1. Introduction
Welcome to Gallica Travel. We respect your privacy and are committed to protecting your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and travel planning services.
2. Legal Basis for Processing
We only process your personal data when we have a valid legal basis to do so:
- Contract Performance: To provide the travel planning services you have requested.
- Consent: Where you have given us clear permission, such as for marketing communications.
- Legitimate Interests: To improve our platform, ensure security, and understand how our services are used.
- Legal Obligation: To comply with applicable laws and regulations.
3. Information We Collect
We collect information that identifies you or can be used to identify you. This includes:
Account & Profile Information
When you register, we collect your name, email address, and date of birth. This helps us personalise your experience and manage your account.
Authentication Data
We use Firebase Authentication to secure your account. If you use Google Sign-In, we receive a unique identifier and your profile name from Google.
Travel Preferences & Itineraries
We store the details you provide to generate plans, including destinations, trip dates, budgets, interests, and any fixed activities or transport anchors.
Usage Analytics & Device Info
We automatically collect technical data such as your IP address, browser type, device information, and details on how you interact with our platform to improve performance.
4. Cookies & Tracking
We use cookies and similar tracking technologies to improve your experience and analyse site traffic. For detailed information on the types of cookies we use and how you can manage them, please refer to our Cookie Policy.
5. Marketing Communications
If you opt in during signup or in your account settings, we may send you marketing emails about new features, travel tips, and exclusive offers.
- Control: You can update your marketing preferences at any time in your Account Settings.
- Unsubscribe: Every marketing email includes a clear "unsubscribe" link.
Please note that transactional or service-related emails (such as account verification, password resets, or important security notices) may still be sent even if you opt out of marketing communications.
6. AI Processing & Providers
Gallica Travel uses advanced Artificial Intelligence to craft your itineraries.
Data Minimisation: Your trip requirements (destination, interests, etc.) are securely processed by third-party AI providers. Gallica Travel minimises the personal data shared with these providers during the generation process.
Automated Decisions: Our AI systems are used solely to assist in the creation of travel plans. We do not make legally significant automated decisions about our users.
User Responsibility: While our AI is highly capable, itineraries may occasionally contain inaccuracies regarding opening times or local conditions. You are responsible for independently verifying all travel details before booking or travelling.
7. Infrastructure & Security
Your data is stored and managed using Google Cloud and Firebase infrastructure. We employ industry-standard encryption and security protocols to protect your information from unauthorised access.
8. International Data Transfers
As we use global cloud providers like Google, your information may be processed in data centres located outside of the UK. We ensure that such transfers are protected by standard contractual clauses and appropriate safeguards to maintain your privacy rights.
9. Data Retention & Deletion
We retain your personal data only for as long as your account is active or as needed to provide you with our services.
Secure Deletion: When you use the "Delete Account" feature, we immediately initiate a process to remove your profile and associated itineraries from our active databases. While removal from our active systems occurs within a reasonable timeframe, please note that some metadata may temporarily persist in encrypted backups before being permanently overwritten.
10. Your Rights
Under UK GDPR, you have the following rights regarding your data:
- Access & Export: The right to request a copy of the data we hold about you.
- Correction: The right to fix inaccurate or incomplete information.
- Deletion: The right to request the removal of your data (Right to be Forgotten).
- Withdrawal of Consent: The right to change your mind about marketing or data processing.
To exercise any of these rights, please contact us at: contact@gallicatravel.com
11. Children's Privacy
Gallica Travel is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected information from a child under 16 without verification of parental consent, we will take steps to remove that information promptly.
12. Contact
If you have any questions or concerns regarding this Privacy Policy or our data practices, please contact our privacy team at:
contact@gallicatravel.com