Guardian Holidays Privacy and Cookies Policy

About this policy

• your name, date of birth, email address, postal address, phone number, mobile number;
• information about your device (such as the IP address, which is a numerical code to identify your device that can provide information about the country, region or city where you are based); and
• information relating to your personal circumstances and how you use our site.

Who we are and how to contact us

Collecting and using your personal data

• submit a request for a brochure or a call back;
• submit booking details for a specific holiday through our site;
• save your favourite holiday offers on our site;
• access our site, through cookies and other similar technology; and
• contact our customer service team.

• your contact details, such as name, address, email address; and
• booking details about the passengers, departure date, accommodation details and billing details.

• your IP address - a numerical code to identify your device and which can provide information about the country, region or city where you are based;
• your browsing history of the content you have visited on our site, including information on how you were referred to our site via another website; and
• details of your devices, for example, the unique device ID and browsers used to access our content.


• To provide you with our services, this includes referring you to the travel operators for booking and facilitating requests for brochures and call backs. In some cases, we will collect booking information for the holidays sold and operated by the travel operators through our site; 
• To calculate our commission with regard to the bookings that you have made when referred through our site;
• To send you marketing communications when we have your permission, or when permitted by law;
• Personalising our services for you and remembering your settings (for example, we use cookies so you can save your favourite holidays in the “Favourites” section), recognising you when you are on different devices and tailoring your emails based on the information provided to us;
• We also use online advertising to promote our own services. This means that you may be shown online advertising for our services when you are on other websites or social media platforms;
• For statistical purposes, such as analysing the performance of our site and to understand how visitors use it;
• To respond to your queries and resolve complaints;
• For security and fraud prevention and to ensure that our site is safe, secure and used in line with our terms of use; and
• To comply with applicable laws and regulations.

Legal grounds for using your personal data

• Consent: For example, where you have provided your consent to receive marketing emails from us. You can withdraw your marketing consent at any time, including by clicking on the “unsubscribe” link at the bottom of the email.
• Our legitimate interests: Where it is necessary for us to understand our customers, promote our services and operate our site efficiently for the provision of our services. For example, we will rely on our legitimate interest when we carry out marketing analysis to understand our customers to determine what marketing communications may be relevant to them. It is also in our legitimate interest to analyse what content has been viewed on our site, so that we can understand how it is used. 
• Compliance with law: In some cases, we may have a legal obligation to use or keep your personal data.

Using children’s personal data 

Security of your personal data

Who we share your personal data with

• Where you have requested a brochure or a call, we forward your contact details to the relevant travel operator. Where the travel operator has enabled us to do so, we will also collect and share the booking details. However, we do not process payment details. All payments are processed by third parties and we do not have access to your payment information. 
• We use a third party service provider, Vibe Systems Limited, to manage the Guardian Holidays website on our behalf. 
• We may reveal your personal data to any law enforcement agency, court, regulator, government authority or other organisation if we believe we need to do so to keep to a legal or regulatory obligation, or otherwise to protect our rights or the rights of anyone else. 
• We may reveal your personal data to any other organisation that buys, or to which we transfer all, or substantially all, of our assets and business. If this sale or transfer takes place, we will use reasonable efforts to try to make sure that the organisation we transfer your personal data to uses it in line with this privacy policy.


International data transfers



• We will only transfer your personal data to countries that have been found to provide an adequate level of protection for personal data. 
• We may also use specific approved contracts with our service providers that are based in countries outside the EEA. These contracts give your personal data the same protection it has in the EEA. 
• Where we use service providers in the United States, we may transfer personal data to them if they are part of the Privacy Shield scheme, which requires them to provide a similar level of protection of your personal data to what is required in the EEA.

Keeping your personal data

How we may contact you

Cookies and similar technology

• Essential -  These cookies are essential for the operation of our site. This includes cookies that we use so that you can stay logged into your account. If you set your browser to block these cookies, some parts of our site will not work.  
• Performance -  These cookies are used to count how often you visit our site and understand how you use our site. We use this information to measure the performance of our site, which allows us to get a better sense of how our users engage with our services and to improve our site so that users have a better experience.  For example, we collect information about which of our pages are most frequently visited, and by which types of users.We use Google analytics on our site to report site usage. To opt out, please click this link. Scorecard research (Comscore) is used on our site and you can take part in market research. Please click this link to opt out. 


• Functionality - These cookies are used to recognise you and remember your preferences or settings when you return to our site so that we can provide a more personalised experience for you. Some of these cookies are also set by third parties. 


• Advertising - These cookies are used to collect information about your visit to our site, the content you have viewed, the links you have followed and information about your browser, device and your IP address. We use this information to show you more relevant advertising on our other sites for you (this includes theguardian.com). We may also share this information with third parties for this purpose (you may  then also see more relevant advertising on other websites) or we may allow third parties to use their advertising cookies on our sites. This allows us to create groups of people with similar interests to make advertising shown on theguardian.com more relevant. Please click here to opt out.



Your rights with regard to your personal data

• If you would like to have a copy of the personal data we hold on you or if you think that we hold incorrect personal data about you, please write to the Data Protection Officer at Guardian News & Media Limited, Kings Place, 90 York Way, London N1 9GU or email [email protected]. We will deal with requests for copies of your personal data or for correction of your personal data within one month. If your request is complicated or if you have made a large number of requests, it may take us longer. We will let you know if we need longer than one month to respond. You will not have to pay a fee to obtain a copy of your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. 
• Where you have provided us with consent to use your personal data, you can withdraw this at any time. 
• Where applicable, you may also have a right to receive a machine-readable copy of your personal data. 
• You also have the right to ask us to delete your personal data or restrict how it is used. There may be exceptions to the right to erasure for specific legal reasons which, if applicable, we will set out for you in response to your request. Where applicable, you have the right to object to processing of your personal data for certain purposes, including marketing purposes.