GDPR Compliance
Last updated: July 13, 2026
Our Commitment to Data Protection
We comply with the General Data Protection Regulation (GDPR) and are committed to protecting the personal data of individuals within the European Economic Area and the United Kingdom. This page outlines how we meet our obligations under GDPR and how you can exercise your data protection rights.
Legal Basis for Processing
We process personal data based on the following legal grounds:
- Consent: When you voluntarily provide information through inquiry forms or direct communication
- Contract Performance: When processing is necessary to fulfill travel service agreements
- Legitimate Interests: When we have a legitimate business reason that does not override your rights
- Legal Obligation: When required to comply with applicable laws and regulations
Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
Right to Access
You can request confirmation of whether we process your personal data and obtain a copy of the data we hold about you.
Right to Rectification
If your personal data is inaccurate or incomplete, you have the right to request corrections or updates.
Right to Erasure
You can request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restriction
You may request that we limit the processing of your personal data in specific situations, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.
Right to Object
You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
How to Exercise Your Rights
To exercise any of these rights, please submit a written request through our contact page or send correspondence to our office address. We will respond to your request within one month, though this period may be extended in complex cases.
Data Controller Information
The data controller responsible for your personal information is:
plum-cove
45 Deansgate
Manchester M3 2AY
United Kingdom
International Data Transfers
When arranging travel services in destinations outside the UK or EEA, your personal data may be transferred to service providers in those regions. We ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.
Supervisory Authority
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the United Kingdom.
Contact for Data Protection Inquiries
For questions about GDPR compliance or to exercise your data protection rights, please use the contact information provided on our website.