1. Who We Are

GenZ Travel is a London-based independent travel agency operating under the laws of England and Wales. We are the data controller responsible for your personal information.

2. What Information We Collect

We may collect the following personal information when you book with us, enquire about our services, or use our website:

2.1 Personal Identification Information

• Full name
• Date of birth
• Passport or national ID details
• Nationality and country of residence

2.2 Contact Information

• Email address
• Phone number and WhatsApp contact
• Home or billing address

2.3 Booking & Payment Information

• Travel preferences and itinerary details
• Payment card details (processed securely — we do not store full card numbers)
• Booking history and order reference numbers
• Special requests including dietary requirements or accessibility needs

2.4 Technical Information

• IP address and device information
• Browser type and version
• Pages visited on our website and duration of visits
• Referring website or source

3. How We Use Your Information

We use your personal data for the following lawful purposes under UK GDPR:

3.1 Contract Performance

• To process and confirm your travel bookings
• To communicate with you regarding your holiday arrangements
• To send booking confirmations, invoices, and travel documents
• To arrange flights, hotels, transfers, and other travel services on your behalf

3.2 Legal Obligations

• To comply with ATOL regulations and Civil Aviation Authority requirements
• To comply with Package Travel Regulations 2018
• To fulfil financial reporting and anti-money laundering obligations
• To respond to lawful requests from government or regulatory authorities

3.3 Legitimate Interests

• To respond to your enquiries and provide customer support
• To improve our website, services, and customer experience
• To protect our business against fraud and security threats

3.4 Consent

• To send you relevant travel offers, promotions, and newsletters (only with your explicit consent)
• To use your feedback or testimonials in our marketing materials

4. ATOL & Regulatory Data Sharing

As an ATOL licence holder, GenZ Travel is required by the Civil Aviation Authority (CAA) to maintain certain records and share data in specific circumstances:

• We are required to maintain passenger records for all ATOL-protected bookings for a minimum of 3 years.
• In the event of our insolvency, passenger booking data may be transferred to the CAA or an appointed administrator to facilitate refunds or repatriation.
• We may be required to submit booking and financial data to the CAA as part of our ATOL licence obligations.
• All data shared with the CAA is handled in accordance with their Privacy Policy, available at www.caa.co.uk

Under the Package Travel and Linked Travel Arrangements Regulations 2018, we are also required to:

• Provide passenger data to our insolvency protection providers.
• Share necessary booking information with emergency services or consular authorities in the event of a travel emergency.

5. How We Share Your Information

GenZ Travel does not sell or rent your personal data to third parties. However, we may share your information with:

• Airlines & Transport Providers — to complete your flight or transport bookings
• Hotels & Accommodation Partners — to confirm your reservations
• Destination Management Companies (DMCs) — to arrange tours, transfers, and activities
• Payment Processors — to securely handle your transactions
• Civil Aviation Authority (CAA) — as required under our ATOL licence obligations
• Insolvency Protection Providers — as required under Package Travel Regulations 2018
• Legal & Regulatory Authorities — where required by law or court order

All third parties we work with are required to handle your data securely and in accordance with applicable UK data protection laws.

6. International Data Transfers

As a travel agency, we work with suppliers and partners across the world. When we transfer your personal data outside of the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR, including:

• Transfers to countries with an adequacy decision from the UK Government
• Use of Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner’s Office (ICO)
• Binding Corporate Rules where applicable

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law:

• Booking records are retained for up to 7 years for legal and financial compliance
• ATOL-protected booking records are retained for a minimum of 3 years as required by the CAA
• Marketing preferences are retained until you withdraw your consent
• Enquiry and communication records are retained for up to 2 years
• Website usage data is retained for up to 12 months

8. Your Rights Under UK GDPR

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:

• Right to Access — Request a copy of the personal data we hold about you
• Right to Rectification — Request correction of inaccurate or incomplete data
• Right to Erasure — Request deletion of your personal data (‘right to be forgotten’)
• Right to Restrict Processing — Request that we limit how we use your data
• Right to Data Portability — Request transfer of your data to another provider in a structured format
• Right to Object — Object to us processing your data for marketing or legitimate interest purposes
• Right to Withdraw Consent — Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint — You have the right to complain to the Information Commissioner’s Office (ICO)

To exercise any of these rights, please contact us at: sales@genztravel.co.uk

We will respond to all requests within 30 days in accordance with UK GDPR requirements.

9. ICO Registration

GenZ Travel is registered with the Information Commissioner’s Office (ICO) as required under the Data Protection Act 2018. If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the ICO:

Information Commissioner’s Office

Website: www.ico.org.uk

Helpline: 0303 123 1113

10. Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device that help us:

• Remember your preferences and settings
• Analyse website traffic and performance
• Understand how visitors use our website
• Improve our services and content

10.1 Types of Cookies We Use

• Essential Cookies — Necessary for the website to function properly
• Analytics Cookies — Help us understand how visitors interact with our website
• Preference Cookies — Remember your settings and preferences
• Marketing Cookies — Used to deliver relevant advertisements (only with consent)

You can control or disable cookies through your browser settings at any time. Please note that disabling essential cookies may affect the functionality of our website.

11. Data Security

We take the security of your personal data seriously. GenZ Travel implements appropriate technical and organisational measures to protect your information against unauthorised access, loss, alteration, or misuse, including:

• Secure encrypted connections (SSL/TLS) for all data transmission
• Restricted access to personal data on a need-to-know basis
• Regular security assessments and staff data protection training
• Secure payment processing through PCI DSS compliant providers

However, please be aware that no method of transmission over the internet is 100% secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the ICO within 72 hours as required by UK GDPR.

12. Children’s Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children without verifiable parental or guardian consent. If you are a parent or guardian and believe we have collected data from a child without your consent, please contact us immediately at sales@genztravel.co.uk and we will take prompt action to delete such information.

13. Marketing Communications

We will only send you marketing communications if you have given us your explicit consent to do so. You can opt out of receiving marketing communications at any time by:

• Clicking the ‘unsubscribe’ link in any marketing email
• Contacting us at info@genztravel.co.uk
• Call us at +44 7446 230241

Please note that opting out of marketing communications will not affect communications necessary for your bookings or legal obligations.

14. Changes to This Policy

GenZ Travel reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or regulatory obligations. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Where changes are significant, we will notify you directly via email.