HOO TRAVEL Personal Data Protection & Privacy Notice
Effective Date: March 2026 · Compliant with UK GDPR and Data Protection Act 2018
1. Categories of Information We Collect
When you inquire, customize, or book journeys with HOO TRAVEL, we may collect the following data in compliance with statutory standards:
• Identification & Contact Data: Name, title, email address, telephone number, WeChat ID;
• Itinerary Booking Information: Passport names and numbers (required for named entrance ticketing at heritage castles and Arctic expeditions), party headcount, child ages (for securing certified child safety seats);
• Special Dietary & Accessibility Preferences: Food allergies or mobility requests, used exclusively with your explicit consent to coordinate accommodations and dining.
2. Lawful Grounds & Purposes of Processing
We process personal data solely for the following legitimate purposes:
• Contractual Fulfillment: Generating booking confirmations, reserving chauffeur fleet capacity, and securing named reservations with British heritage estates and polar partners;
• Guest Communication & Roadbook Delivery: Dispatching smart digital roadbooks, packing and weather advisories, and real-time contingency coordination;
• Statutory Compliance: Adhering to British commercial, fiscal, and transport authority statutory audit retention periods.
3. Data Security & Storage Standards
• Encryption: All data in transit is protected using SSL/TLS encryption. Sensitive credentials are maintained on access-restricted European servers;
• Zero Sale Commitment: We never sell, rent, or trade your personal data to any external commercial marketing brokers;
• Retention: Data is retained only for the duration necessary to deliver the travel service and satisfy regulatory requirements, after which it is securely anonymized or permanently deleted.
4. Your Statutory Rights Under UK GDPR
Under UK Data Protection Law, you hold the following rights regarding your personal data:
• Right of Access & Portability: You may request a copy of the personal information held by us at any time;
• Right to Rectification: You may request immediate correction of inaccurate contact details;
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your data once contractual and statutory tax audit obligations have elapsed.