Privacy Policy

1. Introduction

Trip Secrets ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website trip-secretsx.com or use our services.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Name and contact information (email address, phone number, postal address)
• Payment information for tour bookings
• Preferences and interests related to castle tours
• Communication history with our customer service team

2.2 Automatically Collected Information

When you visit our website, we automatically collect:

• IP address and device information
• Browser type and version
• Pages visited and time spent on site
• Referring website information
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information for the following purposes:

• Providing and managing our tour services
• Processing bookings and payments
• Sending newsletters and marketing communications (with consent)
• Improving our website and services
• Customer support and communication
• Legal compliance and fraud prevention

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

• Consent: For marketing communications and optional services
• Contract: To fulfill tour bookings and provide services
• Legitimate Interest: For website analytics and fraud prevention
• Legal Obligation: For tax records and regulatory compliance

5. Information Sharing and Disclosure

We may share your information with:

• Service Providers: Payment processors, email service providers, and analytics services
• Tour Partners: Castle venues and local guide services (only information necessary for tours)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In case of merger, acquisition, or sale of assets

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze website traffic and usage patterns
• Provide personalized content and advertisements
• Improve website functionality and security

You can manage cookie preferences through our cookie consent banner or your browser settings. For more information, see our Cookie Policy.

7. Your Rights and Choices

Under GDPR and other privacy laws, you have the right to:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a portable format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Remove consent for marketing communications

To exercise these rights, contact us at [email protected].

8. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and fulfill contractual obligations
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements

Marketing data is retained until you unsubscribe or request deletion. Booking records are kept for 7 years for tax and legal compliance.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• SSL encryption for data transmission
• Secure servers and databases
• Regular security audits and updates
• Staff training on data protection
• Access controls and authentication systems

10. International Data Transfers

Your data may be transferred to and processed in countries outside the UK/EU. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by the UK/EU
• Appropriate safeguards and security measures

11. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If we become aware of such collection, we will delete the information promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending email notifications for material changes

13. Contact Information

For questions about this Privacy Policy or to exercise your rights, contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data properly.