eZAY Travels and Tours Ltd (company no. 17394853), 181 Barcombe Avenue, Lambeth, London SW2 3BH, manager@ezaytravels.co.uk. We are registered with the Information Commissioner's Office.
| Purpose | Basis |
|---|---|
| Making and managing your booking, issuing tickets, refunds | Performance of a contract |
| Passing passenger data to the airline, Duffel or Faremine and to border authorities (Advance Passenger Information) | Contract; legal obligation |
| Fraud prevention and payment verification (with Stripe) | Legitimate interests; legal obligation |
| Assistance and special-meal requests | Your explicit consent (given when you enter them) |
| Marketing emails | Consent — you can opt out at any time |
| Accounting and tax records | Legal obligation |
The airline operating your flight; Duffel Technology Ltd or Faremine Ltd as ticketing intermediaries; Stripe Payments UK Ltd for payment and fraud screening; government and border authorities where required by law; our IT hosting providers (UK/EU or under UK adequacy/standard contractual clauses); WhatsApp/Meta where you choose to message us on WhatsApp; our insurers and professional advisers where a claim or dispute arises. Airlines and destination authorities may be outside the UK — transfers necessary to perform your booking are made under UK GDPR Article 49(1)(b).
Booking and correspondence records: 6 years after travel (tax and limitation periods). Passport images used for verification: deleted once verified. Marketing preferences: until you opt out. Website analytics: 26 months.
Access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent. Email manager@ezaytravels.co.uk; we respond within one month. You may complain to the ICO at ico.org.uk.
Data is stored on access-controlled systems with multi-factor authentication; card data never touches our servers. We will notify you and the ICO of any breach that affects your rights, as the law requires.
If you send us photos or tips for our area guides you confirm you own them and consent to us publishing them with credit. Do not send images that identify other people unless they have agreed.