Effective date: 1 August 2026 · Type of site: e-commerce (digital services)
https://margtravel.co.uk (the "Site") is owned and operated by Marg. Marg is the data controller and can be contacted at:
Email: bookmargtravel@yahoo.com
This policy tells you what personal data we collect, how we use it, who has access to it, and what rights you have. It applies in addition to our Terms & Conditions.
For users in the European Union, we adhere to Regulation (EU) 2016/679 (the "GDPR"). For users in the United Kingdom, we adhere to the GDPR as enshrined in the Data Protection Act 2018.
We have not appointed a Data Protection Officer, as we do not fall within the categories of controllers and processors required to appoint one under Article 37 of the GDPR. Any questions about your data should be sent to the contact details above.
By using our Site, you agree that you consent to the conditions set out in this Privacy Policy.
Where the legal basis for us processing your personal data is that you've provided consent, you may withdraw that consent at any time. Withdrawing consent does not make processing we completed before the withdrawal unlawful.
You can withdraw your consent by emailing bookmargtravel@yahoo.com. Once consent is withdrawn, we will stop processing the specific data covered by that consent (such as dietary or allergy information) and delete it from our records within 30 days.
We collect and process personal data about users only when we have a legal basis for doing so under Article 6 of the GDPR. We rely on the following:
If you don't provide the personal data necessary to perform a contract, the consequences are as follows: some information is required to deliver the service — without a destination, dates, and contact details, we cannot research or deliver an itinerary. Other information, such as dietary requirements or cultural background, is optional; if not provided, we will still deliver your itinerary, but it will not be tailored to needs we weren't told about.
We only collect data that helps us achieve the purposes set out in this policy. We will not collect any additional data beyond what's listed below without notifying you first.
This data is collected directly from you, when you fill out the trip intake form or make a purchase.
Data collected on our Site is only used for the purposes specified in this Privacy Policy. We will not use your data beyond what we disclose here.
The data we collect may be used for the following purposes:
User data will be stored for 24 months after your last interaction with us. You will be notified if your data is kept for longer than this period.
Transaction records (the fact a payment was made, the amount, and the date — not card details, which we never hold) are kept for 6 years, in line with UK HMRC recordkeeping requirements.
While we take all reasonable precautions to ensure that user data is secure, there always remains a risk of harm. The internet as a whole can be insecure at times, and we are unable to guarantee the security of user data beyond what is reasonably practical.
Under the GDPR, you have the following rights:
We do not knowingly collect or use personal data from children under 16 years of age. If we learn that we have collected personal data from a child under 16, that data will be deleted as soon as possible. If a child under 16 has provided us with personal data, their parent or guardian may contact us at the details in Section 17 to have it removed.
If you would like to know whether we have collected your personal data, how we have used it, whether we have disclosed it and to whom, if you would like your data deleted or modified in any way, or if you would like to exercise any of your other rights under the GDPR, please contact us at the details in Section 17.
In addition to the methods described in Section 12, we provide the following specific opt-out method for the data specified below:
What you can opt out of: the optional data categories — dietary/allergy information and cultural or culinary background. These are the only fields on the trip intake form that aren't required to deliver the service; everything else (name, email, trip dates, destinations) is necessary to fulfil your order.
How to opt out:
Our service providers (Netlify and Stripe) may process data outside the UK, including in the United States. Where this happens, they do so under approved safeguards such as Standard Contractual Clauses or equivalent frameworks recognised under UK GDPR.
This Privacy Policy may be amended from time to time to maintain compliance with the law and to reflect any changes to our data collection process. When we amend this policy, we will update the effective date at the top of this page. We recommend reviewing this policy periodically; where necessary, we may also notify users by email of significant changes.
If you have any complaints about how we process your personal data, please contact us through the details in Section 17 so that we can, where possible, resolve the issue directly.
If you feel we have not addressed your concern satisfactorily, you also have the right to lodge a complaint directly with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection.
If you have any questions, concerns, or complaints, you can contact us at:
Email: bookmargtravel@yahoo.com