1.1 We are SUMAK SUSTAINABLE TRAVEL LIMITED (referred to as “we”, “us” and “Sumak”) and we are committed to protecting and respecting your privacy when you are visiting any website maintained by us including without limitation the website at www.sumak-travel.org and our social networking pages (together the “Website”) or communicating electronically with us.
1.2 This policy, together with the Terms of Service (which can be found at the bottom of our website at www.sumak-travel.org) explains what types of personal and non-personal information we collect when you use the Website and the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By disclosing your personal information to us by using the Website or speaking to us over the telephone you consent to the collection, storage and processing of your personal information as stated in this policy.
1.3 Sumak uses the personal information we collect from you to provide our service to you. We will not rent, sell or share your personal information with any other company for its own marketing purposes without your consent except where mentioned in this policy.
1.4 For the purpose of the Data Protection Act 1998 (the Act), the data controller is SUMAK LTD. of The Hub, 34b York Way, London N1 9AB which is registered with the ICO with registered number […].
2. What personal information do we collect?
2.1 We may collect, store and use the following kinds of personal information:
(a) when you register as a user of the Website and/or make a reservation for a package, you will be asked to complete a form which will require you to provide your name, (personal or business) address, date of birth, (personal or business) email address, (mobile, personal or business) telephone number, credit card details (namely your credit card type and number, CVC code, expiration date and credit card holder name) and depending on the nature of the package, certain other information;
(b) when you contact us by email or telephone or through any contact form provided on the Website, we may ask you to provide some or all of the information set out in paragraph (a) above;
(c) we may collect, store and use information about your computer, mobile device or other item of hardware through which you access the Website and your visits to and use of the Website (including without limitation your IP address, geographical location, browser/platform type and version, Internet Service Provider, operating system, referral source/exit pages, length of visit, page views, website navigation and search terms that you use; and
(d) if you access the Website through a social networking profile, we may collect, store and use the details of that social networking profile and any information contained therein in order to populate any forms you might wish to complete on the Website.
2.2 We may also ask you to complete surveys and give feedback that we use for research purposes, although you do not have to respond to them.
2.3 If you choose to provide us with information on other people, you must ensure that they have consented to you providing us with such information and our use of such information in accordance with this policy. By providing us with information on any other person, we are entitled to assume that such other person has consented to you providing us with their information and to us contacting them.
2.4 We do not store any credit/debit card details.
3. How do we use personal information?
3.1 We may use your personal information for the following purposes:
(a) to manage and administer the Website;
(b) to improve your browsing experience by personalising the Website;
(c) to manage and administer your bookings on the Website;
(d) to enable you to use the Website;
(e) to send you newsletters and other relevant and targeted promotional communications;
(f) to send you email confirmations when you make or amend a booking through the Website or with us via telephone or email;
(g) to deal with enquiries, complaints and feedback from you and our service providers;
(h) to provide third parties with statistical anonymised information about our users;
(i) to send you emails offering you to take part in a survey and/or give feedback; and
(j) to analysis and improve the services offered on the Website.
4. When might we disclose personal information?
4.1 Except to the extent required by any applicable law or governmental or judicial body, we will only disclose your personal information to any hotel (or any other type of accommodation) and/or any other service provider with whom you have made a booking through the Website or via us by telephone or email. In addition, we may from time to time provide your information to third parties who will be involved in your holiday (for example, if you book an additional service through the Website, we may provider certain of your personal information to that service provider).
4.2 We will use all reasonable endeavours to ensure that any hotel or service provider to whom we disclose your confidential information is compliant with the Data Protection Act 1998 (or an equivalent standard) as regards its use and storage of your personal information. In particular, our contracts with hotels and service providers state that they may use personal information relating to our customers disclosed to them by us solely for the purposes of providing services to our customers and that they may not disclose or otherwise use any such personal information.
4.3 Where you have completed a survey or given feedback on an hotel or other service provider, we may publish some or all of the information you have provided to us in the survey and/or feedback on the Website and/or on our social networking profiles. Without your prior written consent, we will not publish any picture or likeness of you or your full name in connection with any comments or feedback.
5. Newsletters and other promotional communications
5.1 If you wish to subscribe to our newsletter or wish to receive other targeted and relevant promotional communications from us or other carefully chosen affiliates, we offer you the option to “opt-in” to this service. If you change your mind and wish to stop receiving any such communications, please either email us at firstname.lastname@example.org or click the “unsubscribe” link in any email from us.
6.1 Cookies are text files stored, either on a temporary or persistent basis on the hard drive of your computer. Cookies are used for authenticating, session tracking and maintaining specific information about the use and users of the Website (including user site preferences or the contents of electronic shopping carts).
6.2 The data collected by cookies is anonymous. You can delete all cookies that are already on your computer’s hard drive by searching for files with “cookie” in it and deleting them. In addition, if you want to stop cookies from being stored on your computer, you can edit your browser settings so that cookies are blocked. Unfortunately, if you block cookies you may not be able to use the full functionality of the Website. For more information about cookies, please visit: www.allaboutcookies.org
6.3 Web beacons consist of a small string of software code that represents a graphic image request on a Web page or email. There may or may not be a visible graphic image associated with the web beacon and often the image is designed to blend into the background of a Web page or email. Web beacons can be used for many purposes – including site traffic reporting, unique visitor counts, advertising auditing and reporting, and personalization. Web beacons used by www.Sumak.com collect only anonymous data.
6.4 In order to improve our Website and the services we offer you, we use (temporary and persistent) cookies, authorized third parties cookies, web beacons and/or other technologies to collect non-personally identifiable data. This non-personally identifiable data helps us to track browsing behavior, to create specific or tailor-made offers or advertisements, and to monitor and record the visits and use of the Website.
6.5 In order to understand how people use our website and for marketing analysis and quality improvement purposes, we (and/or third party service providers) may collect, record, process and use on an anonymous basis certain information (including the total number of transactions, viewed web pages, referring/exit pages, platform type, date/time stamp information and details like the number and location of mouse clicks on a given page, mouse movements, scrolling activity and the search words you use while being on and using the Website.
7. Where we store your personal data
7.2 All information you provide to us is stored on our secure servers.
7.3 Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted through our Website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
7.4 We transmit personal information using Secure Sockets Layer (SSL) software which encrypts information you input. Further, to the extent that we collect any credit card or bank account information from you, we will only reveal the last four digits of your credit card number when confirming an order. We maintain physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of personally identifiable customer information. Our security procedures mean that we may occasionally request proof of identity before we disclose personal information to you.
8. Links to Third Party websites
9. Your rights
The Act gives you the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can also exercise the right at any time by contacting us at email@example.com.
10. Access to information
The Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act. Any access request may be subject to a fee of £10 to meet our costs in providing you with details of the information we hold about you.