Privacy Policy
Effective Date: January 1, 2025
1. Information We Collect
Legacy Travel Consultants collects personal information when you:
- Submit a contact form or consultation request
- Subscribe to our newsletter
- Communicate with us via email or phone
- Book travel services through our consultants
The personal information we may collect includes:
- Name and contact information (email, phone, address)
- Travel preferences and requirements
- Payment information (processed securely by third-party providers)
- Communication records and correspondence
2. How We Use Your Information
We use your personal information to:
- Provide travel consultation and planning services
- Respond to your inquiries and service requests
- Send relevant travel information and updates
- Process payments for travel services
- Improve our services and customer experience
3. Legal Basis for Processing (GDPR)
Under GDPR, we process your personal data based on:
- Consent: When you voluntarily provide information through forms
- Legitimate Interest: To respond to inquiries and provide requested services
- Contract: To fulfill travel consultation and booking services
4. Information Sharing
We do not sell, trade, or rent your personal information. We may share information with:
- Trusted travel suppliers (hotels, airlines) to complete your bookings
- Service providers who assist our operations (payment processors, email services)
- Legal authorities when required by law
5. Your Rights (GDPR)
You have the right to:
- Access: Request copies of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your personal data
- Portability: Receive your data in a structured format
- Object: Opt-out of marketing communications
- Withdraw Consent: At any time for consent-based processing
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Secure data transmission (SSL encryption)
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
7. Data Retention
We retain your personal information only as long as necessary to:
- Provide requested services
- Comply with legal obligations
- Resolve disputes or enforce agreements
Typically, we retain customer data for 7 years after the last interaction or service completion.
8. International Transfers
When we transfer your data internationally, we ensure adequate protection through:
- Adequacy decisions by the European Commission
- Standard Contractual Clauses
- Binding Corporate Rules
9. Contact Information
For privacy-related questions or to exercise your rights, contact us:
- Email: [email protected]
- Phone: +1-555-LEGACY (534-2297)
- Data Protection Officer: [email protected]
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes by email or through our website. Continued use of our services constitutes acceptance of the updated policy.
Last Updated: January 1, 2025