Privacy Policy

Introduction

Welcome to YourTravelBox’s privacy notice.

YourTravelBox respects your privacy and is committed to protecting your personal data. This privacy notice will inform you as to how we look after your personal data when you visit and use our website (yourtravelbox.com) (“Website”) and tells you about your privacy rights and how the law protects you.

This privacy notice is provided in a section format so you easily can go through the specific areas set out below. Please also use the Glossary to understand the meaning of some of the terms used in this privacy notice.

1. Important information and who we are

Purpose of this privacy notice

This privacy notice aims to give you information on how YourTravelBox collects and processes your personal data through your use of our Website, including any data you may provide through our Website when you sign up to our newsletter or set-up a user account.

The Website is not intended for children (i.e. individuals aged 18 or under) and we do not knowingly collect data relating to children.

It is important that you read this privacy notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy notice supplements the other notices we give and is not intended to override them.

Controller

YourTravelBox is the controller and responsible for your personal data (referred to as “YourTravelBox”, “we”, “us” or “our” in this privacy notice).

Contact details

Our full details are:

Full name of legal entity: YourTravelBox

Email address: legal@yourtravelbox.com

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

Changes to the privacy notice and your duty to inform us of changes

This privacy policy last update date is shown at the end of this page and historic versions can be obtained by contacting us using the contact details in the paragraph above.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

THIRD-PARTY LINKS

The Website may includes links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites or apps and are not responsible for their privacy statements. When you leave our Website, we encourage you to read the privacy notice of every website or app you visit.

2. The data we collect about you

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (i.e. anonymous data).

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together below.

Identity Data includes first name, maiden name, last name, username or similar identifier, marital status, title, age and gender, your photograph (where you sign-up to an account with us and choose to include your picture on your account).
Contact Data includes email address and telephone numbers
Technical Data includes mobile device ID, internet protocol (IP) address, your login data, browser type (for website use), time zone setting and location, operating system and platform and other technology related information about the devices you use to access the Website or App. If you use our Website from a mobile device, that device will send us data about your location based on your phone settings.
Usage Data includes information about how you use the Website (including your content viewing habits), products and services.
Marketing includes your preferences in receiving marketing from us and our third parties.

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific Website or App feature or content. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

3. How is your personal data collected?

We use different methods to collect data from and about you including through:

Direct interactions. You may give us your Identity, Contact by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:

- contact us regarding products or services we offer on our Website;
- create an account on our Website;
- subscribe to our newsletter;
- opt-in to receiving marketing emails from us;
- enter a competition, promotion or survey; or
- give us some feedback.

Automated technologies or interactions. As you use the Website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. Please see our cookie policy below for further details.
Third parties or publicly available sources. We may receive personal data about you from various third parties as set out below:
- Technical Data from the following parties:

- - analytics providers such as Google, Facebook and Salesforce DMP to collect standard internet log information and details of Website visitors’ behavior patterns.
  - affiliate networks (such as Amazon UK, Amazon US, AvantLink, Commission Junction, Performance Horizon, Skimlinks, Affiliate Window, Viator, GetYourGuide, Tripadvisor, Booking.com, Skyscanner, Affilinet, Impact Radius, Webgains, Tradedoubler, Viglink) where you click on an affiliate link featured in our content.

4. How we use your personal data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
Where we need to comply with a legal or regulatory obligation.

Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to sending direct marketing communications to you via email. You have the right to withdraw consent to marketing at any time by contacting us.

Purposes for which we will use your personal data

We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data.

Purpose/Activity	Type of data	Lawful basis for processing including basis of legitimate interest
To allow you to open an account via our Website	(a) Identity (b) Contact (c) Profile	Necessary for our legitimate interests to offer a better service and user experience
To manage our relationship with you which will include: (a) Notifying you about changes to our terms or privacy policy (b) Asking you to leave a review or take a survey (c) Responding to your queries or complaints regarding the Website or App	(a) Identity (b) Contact (c) Profile (d) Marketing	(a) Necessary to comply with a legal obligation (b) Necessary for our legitimate interests (to keep our records updated, to study how customers use our products/services, to respond to user’s questions on the use of our Website)
To enable you to partake in a prize draw, competition or complete a survey	(a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing	(a) Performance of a contract with you (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business)
To administer and protect our business and Website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)	(a) Identity (b) Contact (c) Technical	(a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) (b) Necessary to comply with a legal obligation
To deliver relevant Website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you	(a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (f) Technical	Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to provide a good experience to our users, to grow our business and to inform our marketing strategy)
To use data analytics to improve our Website, products/services, provision of content, marketing, customer relationships and experiences	(a) Technical (b) Usage	Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)
To make suggestions and recommendations to you about goods or services or content that may be of interest to you	(a) Identity (b) Contact (c) Technical (d) Usage	Necessary for our legitimate interests (to develop our products/services and grow our business)
To track your viewing habits and engagement with affiliate links and adverts on the Website	(a) Technical (b) Usage	Necessary for our legitimate interests to develop and grow our business
To send you our email newsletter, including stories, photos, videos, insider tips, news and product updates, if you have subscribed to receive this. We vary the frequency of these emails, but we aim to email you regularly. Our newsletters may include personalised stories and offers	(a) Identity (b) Contact (c) Technical (d) Usage	Consent – we will only send you these types of emails if you have signed up to receive them.
To allow you to book a travel service(s) for example: an experience, a place to stay (e.g. in a hotel) or transport (e.g. car hire, flights) via our Website, for yourself and any other travellers who you may book the relevant travel service(s) for. To allow you to buy any of our electronic products for example: travel guides.	(a) Identity (b) Contact (c) Payment details (d) Booking information (e) Special assistance or dietary requirements (f) Any other information that you volunteer as part of the booking to us.	(a) Performance of a contract with you (b) Necessary to comply with a legal obligation (c) Necessary for our legitimate interests (to be efficient about how we fulfil our contracts, to study how customers use our products/services, to develop them, to provide a good experience to our users, to grow our business and to develop our marketing strategy)

