We take the security of your data seriously, as such:
Contact form – When you submit an enquiry via our contact form, we ask for your name, email address, company name and details of your enquiry. This is so that we can best respond to your enquiry and have a point of contact to respond to.
Travel Emails – When you sign up to our travel emails, we ask for your name and email address. This is so that we can send you our travel emails. On each email we send you, an unsubscribe option is included.
Group Tour quote request – When you request a quote for a customized private tour, we ask for your name, email address, telephone number, company name and details of your requirements. This is so that we can provide you with a response to your request.
Portal/tour registration – When you register on a tour, we offer you the option to create a portal account using your email address and a secure password. Your email address, name, contact details and any other registration information are stored in our bookings platform Arlo (Arlo.co). Your password is encrypted and can not be accessed by GeoCultura. This portal registration allows you to manage your tour booking, view invoices and update contact and personal details. The portal is hosted by Arlo.co.
Card payments – When you register and choose to pay for a tour by credit card, during the checkout process your payment card details will be requested. All card payments are made directly to a fully PCI compliant third-party card processing company Stripe (stripe.com). GeoCultura does not store or receive any card details.
We collect data due to a “Legitimate interest”; the personal data is collected in response to a request for a service made, in order to allow us to respond and provide any follow up support required. Consent is always requested when you submit personal data and you can withdraw consent at any time.
We take the security of your data seriously. Your data is stored in GDPR compliant secure third-party provider systems, including email, e-marketing software and a bookings platform. All data resides in UK data centres with controls in place to prevent unauthorised access.
Any passwords you setup for accessing our portal are encrypted and cannot be accessed or reset by anyone other the owner of the email address associated with that account. It is therefore important that you never disclose your password to anyone and ensure that your email account isn’t compromised. GeoCultura will never ask for your account password.
By default, any data not managed by you within your portal account is retained for 3 years, unless there is a legal requirement to keep data longer than this period. You have the right to have your data removed prior to this and you can request this (see Your Rights) at any point.
The right of access – You have the right to see all of the data we hold about you. You can request a copy of your data at any time by contacting us on any of the methods detailed in the contact section.
The right to rectification – If any of the information we hold is incomplete or inaccurate, you have the right to request that we correct this. You can also update your data via your portal login, if you have registered an account with us. To request a copy of your data held by GeoCultura, please contact us using any of the methods detailed in the contact section.
The right to be forgotten – You can withdraw your consent at any time and request that we remove all of your data. To request this please contact us using any of the methods detailed in the contact section. Please note that should you be registered to attend a future event with us, requesting deletion of all of your data will only be possible if your booking is cancelled, as we will be unable to deliver our service safely without this.
The right to restrict processing – You have the right to request that we no longer utilize your data. However, this may impede our ability to deliver the requested service if your data relates to this service provision. To restrict the processing of your data, please contact us using any of the methods detailed in the contact section.
The right to data portability – You have the right to reuse your personal data across different services. You can currently request your data and the required format and we will do our best to support this.
The right to object – We take your data security seriously. However, if you feel that we have come up short you have the right to complain. You can make a complaint using any of the contact points as detailed in the contact section. If you are not satisfied with our response, or believe we are acting unlawfully, you have the right to complain to the Information Commissioner’s Office (ICO), details of which can be found on their website (www.ico.org.uk).
GeoCultura Ltd is registered in England and Wales under registration number 12694449 and our registered office is at Elsley Court, 20–22 Great Titchfield Street, London W1W 8BE, UK.