Privacy Policy

1. Introduction

Secure Vacation Booking ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

This policy complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Information We Collect

2.1 Personal Data You Provide

• Contact Information: Name, email address, phone number, postal address
• Account Information: Username, password, preferences
• Booking Information: Travel dates, destination, accommodation preferences, special requests
• Payment Information: Credit card details, billing address (processed securely through third-party payment processors)
• Communication Data: Records of correspondence with our customer service team

2.2 Information Automatically Collected

• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Pages visited, time spent on site, click patterns, search queries
• Location Data: General location based on IP address (not precise geolocation unless you provide consent)
• Cookies and Similar Technologies: See our Cookie Policy for detailed information

3. How We Use Your Information

We process your personal data for the following purposes:

3.1 Service Provision (Legal Basis: Contract Performance)

• Processing and fulfilling your booking requests
• Communicating with you about your reservations
• Providing customer support and assistance
• Processing payments and preventing fraud

3.2 Marketing and Communications (Legal Basis: Legitimate Interest/Consent)

• Sending promotional offers and travel deals (with your consent)
• Personalizing your experience on our website
• Conducting market research and surveys

3.3 Legal and Security (Legal Basis: Legal Obligation/Legitimate Interest)

• Complying with legal requirements and regulations
• Protecting against fraud and ensuring platform security
• Resolving disputes and enforcing our terms

4. Data Sharing and Disclosure

We may share your information with:

4.1 Service Providers

• Accommodation Partners: Hotels, vacation rental owners, and other property providers
• Payment Processors: Secure third-party payment gateways
• Technology Partners: Cloud hosting, analytics, and customer support platforms
• Marketing Partners: Email marketing and advertising platforms (with your consent)

4.2 Legal Requirements

We may disclose your information when required by law, court order, or government request, or to protect our rights and safety.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

5. Your Rights Under GDPR

If you are located in the European Union, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Opt-out of certain data processing activities
• Right to Withdraw Consent: Withdraw consent for marketing communications

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• SSL/TLS encryption for data transmission
• Secure data storage with access controls
• Regular security audits and vulnerability assessments
• Employee training on data protection best practices
• Incident response procedures for data breaches

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Account Data: Until account deletion or 7 years of inactivity
• Booking Records: 7 years for financial and legal compliance
• Marketing Data: Until you unsubscribe or withdraw consent
• Technical Logs: 2 years for security and troubleshooting purposes

8. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. When we transfer data internationally, we ensure adequate protection through:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules (BCRs)
• Other appropriate safeguards as required by law

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. For detailed information about our cookie practices, please see our Cookie Policy.

10. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal information.

12. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our privacy compliance. You can contact our DPO at:

13. Supervisory Authority

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last Updated" date. For significant changes, we may also send you an email notification.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: