Privacy Notice

Privacy Notice

Introduction

  1. Augustine Travels Limited (“we,” “us,” “our”) is the primary Data Controller for services on our Platforms.
  2. Specific Controllers may vary by service/domain (e.g., flights, hotels).
  3. We commit to lawful, fair, transparent processing per data protection laws.
  4. Contact via Privacy form for questions; Help Centre for non-privacy.

Data Protection Officer

  1. We have a Data Protection Officer overseeing compliance.
  2. Exercise rights via Privacy form; verification required.

Definitions

Key terms: Automated Decisions, Data Controller, Data Processor, Privacy Rights, Lawful Bases, Personal Data, Platforms, Sensitive Personal Data, Third Countries.

Why We Process Your Data

  1. Purposes based on Lawful Bases (Contract, Legitimate Interest, Consent, Legal Obligation).
  2. Booking: Manage bookings, communications; retrieve data with consent.
  3. User Account: Manage accounts, subscriptions.
  4. Travel-Related Services: Assist with incidents; customize searches.
  5. Communications: Contract-related, queries, reminders.
  6. Marketing: Newsletters, customized offers (opt-out available).
  7. Call/Chat Recordings: Quality, contractual purposes.
  8. Improving Services: Analytics, statistics.
  9. Safe Service: Fraud prevention, security.
  10. Legal/Compliance: Disputes, requests.
  11. No significant Automated Decisions.

Types of Data

  1. Categories: Identification/Contact, Account/Settings, Payment, Travel-Related, Communications, Browsing/Device.
  2. Minimal Sensitive Data; avoid unless necessary.
  3. No services for minors; delete if collected without consent.
  4. Data from third parties (e.g., fraud prevention).

Recipients

  1. Service Providers (e.g., Travel Providers, payment, IT).
  2. Group Companies for administration.
  3. Authorities for legal reasons.
  4. Others with consent.

Security Measures

Encryption, pseudonymization, audits; ISO 27001, PCI DSS compliant.

Retention

Up to 10 years post-trip/interaction; shorter for specific purposes.

  International Transfers

To EEA/adequate countries or via SCCs.

Protecting Your Data

Do not share IDs; use strong passwords; beware phishing.

Control and Rights

  1. Manage via Account/Help Centre.
  2. Rights: Access, rectify, erase, object, withdraw consent via Privacy form.

Updates

Posted changes effective upon update.