Introduction
- Augustine Travels Limited (“we,” “us,” “our”) is the primary Data Controller for services on our Platforms.
- Specific Controllers may vary by service/domain (e.g., flights, hotels).
- We commit to lawful, fair, transparent processing per data protection laws.
- Contact via Privacy form for questions; Help Centre for non-privacy.
Data Protection Officer
- We have a Data Protection Officer overseeing compliance.
- Exercise rights via Privacy form; verification required.
Definitions
- Key terms: Automated Decisions, Data Controller, Data Processor, Privacy Rights, Lawful Bases, Personal Data, Platforms, Sensitive Personal Data, Third Countries.
Why We Process Your Data
- Purposes based on Lawful Bases (Contract, Legitimate Interest, Consent, Legal Obligation).
- Booking: Manage bookings, communications; retrieve data with consent.
- User Account: Manage accounts, subscriptions.
- Travel-Related Services: Assist with incidents; customize searches.
- Communications: Contract-related, queries, reminders.
- Marketing: Newsletters, customized offers (opt-out available).
- Call/Chat Recordings: Quality, contractual purposes.
- Improving Services: Analytics, statistics.
- Safe Service: Fraud prevention, security.
- Legal/Compliance: Disputes, requests.
- No significant Automated Decisions.
Types of Data
- Categories: Identification/Contact, Account/Settings, Payment, Travel-Related, Communications, Browsing/Device.
- Minimal Sensitive Data; avoid unless necessary.
- No services for minors; delete if collected without consent.
- Data from third parties (e.g., fraud prevention).
Recipients
- Service Providers (e.g., Travel Providers, payment, IT).
- Group Companies for administration.
- Authorities for legal reasons.
- Others with consent.
Security Measures
Encryption, pseudonymization, audits; ISO 27001, PCI DSS compliant.
Retention
Up to 10 years post-trip/interaction; shorter for specific purposes.
International Transfers
9.1 To EEA/adequate countries or via SCCs.
Protecting Your Data
Do not share IDs; use strong passwords; beware phishing.
Control and Rights
- Manage via Account/Help Centre.
- Rights: Access, rectify, erase, object, withdraw consent via Privacy form.
Updates
Posted changes effective upon update.
