GDPR Privacy Policy for Nainital King Holidays

Effective Date: 1st Sept 2024

Nainital King Holidays (“we”, “our”, “us”) respects your privacy and is committed to protecting the personal data of all our customers, including users from the European Union. This GDPR Privacy Policy outlines how we collect, use, protect, and share your information in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

1. What Data We Collect

We may collect and process the following types of personal data:

Identity Data: Name, title, date of birth.
Contact Data: Email address, phone number, mailing address.
Booking Data: Travel preferences, destination, hotel/transport bookings.
Payment Data: Transactional and billing details (processed securely via third-party gateways).
Technical Data: IP address, browser type, device information, cookies.

2. How We Use Your Data

We use your data for:

Processing travel bookings and payments.
Sending booking confirmations and travel-related communication.
Providing customer support.
Sending promotional emails (only if you’ve opted in).
Improving our website and services through analytics.

3. Legal Basis for Processing

We process your data on the following legal grounds:

Performance of a Contract: To fulfill your booking and travel requests.
Consent: For email marketing and optional services.
Legal Obligation: To comply with applicable laws.
Legitimate Interest: To improve our services and communication.

4. Your Rights Under GDPR

If you are located in the EU, you have the following rights:

Access: Request a copy of your personal data.
Rectification: Correct inaccurate or incomplete data.
Erasure: Request deletion of your data (“right to be forgotten”).
Restriction: Limit the processing of your data.
Portability: Request transfer of your data to another provider.
Objection: Object to processing based on legitimate interest or direct marketing.
Withdraw Consent: At any time, for marketing communications.

To exercise your rights, email us at: info@nanitalkingholidays.com

5. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which we collected it, including legal, accounting, or reporting requirements.

6. Data Security

We implement industry-standard measures to protect your data from unauthorized access, alteration, disclosure, or destruction.

7. International Data Transfers

Your data may be stored or processed outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place (such as data processing agreements with standard contractual clauses).

8. Third-Party Services

We may share your data with trusted third parties like:

Payment gateways
Hotel/transport partners
Email marketing platforms (if you’ve opted in)

All third parties are required to respect your data and treat it in accordance with GDPR.

9. Cookies

Our website uses cookies to enhance user experience and for analytics. You can manage your cookie preferences in your browser settings or through our cookie consent banner (if enabled).