Data Protection Policy

At Wanderlust Travel, we are committed to protecting your personal information and respecting your privacy. This Data Protection Policy explains how we collect, use, store, and safeguard your data in compliance with applicable data protection laws, including the General Data Protection Regulation.

Information We Collect

We collect personal information that you provide directly to us when booking travel services, including your name, contact details, passport information, payment details, and travel preferences. We also collect information automatically through our website, such as IP addresses, browser types, and pages visited. This data helps us improve our services and provide you with personalized travel recommendations. Additionally, we may receive information from third parties, including airlines, hotels, and payment processors, to facilitate your bookings and ensure smooth travel experiences. All information collected is necessary for providing our travel services and enhancing your customer experience.

How We Use Your Information

Your personal data is used primarily to process bookings, arrange travel services, and communicate with you about your trips. We use your information to send booking confirmations, travel documents, and important updates regarding your journey. We may also use your data to improve our website functionality, analyze customer preferences, and develop new travel products that better serve your needs. With your consent, we send promotional materials about special offers and new destinations. We never sell your personal information to third parties for their marketing purposes. All data processing activities are conducted with appropriate security measures and in accordance with legal requirements.

Data Sharing and Disclosure

We share your information with trusted partners essential for delivering travel services, including airlines, hotels, tour operators, and insurance providers. These partners are contractually obligated to protect your data and use it only for the specified purposes. We may disclose information to comply with legal obligations, respond to lawful requests from authorities, or protect our rights and safety. In the event of a business transfer or merger, your data may be transferred to the new entity, but we will notify you and ensure continued protection. We implement strict data sharing agreements with all third parties to maintain the confidentiality and security of your information.

Data Security Measures

We employ industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our systems use encryption technology for data transmission, secure servers for data storage, and regular security audits to identify vulnerabilities. Access to personal data is restricted to authorized personnel who require it for their job functions. We maintain backup systems to prevent data loss and have incident response procedures in place to address any security breaches promptly. While we strive to protect your information, no method of transmission over the internet is completely secure, and we encourage you to use strong passwords and protect your account credentials.

Your Rights and Choices

You have the right to access, correct, or delete your personal information at any time. You can request a copy of the data we hold about you and ask us to update inaccurate information. You have the right to object to certain data processing activities, restrict how we use your data, and request data portability. You can withdraw consent for marketing communications at any time by clicking unsubscribe links in our emails or contacting us directly. If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the relevant data protection authority. We respond to all rights requests within the timeframes required by law.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy and comply with legal obligations. Booking information is typically retained for seven years to meet tax and accounting requirements. Marketing data is kept until you withdraw consent or request deletion. After the retention period expires, we securely delete or anonymize your data. Some information may be retained in backup systems for a limited time before permanent deletion. We regularly review our data retention practices to ensure we do not keep information longer than necessary.

International Data Transfers

As a travel company operating globally, we may transfer your data to countries outside your jurisdiction to provide our services. When transferring data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions. We work only with partners who demonstrate commitment to data protection standards equivalent to those required by law. You have the right to obtain information about the safeguards we use for international transfers and request copies of relevant documents.

Changes to This Policy

We may update this Data Protection Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website and indicating the revision date. For material changes affecting your rights, we will provide additional notice through direct communication. We encourage you to review this policy regularly to stay informed about how we protect your information.

Contact Us

If you have questions about this Data Protection Policy or wish to exercise your rights, please contact us. We are committed to addressing your concerns and ensuring your data is handled responsibly and transparently.