Last updated: April 2025

Who We Are

GTL Holidays is a trading name of Go Together Luxe Ltd, operating as an agent of Hays Travel Limited, registered in England and Wales. We are the data controller for the personal information we collect in connection with our travel services.

If you have any questions about this policy or how we handle your data, please contact us at info@gtlholidays.co.uk. This privacy policy is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. When We Collect Personal Information

We collect personal information from you when you:

  • Submit an enquiry or start planning a trip through our website
  • Make a booking with us by phone, email or in person
  • Contact us for support or information
  • Sign up to our mailing list or marketing communications
  • Interact with us on social media
  • Visit our website (through cookies and analytics technologies)

2. Types of Personal Information We Collect

We collect and process the following categories of personal information:

  • Identity data: your name, date of birth, gender
  • Contact data: email address, telephone or mobile number, postal address
  • Travel data: destination preferences, group size, travel dates, budget, special requirements
  • Booking data: passport and identification details, payment reference information
  • Health data: any medical conditions or dietary requirements you disclose to enable us to plan your trip (special category data)
  • Technical data: IP address, browser type, pages visited, cookies and usage data collected automatically when you use our website
  • Communications: records of messages you send us by any channel

We do not collect or store payment card details. All card transactions are processed securely through our payment providers.

The table below sets out the purposes for which we use your personal information and the legal basis for doing so:

Purpose / Activity Type of data Lawful basis
Respond to enquiries and provide quotations Identity, Contact, Travel Legitimate interests; Pre-contractual steps
Plan, book and manage your travel arrangements Identity, Contact, Booking, Health Performance of a contract; Legal obligation
Communicate about your booking before, during and after travel Identity, Contact, Booking Performance of a contract
Send marketing communications Identity, Contact Consent; Legitimate interests (existing customers)
Improve our website and services Technical, Communications Legitimate interests
Comply with legal and regulatory obligations All categories as required Legal obligation
Prevent fraud and protect our systems Identity, Technical Legitimate interests; Legal obligation

4. How We Keep It Safe

We take the security of your personal data seriously. We have appropriate technical and organisational measures in place to prevent unauthorised access, disclosure, alteration or destruction of your personal information. These include secure server infrastructure, encrypted data transmission, access controls, and staff training on data protection obligations.

Whilst we take all reasonable steps to protect your information, no method of data transmission over the internet or electronic storage is completely secure. If you have reason to believe your personal data has been compromised, please contact us immediately at info@gtlholidays.co.uk.

5. Who We Share It With

We share your personal data only where necessary to provide our services or comply with legal obligations. Recipients may include:

  • Hays Travel Limited (as our principal travel company)
  • Airlines, hotels, cruise lines, transfer companies and other travel suppliers required to fulfil your booking
  • Our payment processing providers for secure transaction handling
  • ABTA, ATOL and other regulatory or accreditation bodies
  • Government and border control agencies as required by law
  • Our trusted technology and IT service providers who support our business operations

We do not sell or rent your personal information to third parties for their own marketing purposes. Where we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

6. Marketing Communications

We may send you marketing communications about our holidays, offers and services. We will only do this where you have given us consent to do so, or where we have a legitimate interest as an existing customer. You can opt out of marketing communications at any time by:

Opting out of marketing will not affect our ability to communicate with you in connection with an active booking.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.

  • Booking data: retained for 6 years after the completion of your booking in accordance with standard accounting and legal requirements
  • Mailing list data: retained until you unsubscribe
  • Enquiry data (no booking made): deleted after 12 months
  • Technical data: retained for up to 26 months in line with analytics industry standards

After the applicable retention period, we will securely delete or anonymise your personal data.

8. Your Rights and Choices

Under UK GDPR you have the following rights in relation to your personal data:

  • Right of access — to request a copy of the personal data we hold about you
  • Right to rectification — to request correction of inaccurate or incomplete data
  • Right to erasure — to request deletion of your personal data in certain circumstances
  • Right to restrict processing — to request that we limit how we use your data
  • Right to data portability — to receive your data in a structured, commonly used format
  • Right to object — to object to processing based on legitimate interests or for direct marketing
  • Rights related to automated decision-making — we do not make solely automated decisions that significantly affect you

To exercise any of these rights, please contact us at info@gtlholidays.co.uk. We will respond to all requests within one calendar month.

Cookies

Our website uses cookies — small text files placed on your device — to improve your browsing experience. We use the following types of cookies:

  • Essential cookies — necessary for the website to function correctly; these cannot be disabled
  • Analytical cookies — help us understand how visitors use our site so we can improve it (e.g. Google Analytics)
  • Marketing cookies — used to deliver relevant advertisements on third-party platforms

You can control and delete cookies through your browser settings. Disabling certain cookies may affect the functionality of some parts of our website.

9. Contact Us

If you have any questions, concerns or requests regarding this privacy policy or the way we handle your personal data, please contact our data protection lead:

GTL Holidays (Go Together Luxe Ltd)
Email: info@gtlholidays.co.uk
Tel: 0163 455 7122

10. Making a Complaint

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data in accordance with UK GDPR. The ICO can be contacted at:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk

We would however appreciate the chance to address your concerns before you approach the ICO, so please contact us in the first instance.