Policy key definitions:
- "I", "our", "us", or "we" refer to the business, Brightsun Travel UK Ltd or any of its subsidiary trading names
- "you", ""your", the user" refer to the person(s) using this website.
- GDPR means General Data Protection Act.
- PECR means Privacy & Electronic Communications Regulation.
- ICO means Information Commissioner's Office.
- Cookies mean small files stored on a user’s computer or device.
Processing of your personal data
Under the GDPR (General Data Protection Regulation) we control and / or process any personal information about you electronically using the following lawful bases. We are registered with the ICO under the Data Protection Register.
If, as determined by us, the lawful basis upon which we process your personal information changes, we will notify you about the change and any new lawful basis to be used if required. We shall stop processing your personal information if the lawful basis used is no longer relevant.
Your individual rights
Under the GDPR your rights are as follows. You can read more about your rights in details here;
- the right to be informed;
- the right of access;
- the right to rectification;
- the right to erasure;
- the right to restrict processing;
- the right to data portability;
- the right to object; and
- the right not to be subject to automated decision-making including profiling.
You also have the right to complain to the ICO [www.ico.org.uk] if you feel there is a problem with the way we are handling your data.
We handle subject access requests in accordance with the GDPR.
Personal Information That We Collect
Personal information is information that relates to an identifiable natural person. An identifiable natural person is someone that can be identified both directly and indirectly by their name, location data, identification number or by factors specific to the social, cultural, physiological, genetic, mental or economic identity of the natural person. Personal Information does not include any information that has been anonymised so that it can no longer be used to identify a natural person.
When you use our travel services, we do collect some personal information from you and any devices you use. Personal identifying information can include your name, telephone numbers, address, email addresses and financial information such as card details (in connection with online transactions). Provision of any other personal information is voluntary on your account, but it may become necessary in order to use some of our services, such as when you complete a transaction online.
We automatically collect information about your interaction with our website and communications with us. This is the information that we receive via devices you use when you access our website. This information may include a Device ID or unique identifier, a unique device token, a device type or an ID for advertising. We may also receive location information from your mobile device, but most mobile devices now allow you to disable the use of your location settings on internet browsers. We also collect computer and connection information such as your page view statistics, referral URL, browsing history, IP address and web log information.
Personal Information We Collect From Other Sources
We add on the personal information we collect with other information collected from third parties, and implement it to your account information. For example, we collect and use demographic information that is available in credit check information, additional contact information, information from credit bureaus and an applicable jurisdiction, which is allowed by some applicable national laws.
We allow you to share pages and information from our website on social media sites, and these social media sites may give us automatic access to personal information they have retained from you, for example, content liked by you or viewed by you, and information about advertisements that you may have been shown or clicked on.
If you allow us access to websites with video content, then you agree that we can share your video viewing information from social media sites for at least 2 years, unless you withdraw any connections or authorisation of the social media sites.
You are in control of the personal information that you allow us to have access to on the privacy settings included on social media sites, and also by the permission you give us when you allow us access to this personal information that is retained by the social media site about you.
How We Use the Personal Information We Collect From You
We use your personal information for many business purposes and for different legal reasons. Below is a summary of how we may use your information and for which legal bases.
- To provide you with our travel services and enable servicing of the travel booking
- To fulfil a binding contract with you or to comply with our legal obligations
- To provide account management and payment processing
- To improve, operate and measure our services
- To keep our services safe and secure
- To customise any site content
- To contact you regarding your account
- To resolve any disputes
- To troubleshoot any problems associated with your account
- To collect any dues
If we contact you for any purposes outlined above, it will be via telephone, email, SMS or post.
- We will use location information to provide location based services (i.e. search results and advertising)
- We may also use your personal information to detect, prevent, alleviate and investigate security breaches, fraud and other illegal or prohibited activities
- Personal information is used to pursue some of our legitimate interests (your rights and freedom does not outweigh these interests). We have controls in place to balance your rights with our interests.
Some of our legitimate interests include:
- Improving our services, for example reviewing any information which is associated with crashed or stalled site pages experienced by users, allowing us to fix any issues and ensure you have a better online experience with us.
- Personalising and improving our advertising methods based on our preferences on advertising.
- Contacting you with discount offers and special promotions or surveys as authorised by law.
- Contacting you about any current or public policy events which are related to your ability to use our website and services (this may include letter writing or other public campaigns related to public policy).
- Delivering specifically targeted marketing, promotional deals and service updates that are based on your communication preferences.
- Analysing our open and click rates on email marketing campaigns such as newsletters.
- Monitoring and improving the data and information security of our website
With your consent, we may also use your personal information to provide you with marketing via emails, SMS and telephone calls, provide you with marketing from other third parties, customise any third party advertising that may be visible to you on third party websites, user your geo-location to provide you with location based services and use any sensitive personal information to make transactions smoother.
Please note you have the right to withdraw your consent at any time.
If you no longer want to receive any marketing communications from us, you have the option to unsubscribe via the link at the bottom of any emails you receive. From there you can change your communication preferences.
We do not sell or disclose any personal information to third parties for their own marketing purposes without asking for your consent.
We do not allow any third parties to collect or track personal information from our sites for their own advertising purposes without content.
Ways You Can Access, Control and Correct Your Personal Information
Brightsun Travel will honour any rights you may have to access, change or delete your personal information stored by us. To request access and to find out if any fees apply, if permitted by applicable laws, please click on the contact us page below and follow the necessary instructions. In cases where you have a right to request access or request the modification or deletion of any personal information, we can withhold the access or decline to change or delete your personal information in certain cases, in accordance with applicable laws.
How We Might Share Your Personal Information
We may disclose personal information to financial institution partners, third party service providers, law enforcement or government agencies and credit agencies or bureaus authorised by law for the following purposes:
- To provide joint services and content (i.e. customer support and transactions)
- To help us detect, prevent and alleviate any potential fraud or illegal acts and violations of our data security
- To send you personalised advertising and marketing communications
- To improve products, services, tools and marketing
- To help us provide our customer services and payment processing services
- To offer you financial products
- To comply with our legal requirements
- To respond to claims that any content violates the rights of others
- To protect an individual’s rights and safety
- In response to legal process relating to criminal investigations or alleged illegal activity (we only disclose information deemed relevant to the investigation with details such as your name, address, telephone number, user ID history, IP address, email address and any fraud complaints)
- For information on missed or late payments which may be implemented onto your credit report
- In order to prevent any financial loss or imminent physical harm
- To report any suspected illegal activity
Change of Ownership
In the unlikely event that we are subject to merge with another company or change of ownership, we may share information with them (in accordance with international privacy standards). We will require that the new organisation will follow this privacy notice to respect any personal information given. If we handle your personal information for any purposes not included in this policy, you will receive a notification prior to the processing of this information for the new purposes.
How Long We Keep Your Personal Information
How long we keep any personal information can vary depending on the context of the service we provide, and also on our legal obligations. The below factors influence the period in which your personal information is retained:
- How long the personal information is needed to provide our services
- Improving and maintaining the performance of our products
- Keeping our website and systems secure
- Maintaining any appropriate financial and business records
- A shortened data retention time will apply for sensitive personal information
- If you have provided consent for a longer period
- We are subject to contractual or legal obligations to retain personal information, for example mandatory data retention laws and government orders to preserve data which is relevant to any investigations
- Personal information may be retained for litigation purposes
The above are general factors that establish a baseline for our data retention.
After these exceptions, it will be no longer necessary for us to keep your personal information. We will dispose of the data securely according to our deletion and data policies.
Some cookies are required to enjoy and use the full functionality of this website.