How we use and protect personal information

1. Who we are

Global Tamil Travel Ltd is a company registered in England and Wales, operating from Unit 4, Chandos House, 42 Romford Road, London E7 9HZ. We are the data controller for the personal information described in this policy.

For any question about this policy or about the information we hold, write to privacy@globaltamiltravel.co.uk or to the postal address above marked for the attention of the data lead.

2. What we collect

Account and contact details

Name, email address, telephone and WhatsApp numbers, postal address and the password you set, where you choose to create an account.

Booking and passenger details

The names, dates of birth and nationalities of everyone travelling, room arrangements, joining points and the reference of each booking.

Travel documents

Passport details and images, visas and travel insurance certificates, where the journey requires them.

Payment records

Amounts, dates, methods and the reference of each transaction. We never receive or store your full card number.

Communications

Emails, in-account messages, support conversations and notes made by our team when we speak to you.

Special-category data

Health, dietary, allergy and accessibility information, but only where you provide it and only for a specific journey. This is covered in section 5.

Website usage

Pages viewed and general device information, collected through cookies only where you have permitted it. See our cookie policy.

3. Why we collect it, and our lawful basis

4. Payments

Card payments are taken through our payment provider using their own hosted fields. Your card number, expiry date and security code are entered directly with them and never pass through or rest on our systems. We receive only the amount, the date, the method, the last four digits and whether the payment succeeded.

This means we cannot read your card number back to you, and nobody from Global Tamil Travel will ever ask you to send card details by email, WhatsApp or over the telephone.

5. Health, dietary and accessibility information

Some information — health conditions, allergies, dietary requirements and accessibility needs — is treated as special-category data under UK data protection law and is handled more carefully than the rest.

• We ask for it only where it affects how we look after you on a specific journey.
• It is recorded against that one booking. We do not copy it to your profile or to a later booking, even for the same person.
• It is visible only to the coordinators working on that departure, and to a supplier who needs it to do their job — a hotel arranging an adapted room, or an airline booking assistance.
• It is deleted twelve months after you travel.
• It is never used for marketing, profiling or pricing.

6. Who we share information with

• Airlines, coach operators, hotels and local partners, with the minimum needed to deliver your journey.
• Our payment provider, to take payment and issue refunds.
• Our technology suppliers, who host the website and send our email, under written contracts limiting what they may do with it.
• Authorities, where the law or a carrier requires passenger information.
• Insurers or legal advisers, where a claim or a dispute makes it necessary.

We do not sell personal information, and we do not share it with anyone for their own marketing.

7. Information sent outside the UK

Where a journey takes place outside the UK, delivering it necessarily involves sending some information to suppliers in that country — a hotel needs a rooming list, an airline needs passenger names. Where that country is not covered by UK adequacy regulations we rely on standard contractual clauses or, where the transfer is strictly necessary to perform your booking, on the contractual necessity exemption.

8. How long we keep it

9. Your rights

• To be told what we hold about you, and to receive a copy of it.
• To have inaccurate information corrected.
• To have information deleted, where we are not required to keep it.
• To restrict or object to particular uses, including our legitimate-interests processing.
• To receive your information in a portable format.
• To withdraw consent at any time, without it affecting anything done beforehand.

10. Complaints

If you are unhappy with how we have handled your information, tell us first — we would rather put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk at any time, and using that right does not affect anything you have booked.