Privacy Policy

Effective Date: 1 January 2026
Copyright © 2026 Shand Travel. All rights reserved.

1. Introduction

Shand Travel Ltd (“we”, “us” or “our”) is committed to safeguarding the privacy and personal data of our clients and website visitors (“you”). This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website (the “Website”) or engage with our services.

By accessing or using our Website, you acknowledge and agree to the practices described in this Privacy Policy.

2. Data Controller

Shand Travel is the data controller responsible for the personal data collected and processed through the Website and in the course of providing our services.

3. Information We Collect

What personal data do we collect and how?

In order to respond to enquiries, design and fulfil travel arrangements, process bookings, or share carefully curated communications, we must collect certain personal data from you.

“Personal data” refers to any information relating to an identified or identifiable individual. “Processing” includes any action performed on personal data, such as collecting, recording, storing, using, sharing or deleting it.

You may provide personal data to us directly, or we may receive it via a third party (such as a travel partner or agent). Information may be provided over the telephone, through our website, by email, or in writing. In order to deliver a more tailored and seamless experience, we may also collect information about your interests and preferences, including how you interact with our website.

Depending on the nature of your enquiry or booking, the personal data we collect may include:

• Names and contact details (postal address, telephone number, email address)

• Payment information (credit/debit card or other payment details)

• Travel-related information for all persons travelling

• Special categories of personal data, such as health or medical information, where required to make appropriate travel arrangements

We kindly ask you to not provide personal data if you are not comfortable with it being processed in accordance with this Privacy Policy.

Examples of how we may collect your personal data include:

• Newsletter subscriptions: We collect your name and email address to share updates, insights and relevant communications.

• Travel enquiries: We collect your name, telephone number and email address to respond effectively to your request.

• Competitions or promotions: We collect your name and contact details to administer the activity and notify you if applicable. Any additional use of your data will only occur with your explicit consent.

• Bookings: We collect personal data for all travellers to arrange and deliver your travel services.

• Testimonials: We collect your name and email address to respond to your feedback. If shared publicly, only your first name will be used, never your surname or contact details.

Additional data collected via the website:

• Personal Information: Name, email address, contact details and payment information when booking consultations or services.

• Technical Data: IP address, browser type, device information, operating system and related technical identifiers.

• Usage Data: Information about how you use our website, including pages visited, time spent and links clicked.

4. How We Use Your Information

We use your personal data for the following purposes:

• Service delivery: To design and provide bespoke travel services and consultations.

• Transaction processing: To process payments and issue confirmations.

• Communication: To respond to enquiries, provide client support and share service-related updates.

• Personalisation: To tailor recommendations and communications to your interests and preferences.

• Analytics and improvement: To monitor and enhance the performance and usability of our website.

• Legal and regulatory compliance: To meet our legal obligations.

5. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Consent: Where you have given explicit consent, such as subscribing to communications.

• Contractual necessity: Where processing is required to fulfil a contract with you.

• Legitimate interests: Where processing supports our business interests and does not override your rights.

• Legal obligation: Where required to comply with applicable laws or regulations.

6. Sharing Your Information

We do not sell, rent or trade your personal data. We may, however, share it with:

• Trusted service providers: Including payment processors, technology providers and analytics partners.

• Legal or regulatory authorities: Where required by law or to protect our legal rights.

• Business transfers: In the event of a merger, acquisition or sale of assets.

All third parties are required to respect the confidentiality and security of your data.

7. General Data Protection Regulation (GDPR)

At Shand Travel, we are fully committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. These laws ensure that your personal data is processed lawfully, fairly, transparently and with respect for your rights.

a) Lawful, Fair and Transparent Processing

We only collect and process personal data where there is a clear legal basis to do so. This means your data is handled in a way that you would reasonably expect and without adversely affecting your privacy.

b) Purpose Limitation and Data Minimisation

We collect personal data strictly for specific, legitimate purposes explained in this Privacy Policy. We do not retain more data than is necessary for the purpose for which it was collected.

c) Accuracy and Storage Limitation

We take reasonable steps to ensure the personal data we hold is accurate and up to date. Personal data will be retained only for as long as required to fulfil the purposes outlined in this policy or to comply with legal retention requirements, after which it will be securely deleted or anonymised.

d) Lawful Bases for Processing Your Data

Under UK GDPR, we rely on the following lawful bases for processing personal data:

·      Consent: Where you have freely given clear consent for us to process your personal data for specific purposes.

·      Contract: To fulfil our contractual obligations when you engage our services or make a booking.

·      Legal Obligation: To comply with statutory or regulatory duties.

·      Legitimate Interests: To support legitimate business operations, provided such processing does not override your rights and freedoms.

e) Your Data Protection Rights Under GDPR

Under UK GDPR, you have the right to:

·      Request Access: Obtain confirmation of whether your personal data is being processed and access to that data.

·      Rectification: Ask for inaccurate or incomplete personal data to be corrected.

·      Erasure: Request deletion of your personal data (“right to be forgotten”) where there is no overriding legitimate reason for retention.

·      Restriction of Processing: Restrict the ways in which we use your data in certain circumstances.

·      Object to Processing: Object to processing based on legitimate interests or direct marketing.

·      Data Portability: Request transfer of your data to another data controller where technically feasible.

·      Withdraw Consent: Withdraw consent at any time, where processing is based on consent.

·      To exercise any of these rights, please get in touch with us at admin@shandtravel.com. We may ask for proof of identity to verify your request before actioning it.

·      Automated Decision-Making and Profiling

We do not undertake automated decision-making or profiling that produces legal or similarly significant effects about you.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance functionality and user experience. By using the Website, you consent to the use of cookies in line with our Cookie Policy. You may adjust your browser settings to manage or disable cookies at any time.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or to comply with legal requirements. When no longer required, data is securely deleted or anonymised.

10. Your Rights

Under applicable data protection laws, you have the right to:

• Access your personal data

• Correct inaccurate or incomplete data

• Request erasure of your data

• Restrict processing

• Object to processing based on legitimate interests

• Request data portability

• Withdraw consent at any time, where applicable

To exercise your rights, please contact us at admin@shandtravel.com. We may require proof of identity before fulfilling your request.

11. Data Security

We apply appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse or alteration. While we take every reasonable precaution, no online transmission or storage system can be guaranteed as completely secure.

12. International Data Transfers

As a UK-based company, your data is primarily processed within the United Kingdom. Where data is transferred outside the UK or the European Economic Area (EEA), appropriate safeguards will be implemented to ensure continued protection.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in legal requirements or business practices. Any updates will be published on this page and the effective date amended accordingly. We recommend reviewing this policy from time to time.

14. Contact Us

If you have any questions or concerns regarding this Privacy Policy or the handling of your personal data, please contact us at:

Shand Travel
Email: admin@shandtravel.com

Thank you for placing your trust in Shand Travel.

We take our responsibility to protect your privacy seriously and are committed to delivering a discreet, secure and considered experience at every touchpoint.