Privacy Policy

1. Introduction

Noncostrac ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website noncostrac.com and use our UK holiday planning services.

Please read this Privacy Policy carefully. By using our website and services, you consent to the practices described in this policy.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us, including:

• Name and contact information (email address, phone number, postal address)
• Travel preferences and requirements
• Payment information (processed securely through third-party providers)
• Communication preferences
• Any other information you choose to provide

2.2 Usage Information

We automatically collect certain information when you visit our website:

• IP address and device identifiers
• Browser type and version
• Pages visited and time spent on our site
• Referring website addresses
• Location data (with your consent)

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. See our Cookie Policy for detailed information about our use of cookies.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing and improving our holiday planning services
• Processing bookings and payments
• Communicating with you about your travel arrangements
• Sending marketing communications (with your consent)
• Personalizing your experience on our website
• Analyzing website usage to improve our services
• Complying with legal obligations
• Protecting against fraud and ensuring security

4. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your personal data based on the following legal grounds:

• Contract: To perform our services and fulfill our contractual obligations
• Consent: For marketing communications and optional services
• Legitimate Interest: To improve our services and ensure security
• Legal Obligation: To comply with applicable laws and regulations

5. Information Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: With trusted third parties who assist in providing our services (hotels, transport providers, payment processors)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Consent: With your explicit consent for specific purposes

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Limited access to personal information on a need-to-know basis
• Staff training on data protection practices

7. Your Rights

Under UK data protection law, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Correct any inaccurate or incomplete information
• Erasure: Request deletion of your personal data in certain circumstances
• Restriction: Limit how we process your personal data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdrawal of Consent: Withdraw consent for processing where applicable

To exercise these rights, please contact us at [email protected] or +44 20 7946 0958.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Factors affecting retention periods include:

• The nature of our relationship with you
• Legal and regulatory requirements
• Legitimate business purposes
• Your preferences and consent

9. International Transfers

Your personal information may be transferred to and processed in countries outside the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the UK government
• Standard contractual clauses approved by the UK authorities
• Binding corporate rules
• Other legally recognized transfer mechanisms

10. Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

12. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

13. Supervisory Authority

You have the right to lodge a complaint with the UK's supervisory authority: