top of page

PRIVACY POLICY

Privacy Policy – Christmas4all.travel

Last updated: 5 September 2025

At Christmas4all.travel, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our website or services. It also outlines your rights under the General Data Protection Regulation (GDPR) if you are based in the EU or UK.
 
1. Information We Collect

We may collect and process the following types of information:

  • Personal details: Full name, date of birth, nationality, gender.
     

  • Contact details: Email address, phone number, postal/billing address.
     

  • Booking information: Travel dates, flight details, accommodation preferences, dietary requirements, and chosen activities.
     

  • Payment information: Payment confirmations (we do not directly store card data if processed via third-party providers).
     

  • Medical & health information: Conditions, allergies, or accessibility needs (only when necessary for your safety and experience).
     

  • Technical information: IP address, browser type, device information, and cookies when visiting our website.
     

 
2. Lawful Basis for Processing (GDPR)

We process your personal data under the following lawful bases:
 

  • Contract: To provide and manage your holiday booking and related services.
     

  • Legal obligation: To comply with accounting, tax, and regulatory requirements.
     

  • Legitimate interests: To improve our services, communicate updates, and ensure guest safety.
     

  • Consent: For marketing communications, processing sensitive health data, or when legally required. You may withdraw your consent at any time.
     

 
3. How We Use Your Data

We use your personal information to:
 

  • Process bookings, payments, and reservations.
     

  • Organize accommodation, activities, transfers, and catering.
     

  • Communicate with you about your booking and provide updates.
     

  • Ensure dietary, medical, or accessibility needs are met.
     

  • Improve our services and customer experience.
     

  • Send promotional or marketing communications (only with your consent).
     

 
4. Sharing Your Information

We may share your data with trusted third parties, including:
 

  • Accommodation providers.
     

  • Transport and transfer services.
     

  • Activity providers (e.g., surf schools, tour operators).
     

  • Catering and restaurant partners.
     

  • Payment processors and banks.
     

We only share what is strictly necessary and require all third parties to process your data securely.
 
5. International Data Transfers

As a travel company operating in Mexico, your data may be transferred and stored outside the EU/UK. In such cases, we ensure appropriate safeguards are in place, including:
 

  • Standard Contractual Clauses (SCCs) approved by the European Commission.
     

  • Transfers to providers certified under recognized data protection frameworks.
    By booking with us, you consent to such transfers where legally permitted.
     

 
6. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, including:
 

  • Booking records: Up to 7 years (for tax and legal compliance).
     

  • Marketing data: Until you withdraw consent.
     

  • Health or dietary information: Deleted promptly after your trip unless legally required.
     

 
7. Your Rights (GDPR)

If you are based in the EU/UK, you have the following rights under GDPR:
 

  • Access: Request a copy of the personal data we hold about you.
     

  • Rectification: Request corrections to inaccurate or incomplete data.
     

  • Erasure: Request deletion of your data (“right to be forgotten”).
     

  • Restriction: Request limits on how we process your data.
     

  • Data portability: Request transfer of your data to another provider.
     

  • Objection: Object to certain processing, including marketing.
     

  • Withdraw consent: Withdraw consent at any time (without affecting past processing).
     

To exercise your rights, contact us at [Insert Contact Email]. We will respond within 30 days.
 
8. Data Security

We take appropriate technical and organizational measures to protect your personal data, including:
 

  • Encrypted storage systems.
     

  • Password-protected access.
     

  • Staff training in data protection.
     

  • Secure deletion protocols when data is no longer needed.
     

 
9. Cookies & Tracking

Our website uses cookies to enhance your browsing experience, analyze traffic, and deliver relevant content. You can manage or disable cookies in your browser settings, though some features may not function properly without them.
 
10. Children’s Privacy

Our services are available only to individuals aged 18 and above. We do not knowingly collect personal data from minors.
 
11. Updates to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on our website with the updated date.
 
12. Contact & Complaints

If you have questions about this policy or how we handle your data, please contact us:

📧 christmas4all.travel@gmail.com

If you are based in the EU/UK and are unsatisfied with our response, you have the right to lodge a complaint with your local Data Protection Authority.

bottom of page