing personal data within the Revealed Travel Group

Our Privacy Notice applies to all the services offered by the Revealed Travel Group. We may share the minimum personal data necessary with others in the Revealed Travel Group, for example, to provide the products and services you request; to manage and improve our products, services and day-to-day operations; to help personalise your experience; where appropriate, to make contact and interact with you; and, if allowed and appropriate, for marketing or market research purposes.

We may also share personal data with an organisation to whom we sell or transfer (or enter into negotiations to sell or transfer) any of our businesses or any of our rights or obligations under any agreement we may have with you. If the transfer or sale goes ahead, the organisation receiving your personal data can use your data in the same way as we can but with all the same caveats and safeguards and controls and restrictions that are in place and continued use of your personal data by them to contact you for marketing purposes can only be so with your permission.

 

Protecting your personal data

We understand how important it is to protect and manage your personal data. We take appropriate security measures to help safely store, manage and retain and to protect your personal data from accidental loss and/or from unauthorised access, use, alteration and disclosure.

The security of your data can also from time to time depend on you. For example, where we have given you access to certain services involving your personal data via our online platforms, you are responsible for keeping this access path to your personal data confidential.

The personal data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by organisations operating outside the EEA who work for us or for one of our suppliers. We put in place appropriate protections to make sure your personal data remains adequately protected and that it is treated in line with this Notice.

 

Data retention

We will retain your personal data for only as long as it is necessary for the uses set out in this Privacy Notice and/or to meet legal and regulatory requirements. After this period, we will securely erase personal data. If data is needed after this period for analytical, historical or other legitimate business purposes, we will take appropriate measures to anonymise this data.

 

Links to other websites

Our websites may contain links to websites operated by other organisations that have their own privacy notices. Please make sure you read the terms and conditions and privacy notice carefully before providing any personal data on another organisation’s website as we do not accept any responsibility or liability for websites of other organisations.

 

Social media features

Our websites may contain social media features such as Facebook, Twitter, Google+ and Pinterest that have their own privacy notices. Please make sure you read their terms and conditions and privacy notice carefully before providing any personal data as we do not accept any responsibility or liability for these features.

 

Accessing and updating your personal data; and complaints

You have a right to ask for a copy of the personal data we hold about you. Please include any details to help us identify and locate your personal data. Where we can provide data access, we will do so free of charge except where further copies are requested in which case we may charge a reasonable fee based on administrative costs.

We want to make sure that the personal data we hold about you is accurate and up to date. If any of the details we hold are incorrect, please let us know.

You can also ask for your personal data to be rectified or erased, to object to the processing of your personal data and, where technically feasible, to ask for personal data you provided to be transmitted to another organisation.

We will update or erase your data, unless we have to keep it for legitimate business or legal purposes.

You can also contact us if you have a complaint about how we collect, store or use your personal data. We aim to resolve complaints but if you are dissatisfied with our response, you may complain to the Information Commissioner’s Office.

Please submit your request or complaint in writing to the Data Protection Officer:

By post: Revealed Travel, Data Protection Officer, Terminal House, Station Approach, Shepperton, TW17 8AS.

By email: admin@revealedtravel.co.uk

Please note that we may ask you to verify your identity before we can act on your request or complaint. We may also ask you for more information to help ensure that you are authorised to make such a request or complaint when you contact us on behalf of someone else.

We collect personal information from you in two other ways:

Automatically Collected Information

We collect and temporarily store certain technical information about your visit to our website(s) for use in site management and security purposes. This information includes:

  • The Internet domain from which you access our Web site
  • The type of browser (e.g. Firefox, Chrome, Internet Explorer) used to access our site
  • The type of platform (e.g. Tablet, PC or Smartphone) you use to access our site
  • The operating system (Windows, Unix) used to access our site
  • The date and time you access our site
  • The URLs of the pages you visit
  • The URL of the website or link you used to access our website
  • Details of emails and other digital communications we send to you that you open, including any links in them that you click on

This information is only used to help us develop our communications and web platform so that they are more useful for you. With this data we learn about the volume of visitors to our site and the types of technology our visitors use. No attempts are made to identify individual users or their usage habits. Raw data logs are retained temporarily as required for security and site management purposes only.

Information Collected for Tracking (Cookies)

Revealed Travel uses “cookies” to store and collect information regarding your usage of the website. Cookies are small files placed on your computer’s hard drive, or in your browser memory, when you visit our website. Your computer will only share the information in the cookie with the website that provided it, and no other website can request it. There are two types of cookies: session and persistent. Session cookies last only as long as your web browser is open. Once you close your browser, the cookie disappears. Persistent cookies store information on your computer for longer periods of time – typically up to 3 months. Our Revealed Travel websites may use both types of cookies. At no time is your private information, whether stored in persistent cookies or elsewhere, shared with third parties who have no right to that information. Use of our website assumes you agree to the Revealed Travel’s use of Cookies as described here. If you do not wish to have session or persistent cookies stored on your machine, you can turn them off in your browser. If you’d like to learn more about cookies and how to manage them, visit www.aboutcookies.org.

 

Changes to our Privacy Policy

This Privacy Policy replaces all previous versions. We may change the Privacy Policy at any time so please check it regularly on our website(s) for any updates. If the changes are significant, we will provide a prominent notice on our website(s) including, if we believe it is appropriate, electronic notification of Privacy Notice changes.

 

Last update: May 2018