Privacy Policy

Please review: this is a template policy prepared for Europe26 DMC. It should be checked by your legal adviser, and the details in square brackets completed, before it is relied on.

1. Who we are

This website is operated by [company legal name], trading as Europe26 DMC (“Europe26 DMC”, “we”, “us”, “our”), a company registered in [England and Wales / Scotland] with company number [number], whose registered office is at [registered address].

We are the controller of the personal data described in this policy. If you have any questions about it or about how we use your data, contact us at [privacy email address] or by post at the address above.

2. The data we collect

Data you give us

• Enquiry and booking forms: your name, email address, phone number, country of residence, travel dates, number of travellers, destinations, departure city, budget, interests and anything you write in your message.
• Transfer requests: pick-up and drop-off locations, dates and times, number of passengers and luggage.
• Bookings: the names of everyone travelling, dates of birth and passport details where suppliers or authorities require them, room preferences, and payment records.
• Special category data: information about health, mobility or dietary needs, or religious belief (for example when you ask us to arrange Umrah), only where you choose to give it so that we can arrange your trip. We ask for your explicit consent to use it.
• Newsletter: your email address, the date you subscribed and, where relevant, the topic you asked to hear about.

Data collected automatically

When you use our forms we record your IP address, the date and time and basic browser information, to protect the website against spam and abuse. Our website also uses cookies, as explained in our Cookie Policy.

3. How and why we use your data

• To answer enquiries and prepare quotes, as steps you have asked us to take before entering into a contract.
• To make and manage bookings, including passing details to the hotels, transport providers, guides and other suppliers who deliver your trip, as necessary for the performance of our contract with you.
• To send our newsletter, on the basis of your consent. Every newsletter includes a link to unsubscribe.
• To keep our website and forms secure and prevent misuse, on the basis of our legitimate interests.
• To meet legal obligations, such as keeping accounting records.

4. WhatsApp

After you send an enquiry, our website offers you the option to continue the conversation on WhatsApp. If you choose to do so, a message containing your enquiry reference and the details you entered opens in WhatsApp, and it is sent only when you press send. WhatsApp is operated by WhatsApp LLC and Meta, and messages sent through it are also subject to their privacy policy. You do not have to use WhatsApp; we can reply by email or phone instead.

5. Who we share your data with

We do not sell your personal data. We share it only with:

• suppliers who provide the services in your booking, such as hotels, transport companies, airlines, guides and activity providers;
• service providers who host and support our website, email and systems, under contracts that require them to protect your data;
• professional advisers, insurers and authorities, where this is necessary or required by law.

6. International transfers

Many of our suppliers are located outside the UK, in the European Economic Area and beyond, and some trips (for example Umrah journeys) involve suppliers in countries that do not have UK adequacy regulations. Where we transfer data outside the UK, we do so because it is necessary to provide the services you have booked, or we use appropriate safeguards such as the UK International Data Transfer Agreement.

7. How long we keep your data

• Enquiries that do not lead to a booking: [24 months] from our last contact.
• Booking records: [6 years] after the end of your trip, to meet accounting and legal requirements.
• Newsletter subscriptions: until you unsubscribe. We keep a record of the unsubscribe so that we do not contact you again.

8. Your rights

Under the UK GDPR you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct data that is wrong or incomplete;
• ask us to delete your data, or to restrict how we use it;
• object to our use of your data where we rely on legitimate interests;
• withdraw your consent at any time, where we rely on consent;
• receive your data in a portable format.

To use any of these rights, contact us at [privacy email address]. We will reply within one month. If you are not happy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk, although we would appreciate the chance to put things right first.

9. Security

We use appropriate technical and organisational measures to protect your data, including encrypted connections to our website and restricted access to our systems.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page.

Last updated: [date].