Privacy Policy

This Privacy Policy explains how Travelopedia Ltd, trading as Groovy Holidays ("we", "us", "our"), collects, uses, shares and protects your personal data when you use our website or make a booking, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Travelopedia Ltd (trading as Groovy Holidays), registered at 7 Mackenzie Street, Second Floor, Slough, SL1 1XQ, is the data controller for the personal data described in this policy. Questions about this policy or your data can be sent via our Contact Us page.

2. Information we collect

• Booking and identity data: name, date of birth, contact details, passport/ID details where required by a supplier, and traveller information for everyone on a booking.
• Payment data: card or payment details processed via our PCI-compliant payment provider; we do not store full card numbers on our own servers.
• Transaction and verification data: IP address, device and browser information, timestamps of key actions (quote viewed, Terms accepted, payment authorised), and order/session identifiers.
• Communications: emails, chat messages and call notes relating to your enquiry or booking.
• Usage data: pages visited, search filters used and general analytics collected via cookies (see our Cookie Preferences page).

3. How we use your information

• To create, manage, amend and fulfil your booking, and to communicate with you about it.
• To process payments and, where necessary, to detect, prevent and investigate fraud, unauthorised transactions and payment disputes.
• To meet legal, tax, regulatory and ATOL/CAA record-keeping obligations.
• To respond to enquiries, complaints and support requests.
• To send service messages (booking confirmations, balance reminders, travel updates) and, where you have consented, marketing communications.
• To improve our website and services through aggregated analytics.

4. Use of verification data in payment disputes

Where a payment dispute or chargeback is raised on a transaction, we may use the transaction and verification data described in clause 2 — including IP address, device information, timestamps of Terms acceptance and payment authorisation, and correspondence records — as evidence submitted to your card issuer or payment provider to establish that the transaction was authorised and the service was provided as agreed. This processing is carried out on the basis of our legitimate interest in defending against fraudulent or unfounded disputes and recovering sums properly owed to us.

5. Legal bases for processing

We process your data to perform our contract with you (fulfilling a booking), to comply with legal obligations (e.g. ATOL and tax records), for our legitimate interests (fraud prevention, dispute defence, service improvement), and, where applicable, on the basis of your consent (e.g. marketing emails, non- essential cookies).

6. Sharing your information

We share relevant booking data with the airlines, hotels, tour operators and other suppliers needed to deliver your holiday, with our payment processor to take payment, and with fraud-prevention and card-scheme services where a dispute arises. We do not sell your personal data to third parties.

7. International transfers

Some suppliers and service providers are located outside the UK. Where we transfer personal data internationally, we rely on adequacy decisions or appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

8. How long we keep your data

We retain booking, payment-verification and dispute-related records for as long as needed to service your booking, meet legal/ATOL record-keeping requirements (typically up to 6 years), and defend against payment disputes raised within card-scheme time limits. Marketing data is retained only while you remain subscribed.

9. Your rights

Subject to applicable law, you have the right to request access to, correction of, deletion of, or a portable copy of your personal data, to object to or restrict certain processing, and to withdraw consent for marketing at any time. Requests can be made via our Contact Us page. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

10. Cookies

We use essential, analytics and marketing cookies. You can manage your preferences at any time on our Cookie Preferences page.

11. Changes to this policy

We may update this policy periodically; material changes will be reflected by an updated revision date at the top of this page.