Privacy Policy

Your privacy and data security are our top priorities

Last Updated: October 15, 2025

Quick Summary

At Maharajah Tours, we value your privacy and are committed to protecting your personal information in accordance with the UK GDPR and Data Protection Act 2018.

We only collect information necessary to provide our services, never sell your data, and give you full control over your personal information.

1. Information We Collect

What personal data we gather and why

We collect information you provide when making enquiries, bookings, or subscribing to updates. This includes:

Personal Details Name, date of birth, passport information
Contact Information Email address, phone number, postal address
Payment Details Payment card information (processed securely)
Travel Preferences Destinations, dietary requirements, accessibility needs
Health Information Medical conditions relevant to travel (with consent)
Technical Data IP address, browser type, device information
Why we need this information

We collect only the information necessary to provide our travel services, ensure your safety, meet legal obligations, and enhance your travel experience.

2. How We Use Your Data

The purposes for which we process your information

Your information is used for the following purposes:

  • Booking Management: Processing and managing your travel bookings, including flights, accommodation, and activities
  • Customer Service: Responding to enquiries, providing support, and communicating about your bookings
  • Payment Processing: Securely processing payments and preventing fraud
  • Legal Compliance: Meeting regulatory requirements and complying with travel industry regulations
  • Marketing Communications: Sending relevant offers and updates (only if you've opted in)
  • Service Improvement: Analyzing trends to improve our services and website functionality

We never sell your data to third parties. Your personal information is used solely for the purposes outlined above.

3. Legal Basis for Processing

The lawful grounds for handling your data

Under UK GDPR, we process your personal data on the following legal bases:

4. Data Sharing

Who we share your information with and why

We may share your personal information with trusted third parties to provide our services:

Your data is protected

All third parties are carefully vetted and contractually obligated to protect your data in accordance with UK data protection laws.

5. Data Security

How we protect your information

We implement robust security measures to protect your personal data:

  • Encryption: All sensitive data is encrypted during transmission using SSL/TLS technology
  • Secure Storage: Personal information is stored on secure servers with restricted access
  • Access Controls: Only authorized personnel have access to personal data on a need-to-know basis
  • Regular Audits: We conduct regular security assessments and updates to our systems
  • Staff Training: All employees receive data protection and security training

6. Data Retention

How long we keep your information

We retain your personal data only as long as necessary for the purposes outlined in this policy:

Data Type
Retention Period
Booking Records
7 years (legal requirement)
Financial Records
7 years (tax purposes)
Marketing Consent
Until withdrawn
Website Analytics
26 months
Enquiry Records
3 years from last contact

After the retention period expires, your data is securely deleted or anonymized.

7. Your Rights

Your data protection rights under UK GDPR

You have the following rights regarding your personal data:

Right to Access

Request a copy of the personal data we hold about you

Right to Rectification

Request correction of inaccurate or incomplete data

Right to Erasure

Request deletion of your personal data (subject to legal requirements)

Right to Object

Object to certain types of processing, including direct marketing

Right to Restriction

Request restriction of processing in certain circumstances

Right to Portability

Receive your data in a structured, commonly used format

Exercise Your Rights

To exercise any of these rights, please contact us at:

info@maharajahtours.co.uk

We will respond to your request within 30 days.

8. Cookies

How we use cookies on our website

We use cookies to enhance your browsing experience and analyze website traffic. Cookies are small text files stored on your device.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality.

9. Third-Party Links

External websites and their privacy policies

Our website may contain links to third-party websites (e.g., airlines, hotels, tourism boards). We are not responsible for the privacy practices or content of these external sites.

Please review their privacy policies

When you click on a third-party link, you leave our website and should review that website's privacy policy to understand how they handle your data.

10. Children's Privacy

How we handle information about children

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children without parental consent.

When booking travel for children, we require that a parent or guardian provides the necessary information and consents on their behalf. If you believe we have inadvertently collected data from a child without proper consent, please contact us immediately.

11. International Transfers

Transferring data outside the UK

When you book international travel, your personal data may be transferred to and processed in countries outside the UK, including your destination countries and countries where our travel suppliers are based.

We ensure that any international transfers are protected by appropriate safeguards, including:

  • Standard contractual clauses approved by UK authorities
  • Adequacy decisions confirming appropriate data protection levels
  • Binding corporate rules for international organizations

12. Changes to This Policy

How we notify you of updates

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make significant changes, we will notify you by:

  • Posting the updated policy on our website with a revised "Last Updated" date
  • Sending an email notification if the changes materially affect your rights

We encourage you to review this policy periodically to stay informed about how we protect your data.

13. Contact Us

Get in touch with questions or concerns

If you have any questions, concerns, or requests regarding this privacy policy or how we handle your personal data, please contact us:

Company Name Maharajah Tours Ltd
Address 123 Travel Street, Leicester, LE1 1AA, United Kingdom
Right to Lodge a Complaint

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

ICO Website: www.ico.org.uk

ICO Helpline: 0303 123 1113