This policy is a starting point and should be reviewed by your legal/compliance team before publishing — it needs your company’s registration details and confirmed data retention periods filled in below.
Who we are
Somak Luxury Travel (“we”, “us”, “our”) is a UK-based tour operator specialising in tailor-made holidays. This policy explains what personal information we collect, how we use it, and your rights regarding that information.
Information we collect
We collect information when you:
- Submit a booking enquiry, including your name, email address, phone number, and travel preferences
- Make a payment towards a booking, including your billing name and address (your card details themselves are entered directly on our payment provider’s own secure page and never reach our systems)
- Request a brochure by email or post
- Contact us by phone, email, or through the website
- Browse our website, via cookies — see our Cookies Policy for details
How we use your information
We use your information to:
- Respond to your enquiries and provide quotes for holidays
- Process and manage your booking, including sharing necessary details with the hotels, airlines, and other suppliers involved in your trip
- Take payment for your booking
- Send you brochures or information you’ve requested
- Improve our website and services
We do not sell your personal information to third parties.
Sharing your information
To arrange your holiday, we share relevant booking details with the suppliers involved — hotels, airlines, ground handlers, and similar. We also use trusted third-party services to operate our business, including our payment provider (Opayo) for processing card payments.
Data retention
We keep your information for as long as necessary to fulfil the purposes described in this policy, and to meet our legal and accounting obligations.
Your rights
Under UK data protection law, you have the right to:
- Access the personal information we hold about you
- Ask us to correct inaccurate information
- Ask us to delete your information, in certain circumstances
- Object to or restrict how we use your information
To exercise any of these rights, please contact us using the details below.
Keeping your information secure
We take reasonable technical and organisational measures to protect your personal information, including using a secure, PCI-compliant payment provider for all card transactions so that card details never pass through our own servers.
Contact us
If you have any questions about this policy, or wish to exercise your rights, please contact us via our Contact page. If you’re unhappy with how we’ve handled your information, you also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.