We collect personal information in order to carry out our duties as a travel agent — specifically, to make and manage travel bookings on your behalf. Depending on the nature of your booking and the requirements of our suppliers, we may collect the following:

• Personal and contact details — title, full name, postal address, telephone number and email address
• Passport details — passport number, date of birth and nationality, where required by the airline or destination country
• Payment information — card number, security code, expiry date and cardholder name
• Travel preferences — frequent flyer numbers, car rental programme memberships and hotel room preferences, where applicable
• Health and dietary information — dietary requirements or health conditions relevant to your travel arrangements, where required by a supplier
• Website enquiries — information submitted via our website, including email address, travel preferences and how you heard about us
• Call recordings — telephone calls may be recorded for quality control and staff training purposes
• Technical data — IP address and device information collected automatically when you visit our website

We collect your personal data directly from you in most cases — through enquiries, bookings, phone calls and website interactions. We may also collect information from the following sources:

• When you make or enquire about a travel booking, by phone, email or through our website
• When you sign up to receive marketing communications or newsletters from us
• When you contact our customer service team
• When you enter a competition or register for a promotion

In some cases, we may receive your personal data from a third party — for example, where someone else makes a booking on your behalf as part of a group or family booking. In such cases, the person making the booking is responsible for ensuring that all other travellers have been informed and have consented to their data being shared with us.

To fulfil your booking

The primary purpose for which we collect and use your personal data is to complete and manage your travel booking. Without this information, we would be unable to process your reservation. This includes your contact details, passport information, payment details and any relevant health or dietary requirements.

Legitimate interest

We may also use your personal data for the following purposes, where we have a legitimate business interest in doing so:

• To send you booking confirmations, travel updates and itinerary information
• To manage your booking and communicate with you about your holiday
• To send you relevant marketing communications about our holidays and offers — you may opt out of these at any time by contacting us or following the unsubscribe link in any marketing email

With your consent

In certain circumstances, we will collect and use your data only with your explicit consent — for example, when you tick a box to receive our email newsletter. You may withdraw your consent at any time by contacting us at hi@gotobeach.co.uk.

We share your personal data only where necessary to fulfil your booking or comply with our legal obligations. The parties we may share your data with include:

• Travel suppliers — airlines, hotels, transfer providers, tour operators and other service providers involved in delivering your holiday
• Third-party service providers — companies that provide services on our behalf, such as payment processing, fraud prevention and business analytics
• Legal and regulatory authorities — where required by law, including customs and immigration authorities

Where your data is shared with suppliers or service providers outside the United Kingdom or European Economic Area, we ensure that appropriate safeguards are in place — such as UK adequacy regulations or Standard Contractual Clauses — to protect your information in accordance with applicable data protection law.

We retain personal data only for as long as is necessary for the purpose for which it was collected. In practice, this means:

• Booking and transaction records are retained for up to six years following your travel date, to protect against any contractual claims
• Marketing data is retained until you withdraw your consent or opt out
• All other data is retained in line with applicable legal and regulatory requirements

When your data is no longer required, it is securely deleted or anonymised.

Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

To exercise any of these rights, please contact us at hi@gotobeach.co.uk. We will respond within one calendar month of receiving your request.

When you visit our website, our servers automatically record certain technical information about your device and connection, including your IP address, browser type and the pages you visit. This data is used to monitor website performance, identify technical issues and understand how visitors use our site. It is not used to identify you personally.

GotoBeach uses cookies and similar tracking technologies on our website. Cookies are small text files stored on your device that help us provide a better user experience, analyse website traffic and deliver relevant advertising. We also use third-party analytics services such as Google Analytics, which may place their own cookies on your device.

For full details of how we use cookies and how you can manage your preferences, please read our Cookie Policy.

If you access our website from outside the United Kingdom, please be aware that your personal data may be transferred to, stored and processed in the UK. We take all reasonable steps to ensure that your information is handled securely and in accordance with this Privacy Policy, regardless of where it is processed.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you by email or by posting a notice on our website. The “Last Updated” date at the bottom of this page will always reflect the most recent version.

If you have any questions about this Privacy Policy or how we handle your personal data, please get in touch: