Privacy Policy

Last Updated: March 2026


Yule Travel Group CIC (Business Location: Bishopton, Scotland, PA7) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you book travel arrangements with us.


Our Contact Details: 


  • Registered Company: Yule Travel Group CIC 
  • Registered Address: 5 South Charlotte Street, Edinburgh, EH2 4AN
  • Email: hq@yuletravelgroup.co.uk 
  • Complaints Email: complaints@yuletravelgroup.co.uk 
  • Contact Number: +44 01505 800124


1. What Personal Data We Collect


We collect various types of personal data to process your travel bookings and provide our services. This may include:


  • Contact Information: Name, address, email addresses (e.g., hq@yuletravelgroup.co.uk, complaints@yuletravelgroup.co.uk), and telephone number (+44 01505 800124).
  • Identification Information: Passport details (names exactly as stated in the relevant passport), visa information, date of birth.
  • Payment Information: Details necessary to process payments for your bookings (though we do not typically store full payment card details directly).
  • Travel Preferences & Requirements: Details of any disabilities, dietary and religious requirements, special requests (e.g., cots or room location), and other information relevant to your travel arrangements. This may include "special category (sensitive) information".
  • Communication Records: Information from your interactions with us, including messages and communications exchanged via email, telephone, Facebook Messenger, and WhatsApp.
  • Booking History: Details of your past and current travel bookings.


2. How We Collect Your Personal Data


We collect personal data directly from you when you:


  • Make a booking enquiry or reservation with us (via phone, email, online forms, Facebook Messenger, or WhatsApp).
  • Provide information for special requests or accessibility needs.
  • Communicate with us for customer service or support through any of our communication channels, including social media platforms and messaging apps.


3. Our Lawful Basis for Processing Your Personal Data


We rely on the following lawful bases under GDPR to process your personal data:


  • Performance of a Contract: The primary reason we collect your data is to fulfill the travel arrangements you book with us. This includes processing your booking, arranging services with suppliers, and sending confirmations.
  • Legal Obligation: We may process your data to comply with legal obligations, such as sharing information with public authorities (e.g., customs or immigration) if required by them, or as required by law.
  • Legitimate Interests: We may process data for our legitimate business interests, provided these do not override your rights and freedoms. This might include improving our services or for administrative purposes, and maintaining records of communications.
  • Consent: For special category (sensitive) information (such as details of any disabilities, or dietary and religious requirements), we rely on your explicit consent to pass this information to relevant persons necessary for your travel arrangements. You provide this consent when making a booking.


4. How We Use Your Personal Data


We use your personal data for the following purposes:


  • To process and confirm your travel bookings with relevant suppliers (e.g., tour operator/airline/cruise company/accommodation company).
  • To pass on your booking information, including any special category data, to relevant suppliers or other persons necessary for the provision of your travel arrangements.
  • To communicate with you regarding your booking, including sending confirmations and updates, and to maintain records of communications via all channels, including Facebook Messenger and WhatsApp.
  • To manage your account and provide customer support.
  • To comply with legal and regulatory requirements, including sharing information with public authorities such as customs or immigration if required.
  • To pass certain information to security or credit checking companies.
  • If you are travelling to the United States, your information will be received by US Customs and Border Protection for the purposes of preventing and combating terrorism and other transnational serious crimes.


5. Sharing Your Personal Data


Your personal data will be shared with:


  • Suppliers: The relevant suppliers of your travel arrangements (e.g., tour operator/airline/cruise company/accommodation company) to fulfill your booking.
  • Internal Systems: Your client data is stored on our Yule Travel Group CIC Workspace..
  • Booking Systems: Your client data is stored on the Travelgenix booking platform and relevant PTS and Yule Travel Group CIC systems.
  • Communication Platforms: Please be aware that when you communicate with us via Facebook Messenger or WhatsApp, your data is also processed by Meta Platforms, Inc. (the parent company of Facebook and WhatsApp) according to their respective privacy policies. While we use these platforms for convenience, we advise against sharing highly sensitive personal or payment information through these channels unless absolutely necessary and secure.
  • Public Authorities: Customs or immigration if required by them, or as required by law.
  • Security/Credit Checking Companies: Certain information may be passed to these companies.


6. International Data Transfers


When you travel outside the European Economic Area (EEA), controls on data protection may not be as strong as the legal requirements in the United Kingdom. We will pass your information to relevant suppliers, whether in the EEA or not, as necessary to provide your booking. By making a booking, you consent to this information being passed on to the relevant persons. If we cannot pass this information to the relevant suppliers, we will be unable to provide your booking.


Please also note that data exchanged through Facebook and WhatsApp may be transferred to and stored in countries outside the EEA by Meta Platforms, Inc., in accordance with their privacy policies.


7. Data Security


We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage. Your payments handled through Protected Trust Services (PTS) are held in a secure and ring-fenced HSBC trust account that is managed by external trustees. Your data stored on Google Workspace Business is subject to Google's robust security measures. While we strive to protect your data across all channels, please be mindful of the inherent security characteristics of social media and messaging platforms.


8. Data Retention


We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.


9. Your Data Protection Rights


Under GDPR, you have the following rights regarding your personal data:


  • Right to be informed: About how your data is used.
  • Right of access: To your personal data.
  • Right to rectification: To correct inaccurate or incomplete data.
  • Right to erasure (to be forgotten): To request deletion of your data in certain circumstances.
  • Right to restrict processing: To limit how your data is used.
  • Right to data portability: To receive your data in a structured, commonly used, and machine-readable format.
  • Right to object: To certain types of processing, including direct marketing.
  • Rights in relation to automated decision-making and profiling.


To exercise any of these rights, please contact us at hq@yuletravelgroup.co.uk.


10. Complaints


If you have concerns about how we handle your personal data, please contact us first at complaints@yuletravelgroup.co.uk.


You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.


Information Commissioner's Office (ICO)


Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF


Helpline number: 0303 123 1113


ICO website: https://www.ico.org.uk