Privacy Policy | TicketsTrolly

Introduction

This Privacy Policy explains how AL REZA TRAVEL LTD (trading as Tickets Trolly), company number 12962926, registered at 391 Great Horton Road, Bradford, England, BD7 3DH, collects, uses, stores, and protects your personal data when you use our website or services. We are committed to handling your personal information responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website or making a booking with us, you agree to the terms of this policy. If you have any questions about this policy, please contact us at info@ticketstrolly.com.

We may collect and process the following categories of personal information:

Identity information: Your full name, date of birth, nationality, passport or travel document details
Contact information: Email address, telephone number, postal address
Booking information: Travel dates, destinations, passenger details, special requirements (such as dietary needs or accessibility requirements), and preferences
Payment information: Billing address, payment card details (processed securely through our payment processors — we do not store full card details)
Technical information: IP address, browser type, operating system, referring URLs, and website usage data collected via cookies and similar technologies
Communications: Records of enquiries, correspondence, and any feedback you provide to us
Marketing preferences: Your preferences regarding receiving promotional communications from us

We use your personal data for the following purposes:

To process and manage your travel bookings, including passing relevant information to airlines, hotels, tour operators, and other suppliers as necessary to fulfil your booking
To communicate with you about your booking, including confirmations, updates, and any changes to your travel arrangements
To respond to your enquiries and provide customer support
To process payments and manage your account
To comply with our legal and regulatory obligations
To send you marketing communications where you have consented to receive them or where we have a legitimate interest in doing so
To improve our website and services through analysis of usage data
To prevent fraud and ensure the security of our systems

We may share your personal information with the following categories of recipients:

Travel suppliers: airlines, hotels, tour operators, transfer companies, and other travel service providers — as necessary to fulfil your booking
Consolidators: the wholesale travel consolidators through whom we source products and services
Payment processors: secure third-party payment service providers
Technology providers: website hosting, CRM, and booking system providers who process data on our behalf under contractual data processing agreements
Legal and regulatory authorities: where required by law, court order, or regulation, including customs and immigration authorities where required for international travel

We do not sell your personal data to third parties for marketing purposes.

International transfers: Some of the suppliers and service providers we use may be located outside the UK or the European Economic Area. Where personal data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

Data Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your information against unauthorised access, loss, alteration, or disclosure. These measures include encrypted data transmission, secure access controls, and regular security reviews. While we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure. If you have reason to believe that your interaction with us has been compromised, please contact us immediately at info@ticketstrolly.com.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, and reporting requirements. Booking records are typically retained for a minimum of six years following the completion of your travel, in line with UK legal requirements. Where you have consented to receive marketing communications, we will retain your contact details for this purpose until you withdraw your consent.

Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access: to request a copy of the personal data we hold about you
Right to rectification: to request correction of inaccurate or incomplete data
Right to erasure: to request deletion of your data where there is no compelling reason for its continued processing
Right to restrict processing: to request that we limit the processing of your data in certain circumstances
Right to data portability: to receive your data in a structured, commonly used format
Right to object: to object to processing based on legitimate interests or for direct marketing
Rights related to automated decision-making: not to be subject to decisions made solely by automated means that significantly affect you

To exercise any of these rights, please contact us at info@ticketstrolly.com. We will respond to your request within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version will always be available on our website. Where changes are material, we will notify you by email or by a prominent notice on our website.