Purpose of This Privacy Notice

This privacy notice is designed to explain how Solfairer Travel & Tours collects and handles your personal data. It applies to any information you provide through our website or via other channels (such as by phone), including when you book travel services, subscribe to our newsletter, submit an enquiry, enter a competition, or engage with us in other ways.
Our website is not intended for use by children. We only collect data relating to children when you include them in a travel booking as part of your party.

We encourage you to read this privacy notice alongside any other privacy or fair processing notices we may present at specific times when collecting or using your personal data. This notice complements those additional notices and does not replace them.

Controller

Solfairer Travel & Tours acts as the data controller and is responsible for managing your personal information. In this privacy notice, references to “Solfairer”, “we”, “us”, or “our” all refer to Solfairer Travel & Tours.

To ensure your questions and concerns are handled appropriately, we’ve appointed a dedicated Data Protection Officer (DPO). If you have any queries about this privacy notice or wish to exercise your legal rights regarding your personal data, please reach out to us by submitting using the enquiry form.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if any of the details you provide to us should change, during the course of your relationship with us.

Third Party Links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed.

We may collect, use, store, and transfer various categories of personal data, including:

• Identity Data
  Information that identifies you personally, such as your first name, maiden name, last name, username or similar identifier, marital status, title, date of birth, and gender.
• Contact Data
  Details that allow us to reach you, including your billing address, delivery address, email address, and telephone numbers.
• Financial Data
  Information related to your payment methods, such as bank account details and payment card information.
• Transaction Data
  Records of your interactions with us, including payments made or received and details of travel services or products you’ve purchased.
  Technical Data
  Data generated when you use our website, such as your IP address, login credentials, browser type and version, time zone and location, browser plug-in types and versions, operating system, platform, and other technologies on the devices you use.
• Usage Data
  Insights into how you engage with our website, products, and services.
• Marketing and Communications Data
  Your preferences regarding marketing communications from us and third parties, as well as how you prefer to be contacted.

If You Do Not Provide Personal Data
In certain circumstances, we are legally required to collect personal data or need it to fulfil the terms of a contract with you. If you fail to provide this data when requested, we may be unable to proceed with the contract we have with you, or are attempting to enter into.
When acting as an agent, we may also need to collect personal data to facilitate a contract between you and the supplier of your chosen travel arrangements. Without the necessary information, we may be unable to complete this process on your behalf.

Put simply, if we require specific details to deliver your selected travel services and you do not provide them, we may be unable to confirm or arrange your booking. Depending on when the data is withheld, we may be unable to process your booking at all, or we may need to cancel it. In such cases, the cancellation will be treated as a ‘cancellation by you’ under our Booking Terms and Conditions. We will inform you if we are unable to proceed or must cancel your booking for this reason.

We gather personal data through a variety of methods, including:

Direct Interactions
You may provide Identity, Contact, and Financial Data by completing forms or communicating with us via post, phone, email, or other channels. This includes personal information shared when you:

• Book travel services
• Request contact through our website
  Subscribe to our e-newsletter, magazine, or other publications
• Request marketing communications
• Enter a competition, promotion, or survey
• Provide feedback

Automated Technologies and Interactions.

When you engage with our website, we may automatically collect technical data about your device, browsing behaviour, and usage patterns. This data is gathered using cookies and similar technologies. For more details, please refer to our Cookie Policy.

Third Parties
We may also receive personal data from external sources, including:

• Technical Data from analytics providers (e.g., Google) based outside the EU
• Technical Data from advertising networks operating within or outside the EU

We will only process your personal data when permitted by law. The most common circumstances include:

Contractual Necessity
When we need to fulfill a contract we have with you or take steps to enter into one—such as confirming your travel arrangements.

Agency Facilitation
When acting as an agent, we may need to collect and share your data to help you enter into a contract with the supplier of your chosen travel services.

Legitimate Interests
Where it’s necessary for our legitimate business interests (or those of a third party), provided your rights and freedoms do not override those interests.

Legal or Regulatory Compliance
When we are required to comply with legal obligations. In general, we do not rely on consent as the primary legal basis for processing your personal data.

Purposes for Processing Your Data
For some activities, we may rely on more than one lawful basis depending on the context. If you’d like further details about the legal grounds we rely on for a particular use of your data, feel free to contact us.

We take the protection of your personal data seriously. Robust security measures are in place to prevent your information from being accidentally lost, accessed without authorisation, misused, altered, or disclosed.

Access to your personal data is strictly limited to employees, agents, contractors, and third parties who require it for legitimate business purposes. These individuals are bound by confidentiality obligations and will only process your data in accordance with our instructions.
We also maintain procedures to respond swiftly to any suspected data breach. Where legally required, we will notify you and the appropriate regulatory authorities of any breach involving your personal data.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected—including to meet legal, regulatory, tax, accounting, or reporting obligations.

To determine the appropriate retention period, we consider:

• The type, volume, and sensitivity of the data.
• The potential risk of harm from unauthorized use or disclosure.
• The reasons we collected the data and whether those purposes can be achieved through other means.

Applicable legal, regulatory, and operational requirements

We periodically review the data we hold and will securely delete or anonymise it when it is no longer needed for legal, business, or customer service purposes. If you cease to interact with us as a client, we will remove or anonymise your personal data after seven years.
You may request further details about our retention policies by contacting us directly. In certain cases, you have the right to request deletion of your data.

We may also anonymise your personal data for research or statistical purposes. Once anonymised, the data can no longer be linked to you and may be used indefinitely without further notice.