This privacy notice describes how The Gift Company (“we”/”us”/”our”) will collect and handle personal information that Is  collected from you, the data subject, in the course of its business and in accordance with the European General Data Protection Regulation (GDPR) 2018. 

“Personal Information” is information that identifies you as an individual.  

By providing your personal information to us, you agree to this privacy notice.

In order for us to provide any accommodation or accommodation quotes and to administer any breaks or queries , we may need to share your personal data with hotels, marketers and other travel partner participants.

For the purposes of the GDPR Act the Data Controller is registered at Travel Saver Options Ltd Unit E, Bridlington Business Center, Enterprise Way, Bridlington, YO16 4SF

The Gift Company may be contacted by calling 0808 296 0760

What data do we collect?
The personal data that we may collect may include

• Your name, postal address, phone number or other contact details.
• Bank account or payment card details.

Where we need to collect any data that is a special category of personal data, we will do so with your explicit consent.

Where you have provided your consent, you may withdraw this at any time. However, should you exercise this right, we may not be able to fulfil the holiday services requested by you, your holiday may be cancelled, or you may be unable to make a travel request.  
Should you wish to withdraw your consent to the processing of your personal data, please contact us at the address above.

How we may collect your personal data
We may collect your personal data from you engaging with us via social media, via third party sources of data collection or (with your consent) having your information provided to us to supply you with the benefit of our services due to using products of associated companies. 

How we may use your personal data  
We will use your personal data for our legitimate business interests and on the legal basis for the purpose of providing you with the provision of our services which include arranging and providing holidays and administration of holidays to which you are a party. We may also use your data in assisting you with any of your travel or booking requirements.

In some cases our company may use your information to supply you with information about special offers, upgrades, discounts and promotions via telephone, email, social media or text message. 

We will only process your personal data on this basis and for the purpose of our and your legitimate interests, which are to provide you with the most suitable travel services.  

We do not sell or supply any personal data to any third party and will disclose personal data only when required by law.

We also do not use personal data for any form of automated processing or decision making regarding any of our products and services.

Who we may share your information with.
In the performance of our legitimate business interests and in the provision of our services to you, in arranging travel based reservations for you, we may need to disclose your personal data to hotels, marketers, flight companies, transfer companies or other travel agencies including other travel related companies dependant on what elements of travel are booked. 

Retention of your personal data
We will only keep your data for as long as is necessary based on the original purpose for which it was collected or where we are obliged to do so due to legal or regulatory reasons.  

Your rights as a data subject
The GDPR confers a number of rights on you as the data subject. We have listed these rights below as they appear in the GDPR.

• The right of access: you have a right to access the personal data that we hold about you so that you may verify the lawfulness of the processing of your data that we may conduct. To request a copy of the personal data that we hold, please contact us at the address above.
• The right to rectification: if the personal information that we hold about you is incorrect, you may ask us to amend it.
• The right to erasure: you may request that the personal data that we hold about you be deleted or removed where there is no longer any reason for continued processing of your personal data. For instance, you no longer wish us to provide our services to you.
• The right to restrict processing: you have the right to ‘block’ the processing of the personal data that we hold where you contest the accuracy of the personal data we hold.
  You may also request that we restrict processing where you object to our legitimate interests as the basis of the processing of your personal data or you believe continued processing to be unlawful.
• The right to data portability: you have the right, on request, to ask us to provide to you a copy of the personal data that you have previously supplied to us. For instance, you no longer wish us to provide our services to you and you wish to transfer to a new service provider.
• The right to object: you have the right to object to the processing of your personal data by us where you can demonstrate that to do so would be detrimental to your interests.
  You may also object and request that we do not process your personal data for any purposes of direct marketing.

Your right to complain

In the event that you are not satisfied with our use of your personal data or you believe that we have not upheld your rights as a data subject, please contact us at the address above. We will acknowledge any complaint as soon as received and our aim is to resolve any complaint and to provide you with a resolution within one month.