How We Handle and Protect Your Data

1. Information We Collect

We collect information you provide directly (name, email, payment details), automatically (cookies, usage data), and from third parties (identity verification).

2. How We Use Your Information

- Process bookings and payments
- Verify identity (UK legal requirement)
- Communicate about your bookings
- Improve our services
- Comply with legal obligations

3. Data Sharing

We share data with:
- Property owners (for bookings)
- Payment processors (Stripe)
- Analytics providers (Google Analytics)
- Legal authorities (when required)

4. Data Security

All data encrypted in transit and at rest. Payment details processed securely via Stripe PCI-compliant infrastructure.

5. Your Rights (UK GDPR)

You have the right to:
- Access your data
- Correct inaccurate data
- Delete your data
- Export your data
- Object to processing

6. Cookies

We use essential cookies (login, security) and optional cookies (analytics, marketing). You can manage preferences via our cookie banner.

7. Data Retention

We retain data for 7 years for tax/legal compliance, or until you request deletion (where legally permissible).

8. International Transfers

Data may be processed outside the UK with appropriate safeguards (Standard Contractual Clauses).

9. Children's Privacy

Our services are not directed to anyone under 18. We do not knowingly collect data from children.

10. Contact

Data Protection Officer: dpo@travalsta.com
ICO Registration: [Your ICO Registration Number]