Privacy Policy

Kuga Holidays ("we", "us", "our") is committed to protecting your personal data. This policy explains what we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who is responsible for your data

Kuga Holidays is the data controller for the personal data described in this policy. You can contact us about anything in this policy at [email protected].

2. What we collect

• Enquiry details — your name, email address, phone number and information about the trip you are interested in.
• Booking details — where you book through us: passport information, dates of birth, payment details, and details of other travellers in your party (which you must have their permission to share).
• Special category data — only where necessary and with your explicit consent, e.g. health or dietary information needed to arrange suitable travel.
• Technical data — limited information generated when you use this website (see our Cookie Policy).

3. How and why we use your data

• To respond to enquiries and provide quotes — necessary to take steps at your request before entering a contract.
• To make and manage bookings — necessary to perform our contract with you, including passing your details to the travel suppliers (airlines, hotels, tour operators, transfer companies) who provide your trip.
• To meet legal obligations — such as accounting and record-keeping requirements.
• To contact you about your booking — service messages are sent as part of the contract; marketing messages are only sent with your consent, and you can opt out at any time.

4. Who we share your data with

We share personal data only where necessary to arrange your travel: with the suppliers who provide your holiday, with payment providers, and with authorities where required by law (for example airline passenger data requirements). Depending on your destination, this can involve transferring data outside the UK. Where we do so, we take reasonable steps to ensure appropriate safeguards are in place, though some destination countries' authorities may require data under their own laws.

We never sell your personal data.

5. How long we keep it

Enquiry data is kept only as long as needed to deal with your enquiry and follow-ups. Booking data is kept for as long as needed to administer your travel and then for the period required by law (typically up to six years for accounting and legal claims purposes), after which it is securely deleted.

6. Your rights

Under UK GDPR you have the right to:

• access a copy of the personal data we hold about you;
• have inaccurate data corrected and, in certain circumstances, have data erased;
• restrict or object to certain processing, including direct marketing (an absolute right);
• data portability in certain circumstances;
• withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email [email protected]. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

7. Security

We use appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access, and we limit access to those who need it to arrange your travel.

8. Third-party links

Our website may link to third-party websites (for example WhatsApp, suppliers or government travel advice). We are not responsible for the privacy practices of those sites — please review their own policies.

9. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page with the date it was last updated.