Privacy Policy

Last updated: January 2024

Introduction

misty-crag respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our website and services.

We operate in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information We Collect

We may collect the following types of personal information:

• Identity Data: Name, title, and similar identifiers
• Contact Data: Email address, postal address
• Travel Preferences: Destination interests, travel dates, accommodation preferences, dietary requirements, accessibility needs
• Technical Data: IP address, browser type, operating system, referring URLs
• Usage Data: Information about how you use our website and services

How We Use Your Information

We use your personal data for the following purposes:

• To respond to your enquiries and provide travel consultation services
• To process and manage your travel bookings
• To communicate with you about your travel arrangements
• To improve our website and services
• To comply with legal obligations

Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual necessity: To perform our contract with you when arranging travel services
• Legitimate interests: To operate and improve our business
• Consent: Where you have given specific consent for marketing communications
• Legal obligation: To comply with applicable laws and regulations

Data Sharing

We may share your personal data with:

• Travel service providers (airlines, hotels, tour operators) necessary to fulfil your booking
• Payment processors to complete transactions
• Professional advisers including lawyers, auditors, and insurers
• Regulatory authorities when required by law

We do not sell your personal data to third parties.

International Transfers

When arranging international travel, your data may be transferred to countries outside the UK. We ensure appropriate safeguards are in place to protect your information in accordance with data protection legislation.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Typically, booking records are retained for seven years from the date of travel completion.

Your Rights

Under data protection law, you have rights including:

• The right to access your personal data
• The right to rectification of inaccurate data
• The right to erasure in certain circumstances
• The right to restrict processing
• The right to data portability
• The right to object to processing

To exercise any of these rights, please contact us using the details below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, secure servers, and access controls.

Contact Us

For privacy-related enquiries or to exercise your data protection rights:

Data Protection Officer
misty-crag
47 Kensington High Street
London W8 5ED
United Kingdom

Email: [email protected]

Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

Changes to This Policy

We may update this privacy policy periodically. We will notify you of any significant changes by posting the new policy on this page with an updated revision date.