5. Opting out of personalised content and adverts

So that we can provide you with a great user experience, we may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need. This is how we decide which adverts and content may be relevant for you. You will only receive marketing communications from us by email if you provided us with your express opt-in consent.

We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising and providing you with personalized content. We have established the following personal data control mechanisms:

How to opt- out of a personalised communications

If you do not want your experience on the Website to be tailored to you based on your viewing habits on the Website, please click on the relevant option provided to you through our website to opt out from personalisation. If you click to opt-out, we will place a ‘do not track’ cookie on your browser. Please note that if you delete all cookies on your browser, or if you use a different browser to access the Website you will have to click this link again in order to stop us personalising your experience on our Website.

Tracking and advertising

We use products offered by Google in order to show you adverts which we think are likely to be relevant to you. If you want to change the personalized advertisement settings you can use the ads settings to manage the Google ads and opt out of interest-based ads by following THESE instructions. Furthermore, you can elect to reset your mobile device Advertising ID to clear any associated ad targeting or data collection activities.

Facebook may also collect information about how you use our website, such as which pages you visit through first-party cookies, to enable both Facebook and YourTravelBox to provide more relevant messages to you across Facebook. You can opt out of Facebook first-party cookies by updating your settings in Events Manager, and control the information Facebook uses to show you advertisements by managing your Ads Preferences.

Marketing emails

You can ask us to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you (it may take up to 3 days to stop receiving marketing messages), or by contacting us at any time legal@yourtravelbox.com.

Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of the Website may become inaccessible or not function properly. For more information about the cookies we use, please see cookie policy below.

Change of purpose

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please Contact us.

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

6. Disclosures of your personal data

We may have to share your personal data with the parties set out below for the purposes set out in the table in paragraph 4 above.

External Third Parties to help us provide our Website (e.g., maintenance, analysis, audit, marketing and development). They will have access to your information as is necessary to perform these tasks on our behalf and are obligated not to disclose or use it for other purposes.
External Third Parties to help us with providing travel services to you, these may include travel service suppliers such as sales/reservation system providers, software companies, hotel suppliers, experience providers. This is not an exhaustive list.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

7. International transfers

Many of our external third parties are based outside the European Economic Area (EEA) so their processing of your personal data will involve a transfer of data outside the EEA.

Whenever we transfer your personal data out of the EEA, we expect a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented as we are partnership only with trusted International Companies:

We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission. For further details, see European Commission: Adequacy of the protection of personal data in non-EU countries.
Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between the Europe and the US. For further details, see European Commission: EU-US Privacy Shield.

Please Contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.

8. Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

9. Cookies

We use cookies and other technologies to ensure everyone who uses YourTravelBox has a great user experience. By continuing to visit or use our services, you are agreeing to the use of cookies and similar technologies for the purposes we describe in this policy.

We use cookies, pixel tags, web beacons, mobile device IDs and similar files and technologies to collect and store the information we automatically collect about your computer, device and use of our website (“Website”). This cookie policy explains what cookies are, how we use them and how you can control them:

9.1 What is a Cookie?

Cookies are text files containing small amounts of information which are downloaded to your computer or mobile device when you visit a certain webpage. Cookies are then sent back to the originating webpage on each subsequent visit, or to another webpage that recognises that cookie. Cookies are widely used in order to make websites work, or to work more efficiently, as well as to provide information to the owners of the website.

Cookies do lots of different jobs, like letting you navigate between pages efficiently, remembering your preferences, and generally improving the user experience. Cookies may tell us, for example, whether you have visited the Website before or whether you are new visitor. They can also help to ensure that adverts you see online are more relevant to you and your interests.

There are two broad categories of cookies:

First party cookies, served directly by us to your computer or mobile device.
Third party cookies, which are served by a third party on our behalf. We use third party cookies for functionality, performance, analytics, advertising and social media purposes.

Cookies can remain on your computer or mobile device for different periods of time. Some cookies are ‘session cookies’, meaning that they exist only while your browser is open. These are deleted automatically once you close your browser. Other cookies are ‘permanent cookies’, meaning that they survive after your browser is closed. They can be used by the Website to recognise your computer when you open your browser and browse the Internet again.

