Privacy & Data Protection Policy

BaGade Global Travels is committed to protecting your personal information and respecting your privacy. We are registered with the UK Information Commissioner’s Office (ICO) and operate in compliance with the UK GDPR regulations.

Home / Privacy & Data Protection

Last updated: 4th  August 2025

  1. Who We Are

Data Controller: BaGade Global Travels
Email:hello@bagadeglobaltravels.com
Phone: +447352168354
ICO Registration Number: ZA744089

We are registered with the Information Commissioner’s Office (ICO) and are committed to protecting your personal data in accordance with UK GDPR and the Data Protection Act 2018.

  1. What Personal Data We Collect

We collect the following types of personal data when you use our travel consultation services:

Data Type

Examples

Purpose

Contact Information

Name, email address, phone number

Service delivery, booking confirmations, communication

Travel Preferences

Destinations, budget, travel dates, interests

Providing personalized consultation advice

Booking Data

Appointment times, payment information, booking reference

Service scheduling and payment processing

Communication Records

Email exchanges, consultation recordings (if applicable)

Quality assurance, record keeping, service improvement

Technical Data

IP address, browser type, device information

Website functionality, security, analytics

  1. Legal Basis for Processing

We process your personal data based on the following legal grounds under UK GDPR:

  • Contract Performance: Processing necessary to provide our consultation services and fulfil our contractual obligations
  • Legitimate Interests: Improving our services, preventing fraud, and maintaining business records
  • Consent: Where you have specifically agreed to processing (e.g., marketing communications)
  • Legal Obligation: Compliance with tax, accounting, and other legal requirements
  1. How We Use Your Personal Data

We use your personal data for the following purposes:

  • Delivering travel consultation services
  • Processing payments and managing bookings
  • Communicating about your consultations and appointments
  • Providing customer support and handling inquiries
  • Improving our services and website functionality
  • Complying with legal and regulatory obligations
  • Sending marketing communications (only with your consent)
  1. Data Sharing and Third Parties

We may share your personal data with trusted third parties in the following circumstances:

 

Service Providers:

  • Payment Processors: Stripe, PayPal, or similar for secure payment handling
  • Booking Platforms: Setmore or similar for appointment scheduling
  • Email Services: Mailchimp, Gmail, or similar for communications
  • Cloud Storage: Google Drive, AWS, or similar for secure data storage
  • Website Analytics: Google Analytics for website performance monitoring

Data Transfers: Some third-party providers may be located outside the UK. We ensure appropriate safeguards are in place, including adequacy decisions or standard contractual clauses.

We will never: Sell, rent, or trade your personal data to third parties for marketing purposes without your explicit consent.

  1. Data Retention

We retain your personal data for the following periods:

Data Type

Retention Period

Reason

Consultation records and advice

2 years after last consultation

Service quality, potential follow-up consultations

Financial/payment records

6 years from end of tax year

HMRC requirements, VAT obligations

Marketing consent records

Until consent is withdrawn

Evidence of consent for marketing communications

Website analytics data

26 months (Google Analytics default)

Website improvement and performance analysis

Correspondence and support queries

3 years from last contact

Customer service history, dispute resolution

  1. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of Access

Request a copy of the personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete personal data.

Right to Erasure (‘Right to be Forgotten’)

Request deletion of your personal data in certain circumstances.

Right to Restrict Processing

Request limitation of processing in specific situations.

Right to Data Portability

Request your data in a structured, commonly used format.

Right to Object

Object to processing based on legitimate interests or for marketing purposes.

Right to Withdraw Consent

Withdraw consent for processing where consent is the legal basis.

How to Exercise Your Rights: Contact us using the details in Section 12. We will respond within one month of receiving your request.

  1. Cookies and Website Analytics

Our website uses cookies and similar technologies:

  • Essential Cookies: Required for website functionality and booking system
  • Analytics Cookies: Google Analytics to understand website usage (anonymized data)
  • Functional Cookies: Remember your preferences and improve user experience

You can control cookies through your browser settings. Disabling essential cookies may affect website functionality.

  1. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

  • Secure cloud storage with access controls
  • Regular security updates and monitoring
  • Staff training on data protection procedures
  • Limited access to personal data on a need-to-know basis

Data Breach Notification: In the unlikely event of a data breach affecting your personal data, we will notify you and the ICO within 72 hours where required by law.

  1. Children’s Privacy

Our services are intended for adults (18+). We do not knowingly collect personal data from children under 16 without parental consent. If you believe we have collected data from a child, please contact us immediately.

  1. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Significant changes will be communicated via email or website notice. The “Last Updated” date indicates when changes were made.

  1. Contact Us

For any questions about this Privacy Policy or to exercise your rights, contact us:

Data Protection Contact:
Email: hello@bagadeglobaltravels.com (Subject: Data Protection Inquiry)
Phone: +447352168354

This Privacy Policy applies to all personal data processing activities by Bagade Global Travels in connection with our travel consultation and arrangement services.

What Data We Collect

We may collect personal details including your name, email address, contact number, travel preferences, payment information, and documentation (e.g. for visa support).

How We Use Your Data

Your data is used solely for providing travel-related services such as consultation, booking, customer service, and CRM updates. We do not sell or share your data with third parties except in connection with your requested services.

Data Storage & Security

All personal data is securely stored using encrypted systems. Payments are processed through secure PCI-compliant gateways like Stripe, PayPal, and Flutterwave.

Your Rights

You have the right to request access to your data, correct inaccuracies, or request deletion of your information. To make a request, please contact us at admin@bagadeglobaltravels.com.

You’ll receive an automatic confirmation and booking summary once your enquiry is received. All client interactions are tracked securely through our CRM system to ensure timely follow-up and personalized service.”

ICO Registration: BaGade Global Travels is officially registered with the Information Commissioner’s Office (ICO) for data protection compliance in the United Kingdom.