1. Who We Are (Data Controller)

This Privacy Policy is issued by Nelson London Ventures Limited, trading as NCL Tours (“we”, “us”, “our”). We are the data controller for the personal data we collect and process. Where we share data with suppliers, they may act as independent controllers or processors depending on the service.

2. Personal Data We Collect

2.1 Information you provide

• names, titles, dates of birth and contact details;
• booking details, travel preferences and special requirements;
• passport details and nationality where required for travel;
• payment-related information (processed via third-party payment providers);
• emergency contact details.

2.2 Information collected automatically

• IP address and approximate location derived from IP;
• browser type/version, device type, operating system;
• pages visited, clickstream/navigation data, dates and times of visits.

2.3 Special category data

If you provide information about health, disability, dietary needs or accessibility requirements, this may constitute special category data. We only process it where necessary to arrange your travel and support you appropriately, and we apply heightened safeguards.

3. How We Use Your Personal Data

• to respond to enquiries and provide quotations;
• to process bookings and arrange travel services with suppliers;
• to communicate about itineraries, changes, and operational updates;
• to provide customer support and handle complaints;
• to process payments and manage accounts;
• to comply with legal, regulatory and contractual obligations;
• to improve our services, systems, website performance and security;
• to prevent fraud and protect our business and customers;
• to send marketing communications where permitted and/or consented.

4. Lawful Bases for Processing

We process personal data under one or more lawful bases, including: performance of a contract, compliance with a legal obligation, legitimate interests (balanced against your rights), consent (for example, certain marketing), and vital interests where an emergency requires it.

5. Who We Share Your Data With

We share personal data only where necessary to provide services or comply with obligations. This may include airlines, hotels, transport providers, tour operators, booking platforms, payment providers, IT service providers, and relevant authorities (e.g. border control).

We may also share information with dispute resolution bodies and regulators where required (for example, in complaint handling).

6. International Transfers

Travel arrangements often involve suppliers outside the UK. When we transfer data internationally, we take steps to ensure appropriate safeguards are in place, such as contractual protections and supplier due diligence.

7. Data Security

We apply technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. Access is limited to authorised personnel and trusted suppliers who require it.

8. Data Retention

We retain personal data only as long as necessary for the purposes described, including legal, regulatory, accounting and reporting obligations. When data is no longer required, it is securely deleted or anonymised.

9. Your Rights

• access your personal data;
• request correction of inaccurate/incomplete data;
• request erasure in certain circumstances;
• restrict processing;
• object to processing;
• data portability (where applicable);
• withdraw consent at any time where processing is based on consent.

To exercise your rights, contact us using the details on our website and booking documentation. Some rights are subject to legal limitations.

10. Marketing

We may send marketing communications where you have consented or where permitted by law. You can opt out at any time by using the unsubscribe option (where provided) or by contacting us directly.

11. Cookies

We use cookies and similar technologies to operate our website and improve performance and user experience. Please refer to our Cookie Policy for further details.

12. Complaints

If you have concerns about how we handle your personal data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

13. Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will be published on our website.

Last updated: