The Great Traveller Ltd is committed to protecting our customer privacy and takes its responsibility regarding the security of customer information very seriously. We will be clear and transparent about the information we are collecting and what we will do with that information.
The data controller is The Great Traveller Ltd (referred to as “we”, “us”, “our” or “TGT” in this policy).
This Policy sets out the following:
"trip" – a volunteer project and/or tour as part of a package or as a single travel arrangement.
Personal data means any information relating to you which allows us to identify you, such as your name, contact details, booking reference number and information about your access to our website.
We collect data from you when you book a trip, submit an enquiry, create an account through the ‘My Projects’ section of the website, use our website or other websites accessible through our website or when you contact us.
Specifically, we may collect the following categories of information
Personal details about your physical or mental health, alleged commission or conviction of criminal offences are considered “sensitive” personal data under applicable data protection laws. We will process any such data only if you have given your explicit consent, or it is necessary (for instance if you request special assistance), or you have deliberately made it public.
Your data may be used for the following purposes:
We will only process your personal data where we have a legal basis to do so. The legal basis will depend on the reasons we have collected and need to use your personal data for.
In most cases we will need to process your personal data so we can enter into our contract with you.
We may also process your personal data for one or more of the following:
Only children aged 16 or over can provide their own consent. For children under this age, consent of the children’s’ parents or legal guardians is required.
We will not retain your data for longer than is necessary to fulfil the purpose it is being processed for. To determine the appropriate retention period, we consider the amount, nature and sensitivity of the personal data, the purposes for which we process it.
When we no longer need your personal data, we will securely delete or destroy it. We will also consider if and how we can minimise over time the personal data that we use, and if we can anonymise your personal data so that it can no longer be associated with you or identify you, in which case we may use that information without further notice to you.
We follow strict security procedures in the storage and disclosure of your personal data, and to protect it against accidental loss, destruction or damage. The data you provide to us is protected using SSL (Secure Socket Layer) technology. SSL is the industry standard method of encrypting personal information and credit card details so that they can be securely transferred over the Internet.
All payments are made externally through WorldPay via their secure online payment portal and are transmitted over SSL and stored in compliance with Payment Card Industry Data Security Standards (PCI DSS).
You will have the option to stay signed-in to your ‘My Project’ account by checking the “remember me” box. This option will only apply to the computer/device and the browser that you're using when you select the box. If you do not wish to stay signed on a particular browser, simply sign out of ‘My Project’ on that browser.
We will delete any information of a travel companion collected without the companion’s consent, as soon as we become aware of it.
We keep your personal information contained in your ‘My Project’ account for as long as you hold the account. You may delete your ‘My Project’ account by contacting us via email or direct post addressed to ‘The Data Protection Officer’. Please note that general retention periods apply to any personal data we collected to enter into a contract with you or to perform that contract or because we have a legal obligation to process it.
You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser (like Internet Explorer) settings. Each browser is a little different, so look at your browser's Help menu to learn the correct way to modify your cookies.
If you disable cookies, some features will be disabled, it will turn off some features that make your site experience more efficient and some of your services will not function properly.
Occasionally, at our discretion, we may include or offer third party products or services on our website. These third party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.
We along with third-party vendors, such as Google use first-party cookies (such as the Google Analytics cookies) and third-party cookies (such as the DoubleClick cookie) or other third-party identifiers together to compile data regarding user interactions with ad impressions, and other ad service functions as they relate to our website.
Opting out: Users can set preferences for how Google advertises to you using the Google Ad Settings page. Alternatively, you can opt out by visiting the Network Advertising initiative opt out page or permanently using the Google Analytics Opt Out Browser add on.
We honour do not track signals and do not track, plant cookies, or use advertising when a Do Not Track (DNT) browser mechanism is in place and we do not allow third party behavioural tracking.
We have appointed a Data Protection Officer (“DPO”) to oversee compliance with this policy. You have the right to make a complaint at any time to a supervisory authority.
Under certain circumstances, by law you have the right to:
If you want to exercise any of these rights, then please contact our DPO by post at 3 Dairy Yard, Star Street, Ware, Hertfordshire, UK, SG12 7DX. You will not have to pay a fee to access your personal information (or to exercise any of the other rights). We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.