Privacy Policy

1. Introduction

Vintavia ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and mobile application (collectively, the "Service").

This Privacy Policy complies with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK data protection laws.

By using our Service, you agree to the data practices described in this Privacy Policy. If you prefer not to, you may choose not to use the Service.

2. Information We Collect

2.1 Information You Provide to Us

We may collect information that you voluntarily provide to us, including:

• Account Information: Name, email address, password, and profile information
• Travel Preferences: Destinations, interests, travel dates, budget, and special requirements
• Itinerary Data: Travel plans, saved places, bookmarks, and customisations
• Communication Data: Messages, feedback, and support requests
• Payment Information: Billing address and payment details (processed through secure third-party payment processors)

2.2 Information We Collect Automatically

When you use the Service, we may automatically collect certain information, including:

• Device Information: Device type, operating system, unique device identifiers, and mobile network information
• Usage Data: Pages visited, features used, time spent on the Service, and interaction patterns
• Location Data: GPS location, IP address, and location-based preferences (with your consent)
• Log Data: IP address, browser type, access times, and referring website addresses
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, and similar technologies

2.3 Information from Third Parties

We may receive information about you from third-party services, including:

• Social media platforms (if you choose to connect your account)
• Travel and booking services
• Analytics and advertising partners

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Provision

• Create and personalise your travel itineraries
• Provide AI-powered recommendations based on your preferences
• Process transactions and manage your account
• Respond to your inquiries and provide customer support
• Send you service-related communications

3.2 Improvement and Analytics

• Analyse usage patterns to improve the Service
• Develop new features and functionality
• Conduct research and analytics
• Monitor and prevent technical issues

3.3 Communication

• Send you marketing communications (with your consent)
• Notify you about updates, changes, or important information
• Send you promotional offers and travel tips

3.4 Legal Compliance

• Comply with legal obligations
• Enforce our Terms and Conditions
• Protect our rights and prevent fraud
• Respond to legal requests and court orders

4. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your personal data based on the following legal bases:

• Consent: When you have given clear consent for us to process your data for specific purposes
• Contract Performance: To perform our contract with you and provide the Service
• Legitimate Interests: For our legitimate business interests, such as improving the Service and preventing fraud
• Legal Obligation: To comply with our legal obligations

5. How We Share Your Information

We may share your information in the following circumstances:

5.1 Service Providers

We may share your information with third-party service providers who perform services on our behalf, including:

• Cloud hosting and storage providers
• Payment processors
• Analytics and advertising partners
• Customer support services
• Email and communication services

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.2 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5.4 With Your Consent

We may share your information with third parties, such as applicable industry partners, to provide services to help us with our business and marketing activities, when you have given us explicit consent to do so. In such cases, the responsibility of keeping this information securely lies with such third parties.

5.5 Aggregated and Anonymised Data

We may share aggregated, anonymised, or de-identified information that cannot reasonably be used to identify you.

6. Third Party Links

Our application provides links to other websites and applications that are beyond our control. This Privacy Policy excludes services and links offered by other companies, individuals and/or agencies, when browsed and/or accessed. Vintavia shall in no way be liable or responsible for your use of such sites and applications.

We encourage you to review the privacy policies of any third-party websites or applications you access through our Service. We are not responsible for the privacy practices or content of such external sites.

7. Data Retention

We retain your personal information for as long as necessary to:

• Provide the Service to you
• Comply with legal obligations
• Resolve disputes and enforce our agreements
• Support business operations and improve our Service

When we no longer need your personal information, we will securely delete or anonymise it in accordance with our data retention policies and applicable law.

You may request deletion of your account and associated data at any time by contacting us at privacy@vintavia.com.

8. Your Rights (UK GDPR)

Under UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

8.1 Right of Access

You have the right to request access to the personal data we hold about you and receive a copy of that data.

8.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data in certain circumstances.

8.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

8.6 Right to Object

You have the right to object to processing of your personal data for direct marketing purposes or based on legitimate interests.

8.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw your consent at any time.

8.8 Right to Lodge a Complaint

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have violated your data protection rights.

ICO Contact Information:
Website: ico.org.uk
Phone: 0303 123 1113

To exercise any of these rights, please contact us at privacy@vintavia.com. We will respond to your request within one month.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your preferences and activity on the Service.

9.1 Types of Cookies We Use

• Essential Cookies: Required for the Service to function properly
• Analytics Cookies: Help us understand how users interact with the Service
• Functional Cookies: Remember your preferences and settings
• Advertising Cookies: Used to deliver relevant advertisements (with your consent)

9.2 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of the Service.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication
• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

11. International Data Transfers

Your information may be transferred to and processed in countries outside the UK and European Economic Area (EEA). When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the UK government
• Adequacy decisions by the UK government
• Other appropriate safeguards as required by UK GDPR

12. Children's Privacy

The Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending you an email notification (if you have provided an email address)
• Displaying a prominent notice on the Service

Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Vintavia
Email: privacy@vintavia.com
Data Protection Officer: dpo@vintavia.com
Address: [Your Company Address], London, United Kingdom