9.2 How do we use cookies?

We use cookies to:

track traffic flows and patterns of travel in connection with the Website;
understand the total number of visitors to our Website on an ongoing basis and the types of internet browsers (e.g. Firefox, Chrome or Internet Explorer) and operating systems (e.g. Windows or Mac OS) used by our visitors;
monitor the performance of the Website and to improve it;
customise and enhance your online experience; and enable YourTravelBox and third parties to advertise both on and off this Website.

9.3 What type of cookies do we use and what are they used for

The type of cookie used by us and our partners in connection with the Website can be classified into one of five categories, namely ‘essential Website cookies’, ‘functionality cookies’, ‘analytics and performance cookies’, ‘advertising cookies’, and ‘social media cookies’. We’ve set out some further information about each category, and the purpose of the cookies we and third parties set in the following table.

Type of Cookie	What it does	How to block
Cookies necessary for essential Website purposes	These cookies are essential to provide you with the Website and any services available through this Website and to use some of its features, such as access to secure areas. Without these cookies, services you have asked for, like transactional pages and secure login accounts would not be possible.	Please see instructions set out in ‘How to control or delete cookies’ below.
Functionality Cookies	Functionality cookies record information about choices you’ve made and allow us to tailor the Website to you. These cookies mean that when you continue to use or come back to the Website, we can provide you with our services as you have asked for them to be provided. For example, these cookies allow us to: Understand how our Website is used in order to improve it Save your login details to make it easier for you to log into your account	Please see instructions set out in ‘How to control or delete cookies’ below.
Performance / Analytics Cookies	We use performance/ analytics cookies to analyse how the Website is accessed, used, or is performing in order to provide you with a better user experience and to maintain, operate and continually improve the Website. For example, these cookies allow us to: Better understand our Website visitors so that we can improve how we present our content Test different design ideas for particular pages such as our homepage Collect information about the Website visitors such as where they are located and what browsers they are using Determine the number of unique users of the Website Improve the Website by measuring any errors that occur Conduct research and diagnostics to improve product offerings	Please see instructions set out in ‘How to control or delete cookies’ below.
Advertising and Tracking Cookies	As you use our Website, you will notice that it features advertising. We allow third party companies, including advertising companies to place cookies on our Website. These cookies enable such companies to track your activity across various sites where they display ads and record your activities so they can show ads that they consider relevant to you as you browse the internet. Cookies also allow us and third parties to know whether you’ve seen an ad or a type of ad, and how long it has been since you’ve last seen it. This information is used for frequency capping purposes, to help tailor the ads you see, and to measure the effectiveness of ads. Cookies also help us provide aggregated auditing, research, and reporting for advertisers, understand and improve our service, and know when content has been shown to you.	All the ad companies or affiliate networks that we work with have their own privacy policies and offer a mechanism for users to opt out tracking and behavioural targeting available through the ad itself or through the opt out mechanisms listed in the ‘How to control or delete cookies’ section below.
Social Media Cookies	On some pages of our Website, third parties that provide applications through our Website may set their own anonymous cookies in order to track the success of their applications or customize applications for you. For example, when you share an article using a social media sharing button on our Website (e.g. Facebook or Whatsapp), the social network that has created the button will record that you have done this. Because of how cookies work, we cannot access these cookies, nor can the third parties access the data in cookies used by us. Some page of our Website may also contain embedded content, such as video content from YouTube, and these sites may set their own cookies.	Please see the instructions set out in ‘How to control or delete cookies’ below.

9.4 How to control or delete cookies

You have the right to choose whether or not to accept the cookies and we have explained how you can exercise this right below. However, please note that if you choose to refuse cookies you may not be able to use the full functionality of our Website.

Most browsers allow you to change your cookie settings. These settings will typically be found in the “options” or “preferences” menu of your browser. In order to understand these settings, the following links may be helpful, otherwise you should use the “Help” option in your browser for more details.

If you only want to limit third party advertising cookies, you can turn such cookies off by visiting the following links:

http://www.youronlinechoices.com/uk/
https://digitaladvertisingalliance.org/

Please bear in mind that there are many more companies listed on these sites than those that drop cookies via the Website.

9.5 Changes to this Cookie Policy

We will occasionally update this Cookie Policy to reflect changes in our practices and services. When we post changes to this Cookie Policy, we will revise the “Last Updated” data at the bottom of this Privacy and Cookie Policy, we will notify you by prominently posting notices of the changes on the Website. We recommend that you check this page from time to time to inform yourself of any changes in this Cookie Policy or any of our other policies.

9.6 Need More Information?

If you would like to find out more about cookies and their use of the Internet, you may find the following links useful:

http://www.allaboutcookies.org/
Microsoft Cookies guide

9.7 Cookies that have been set in the past

If you have disabled one or more cookies, we may still use information collected from cookies prior to your disabled preference being set, however, we will stop using the disabled cookie to collect any further information.

9.8 Contact Us

If you have any questions or comments about this cookies policy, or privacy matters generally, please contact us via email: legal@yourtravelbox.com.