Privacy Policy

1. Introduction

Postiriaff ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website postiriaff.com or use our holiday services.

By using our services, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our services.

2. Information We Collect

Personal Information

We may collect the following personal information:

• Name, email address, and phone number
• Postal address and billing information
• Travel preferences and requirements
• Passport and identification details (for bookings)
• Payment information (processed securely through third-party providers)
• Special requirements (dietary, accessibility, etc.)

Automatically Collected Information

When you visit our website, we automatically collect:

• IP address and browser information
• Device type and operating system
• Pages visited and time spent on our site
• Referring website information
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal information for the following purposes:

• Processing and managing your holiday bookings
• Providing customer support and responding to inquiries
• Communicating important travel information and updates
• Sending marketing communications (with your consent)
• Improving our services and website functionality
• Complying with legal obligations and preventing fraud
• Analyzing website usage and user behavior

4. Legal Basis for Processing

Under GDPR, we process your personal data based on:

• Contract: To fulfill our contractual obligations to provide holiday services
• Consent: For marketing communications and non-essential cookies
• Legitimate Interest: For improving our services and website security
• Legal Obligation: To comply with applicable laws and regulations

5. Information Sharing and Disclosure

We may share your information with:

• Service Providers: Hotels, airlines, tour operators, and other travel suppliers
• Payment Processors: Secure payment processing companies
• Legal Authorities: When required by law or to protect our rights
• Business Partners: With your explicit consent for specific services

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• SSL encryption for data transmission
• Secure data storage with restricted access
• Regular security audits and updates
• Employee training on data protection
• Incident response procedures

While we strive to protect your information, no method of transmission over the internet is 100% secure.

7. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and fulfill bookings
• Comply with legal and regulatory requirements
• Resolve disputes and enforce our agreements
• Maintain business records for operational purposes

Generally, we retain booking information for 7 years after service completion, and marketing data until you opt out or 3 years of inactivity.

8. Your Rights

Under GDPR and UK data protection laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal data
• Restriction: Limit how we process your information
• Portability: Receive your data in a portable format
• Object: Opt out of marketing communications and certain processing
• Withdraw Consent: Revoke previously given consent

To exercise these rights, contact us at [email protected] or use our contact form.

9. Cookies and Tracking

We use cookies and similar technologies to:

• Ensure proper website functionality
• Remember your preferences and settings
• Analyze website usage and performance
• Provide personalized content and advertising

You can manage cookie preferences through our cookie consent banner or your browser settings. For more information, see our Cookie Policy.

10. International Data Transfers

Your information may be transferred to and processed in countries outside the UK/EU for the following reasons:

• Booking accommodations or services in destination countries
• Using cloud service providers with international data centers
• Working with international travel partners

We ensure appropriate safeguards are in place, including adequacy decisions, standard contractual clauses, or other approved mechanisms.

11. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16 without parental consent. If you believe we have collected information from a child under 16, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will:

• Post the updated policy on our website
• Update the "Last Updated" date
• Notify you of significant changes via email or website notice
• Obtain your consent for material changes where required

13. Contact Information

If you have questions about this Privacy Policy or our data practices, contact us:

14. Supervisory Authority

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):