LEGAL & POLICIES HUB

1. Introduction Galloway Coach Travel Ltd (“we”, “us”, or “our”) is committed to protecting your privacy and handling your personal data respectfully, transparently, and securely. This policy explains what personal data we collect, how we use it, how it is stored, and your rights. We act as the Data Controller in respect of all personal information we process. 2. Who We Are (Data Controller) Galloway Coach Travel Ltd, Denters Hill, Mendlesham, Stowmarket, Suffolk, IP14 5RR. Email: gec@gallowayeuropean.co.uk | Phone: 0330 100 0360 3. Personal Data We Collect We collect information necessary for operating school trips, cadet tours, and adult group travel, including: •Identity Data: Full names, titles, and dates of birth for all passengers. •Contact Data: School or organization addresses, email addresses, and telephone numbers. •Travel Documentation: Passport details and visa information where required for international border crossings. •Financial Data: Bank account and payment card details (processed securely via encrypted channels). •Special Category Data: Health information, including dietary requirements, allergies, or mobility needs essential for passenger safety. •Technical Data: IP addresses and browser metadata collected via our website for security and performance monitoring. 4. How We Use Personal Data We process data strictly for the following purposes: •Contractual Necessity: To arrange transport, accommodation, and excursions. •Safety and Compliance: To manage medical requirements and ensure passenger manifest accuracy. •Communication: To provide booking confirmations, itinerary updates, and emergency support. •Service Improvement: To analyze website usage and optimize our digital offerings. 5. Legal Basis for Processing We process data under the following legal grounds: •Contract: To fulfill our agreement with you. •Legal Obligation: To comply with financial and safety regulations. •Vital Interests: To protect a passenger’s life in a medical emergency. •Legitimate Interests: To ensure business security and efficient operations. •Consent: Specifically for marketing communications or the use of trip photography. 6. Data Sharing and International Transfers We share data only with trusted partners required to deliver your tour (e.g., hotels, ferry operators, safety auditors, and emergency services). For tours outside the UK, data may be transferred to international providers under strict security safeguards in accordance with UK GDPR. 7. Data Retention * Booking Records: Retained for 7 years to comply with tax and audit regulations. •Sensitive Medical/Dietary Info: Securely deleted immediately following the completion of travel. •Marketing Data/Photos: Retained until consent is formally withdrawn. 8. Your Rights You have the right to access, correct, or request the deletion of your personal data. You may also object to processing or request data portability. To exercise these rights, please contact our Data Protection Officer at the email address provided above. 9. Cookie Policy We use cookies to enhance site functionality and analyze traffic (e.g., via Google Analytics). We use: •Strictly Necessary Cookies: Essential for site navigation and security. •Performance Cookies: To help us understand visitor behavior and improve site performance. •Preference Cookies: To remember your choices, such as language or region. Users may manage or disable cookies through their browser settings at any time.