Privacy Policy

This privacy policy for Travl XL Limited trading as Travl XL (‘Travl XL’, ‘we’, ‘us’, or ‘our’,), describes how
and why we collect, store and process your information when you use our services such as when you:

• Visit our website at https://www.travlxl.co.uk
• Engage with us in other related ways, including any sales, marketing, or events

We are committed to ensure your privacy is protected and registered with the information commissioner’s office (UK) to ensure transparency and GDPR provision compliance (GDPR (EU) 2016/679).

Questions or concerns?
Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services.
If you still have any questions or concerns, please contact us at [email protected]

Key Points

What personal information do we process?
When you visit or navigate through our website/services, we may process personal information dependant on how you interact with Travl XL and it’s services, using the choices you make and the features you use.

How do we process your information?
We process your information to provide, improve, and administer our services, communicate with you, for security and fraud prevention, and to comply with the law.

Do we share information with third parties?
We may share certain information with third parties for the service we provide.

Do we receive any user information from third parties?
We do not receive any information from third parties.

Do we process sensitive information?
We, Travel XL Limited do not process any sensitive information.

What are your rights as a user?
Dependant on where you are located geographically, under certain applicable privacy laws you may have certain rights regarding your personal information.

What information do we collect?
Personal information you disclose to us.
We collect personal information which you voluntarily provide to us to use our services when you participate in the activities on the services or when you voluntarily contact us.
The personal information we collect depends on the context of your interaction and services you choose, and the features you use on our website.
The personal information we may collect may include the following:

• Name
• Phone numbers
• Email Address
• Pick up and drop off addresses
• Billing address
• Bank card/credit card details (for payment of services)
• Company name
• Number of passengers and luggage items
  * Subject/query (regarding what you want to know, this information is provided by you, by choice)

Sensitive information
We do not process any sensitive information.

Payment data
We may collect data necessary to process your payment if you purchase any of our services, such as:

• payment instrument number
• expiry date
• security code associated with the payment instrument number
  All payment data is stored by Stripe, Stripe is PCI data security standard (PCI-DSS) level 1 compliant. This is the most stringent level of security certification available for card payments, this ensures GDPR provision compliance (GDPR (EU) 2016/679).
  You may find they privacy policy here:
  https://www.stripe.com/gb/privacy.

How do we process your information?
We process your information to provide, improve, and administer our services, communicate with you, for security and fraud prevention, and to comply with the law.
We process your personal information for many reasons, dependant on how you interact with our services, including:

• To deliver and provide services to the user. We may process your information to provide you with the requested chosen service.
• To respond to user inquiries and offer support to users. We may process your information to respond to your inquiries and solve any issues you might have with the requested service.
• To complete and manage your orders. We may process your information to fulfil and manage your orders, payments, cancellation, and changes made through the services.

How do we store your data?
Your personal information data is stored on our relevant operating devices and backed via our emails. There is a strict usage policy of your personal data, it is only handled by our data handler who manages your services/purchases.
Your personal information is stored according to the relevant data protection laws, all data is stored for a minimum period of six months from the point of service or purchase. After 6 months have passed, data can be deleted upon request.

What legal bases do we rely on process your information?
We only process your information when we know it’s valid, necessary and legal reason to under the applicable law. With your consent to comply with the laws to provide you services to enter and fulfil our contractual agreements, to protect your rights or to fulfil your legitimate business interests.
The General Data Protection Regulation (GDPR) and UK GDPR requires us to explain why we require your personal information and on what grounds do we process your information.
We may rely on the following bases to process your information:

• Consent – We process your personal information only if you have gave us permission to do so, to provide a service or when you as a user, use a feature provided by us. You can withdraw your consent at any time.
• Performance of a contract – We may process your personal information when we may think it’s to fulfil our contractual obligation towards you. This includes providing our services or entering a contract with you.
• Legal obligations – We may process your information where we think it’s necessary for our legal compliance, such as to cooperate with law enforcement or regulatory agency, exercise or defend our legal rights, or disclose your information in litigation which we may be involved in.
• Vital interests – We may process your information in the event we may think it is to protect you from potential threats and your safety.

When and who do we share your personal information with?
We may share specific but limited information with third parties for the services we provide. We may need to share information in the following situations:

• Business transfer – In the event of sale of the business or merging the business, sale of company assets, financing or acquisition of all or a portion of our business to another company we may share information.
• When we use Google maps API platforms – we may share your information with Google maps API platform, for example Google maps API and Places API to provide the services you require. To find out more about Google’s privacy policy follow the following link: https://policies.google.com/privacy. You may withdraw your consent at any time by contacting us.

What are cookies and do we use cookies?
Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our websites, we may collect information from you automatically through cookies or similar technology.
For further information, visit:
https://www.allaboutcookies.org.
We may use cookies and tracking technologies (like web beacons and pixels) to collect and store information. We use these cookies so that we recognise you on our website and remember your previously selected preferences. These include what location you are in to enable the best user experience.

How to manage cookies?
You can set your browser not to accept cookies, and the above website tells you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.

How long do we store collected information?
We keep your information for as long as required to complete the purposes outlined in this policy and the required amount by the law, for the set amount highlighted in the privacy policy unless a longer time is required by law.
When we have no legitimate business to process your personal information it will be deleted or anonymised; if this is not possible due to being backed up on archive files, it will be stored securely away from any processing until deletion is possible.

What are your privacy rights?
In some regions you are allowed to gain greater access of your personal information in European economic area and UK, where you may be able to review, change and terminate your personal information.
You may have the following rights under the data protection laws:

• to request access and gain a copy of your personal information.
• to request to rectify or erase your personal information.
• to restrict the processing of your personal information.
• if applicable, you may be able to reject data portability.
• in certain circumstances you may be able to object the processing of your personal information.
  Travl XL Limited will act upon any request in accordance to data protection laws.
  If you are in the EEA or UK and believe we are unlawfully processing your information; you have the right to complain to your local data protection supervisory authority.
  If we are relying on your consent to process your personal information, you can withdraw your consent at any time by contacting us. This will not affect the lawfulness of processing your personal data before your withdrawal or affect the processing of your personal information in accordance to reliance on lawful processing grounds other than consent.
  If you have any further questions or queries regarding your privacy rights or your personal information and it’s processing then feel free to contact us via email on:
  [email protected].

How can you review, update and delete the date we collect from you?
Based on the relevant data protection laws, you may have the right to request access to the personal information we collect from you, change it or delete it. Please contact us via email to submit your query on:
[email protected].

Do not track (DNT) feature controls
Most web browsers, mobile applications and mobile operating systems have a do not track (DNT) feature or setting to signal your privacy preference (incognito), which enables you to control and not have your online browsing data collected and monitored. At this moment in time there isn’t any standard for recognising and implementing DNT signals, we do not respond to DNT browser signals.
If any standard is put in place to track your online browsing, we will inform you about this practice in a revised version of this policy policy.

Do we update this privacy policy?
We update this policy from time to time to stay compliant with relevant laws. The updated version will have a revised date listed, the policy will be in place and active from when it is accessible on our website. If material changes are made with this policy we will contact you via emails or direct notifications.
We request you review this privacy policy frequently so you understand how we are processing and protecting your private information.

How can you contact us?
You can contact us via email regarding any questions or queries you may have regarding this privacy policy on:
[email protected]

Last Updated: 16th November 2022