Cookie Policy of bluebaytravel.co.uk
This document informs Users about the technologies that help this Website to achieve the purposes described below. Such technologies allow the Owner to access and store information (for example by using a Cookie) or use resources (for example by running a script) on a User’s device as they interact with this Website.
For simplicity, all such technologies are defined as "Trackers" within this document – unless there is a reason to differentiate.
For example, while Cookies can be used on both web and mobile browsers, it would be inaccurate to talk about Cookies in the context of mobile apps as they are a browser-based Tracker. For this reason, within this document, the term Cookies is only used where it is specifically meant to indicate that particular type of Tracker.
Some of the purposes for which Trackers are used may also require the User's consent. Whenever consent is given, it can be freely withdrawn at any time following the instructions provided in this document.
This Website uses Trackers managed directly by the Owner (so-called “first-party” Trackers) and Trackers that enable services provided by a third-party (so-called “third-party” Trackers). Unless otherwise specified within this document, third-party providers may access the Trackers managed by them.
The validity and expiration periods of Cookies and other similar Trackers may vary depending on the lifetime set by the Owner or the relevant provider. Some of them expire upon termination of the User’s browsing session.
In addition to what’s specified in the descriptions within each of the categories below, Users may find more precise and updated information regarding lifetime specification as well as any other relevant information — such as the presence of other Trackers — in the linked privacy policies of the respective third-party providers or by contacting the Owner.
Activities strictly necessary for the operation of this Website and delivery of the Service
This Website uses so-called “technical” Cookies and other similar Trackers to carry out activities that are strictly necessary for the operation or delivery of the Service.
First-party Trackers
Storage duration:
- bluebay_cookie_consent: 1 year
Third-party Trackers
-
Traffic optimization and distribution
This type of service allows this Website to distribute their content using servers located across different countries and to optimize their performance.
Which Personal Data are processed depends on the characteristics and the way these services are implemented. Their function is to filter communications between this Website and the User's browser.
Considering the widespread distribution of this system, it is difficult to determine the locations to which the contents that may contain Personal Information of the User are transferred.
Cloudflare (Cloudflare)
Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc.
The way Cloudflare is integrated means that it filters all the traffic through this Website, i.e., communication between this Website and the User's browser, while also allowing analytical data from this Website to be collected.
Personal Data processed: Cookies and various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy.
-
Spam and bots protection
This type of service analyzes the traffic of this Website, potentially containing Users' Personal Data, with the purpose of filtering it from unwanted parts of traffic, messages and content that are recognized as spam or protecting it from malicious bots activities.
Cloudflare Bot Management (Cloudflare, Inc.)
Cloudflare Bot Management is a malicious bot protection and management service provided by Cloudflare, Inc.
Personal Data processed: app information, Application opens, browser information, browsing history, city, clicks, country, county, custom events, device information, device logs, geography/region, interaction events, IP address, keypress events, language, latitude (of city), launches, longitude (of city), metro area, motion sensor events, mouse movements, number of sessions, operating systems, page events, page views, province, scroll position, scroll-to-page interactions, search history, session duration, session statistics, state, touch events, Trackers, Usage Data, video views and ZIP/Postal code.
Place of processing: United States – Privacy Policy.
Storage duration:
- __cf_bm: 3 seconds
- __cfruid: duration of the session
- cf_ob_info: 3 seconds
- cf_use_ob: 3 seconds
- cfmrk_cic: 3 months
Other activities involving the use of Trackers
Functionality
This Website uses Trackers to enable basic interactions and functionalities, allowing Users to access selected features of the Service and facilitating the User's communication with the Owner.
-
Contacting the User
Mailing list or newsletter (this Website)
By registering on the mailing list or for the newsletter, the User’s email address will be added to the contact list of those who may receive email messages containing information of commercial or promotional nature concerning this Website. Your email address might also be added to this list as a result of signing up to this Website or after making a purchase.
Personal Data processed: country, email address, first name, last name, phone number, Trackers, Usage Data and ZIP/Postal code.
-
Interaction with live chat platforms
This type of service allows Users to interact with third-party live chat platforms directly from the pages of this Website, for contacting and being contacted by this Website support service.
If one of these services is installed, it may collect browsing and Usage Data in the pages where it is installed, even if the Users do not actively use the service. Moreover, live chat conversations may be logged.
Crisp Widget (Crisp IM SARL)
The Crisp Widget is a service for interacting with the Crisp live chat platform provided by Crisp IM SARL.
Personal Data processed: Cookies, Data communicated while using the service, Usage Data and various types of Data as specified in the privacy policy of the service.
Place of processing: France – Privacy Policy.
Experience
This Website uses Trackers to improve the quality of the user experience and enable interactions with external content, networks and platforms.
-
Content commenting
Content commenting services allow Users to make and publish their comments on the contents of this Website.
Depending on the settings chosen by the Owner, Users may also leave anonymous comments. If there is an email address among the Personal Data provided by the User, it may be used to send notifications of comments on the same content. Users are responsible for the content of their own comments.
If a content commenting service provided by third parties is installed, it may still collect web traffic data for the pages where the comment service is installed, even when Users do not use the content commenting service.
Facebook Comments (Facebook, Inc.)
Facebook Comments is a content commenting service provided by Facebook, Inc. enabling the User to leave comments and share them on the Facebook platform.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy.
-
Interaction with external social networks and platforms
This type of service allows interaction with social networks or other external platforms directly from the pages of this Website.
The interaction and information obtained through this Website are always subject to the User’s privacy settings for each social network.
This type of service might still collect traffic data for the pages where the service is installed, even when Users do not use it.
It is recommended to log out from the respective services in order to make sure that the processed data on this Website isn’t being connected back to the User’s profile.
Twitter Tweet button and social widgets (X Corp.)
The Twitter Tweet button and social widgets are services allowing interaction with the Twitter social network provided by Twitter, Inc.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy.
Storage duration:
- personalization_id: 2 years
Facebook Like button and social widgets (Facebook, Inc.)
The Facebook Like button and social widgets are services allowing interaction with the Facebook social network provided by Facebook, Inc.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy.
Storage duration:
Measurement
This Website uses Trackers to measure traffic and analyze User behavior to improve the Service.
-
Analytics
The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.
Google Analytics (Google LLC)
Google Analytics is a web analysis service provided by Google LLC (“Google”). Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
Personal Data processed: Tracker and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out.
Storage duration:
- AMP_TOKEN: 1 hour
- _ga: 2 years
- _gac*: 3 months
- _gat: 1 minute
- _gid: 1 day
Google Analytics 4
Google Analytics 4 is a web analysis service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, (“Google”). Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
In Google Analytics 4, IP addresses are used at collection time and then discarded before Data is logged in any data center or server. Users can learn more by consulting Google’s official documentation.
Personal Data processed: number of Users, session statistics, Trackers and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Storage duration:
- _ga: 2 years
- _ga_*: 2 years
Google Analytics Demographics and Interests reports
Google Analytics Demographics and Interests reports is a Google Advertising Reporting feature that makes available demographic and interests Data inside Google Analytics for this Website (demographics means age and gender Data).
Users can opt out of Google's use of cookies by visiting Google's Ads Settings.
Personal Data processed: Trackers and unique device identifiers for advertising (Google Advertiser ID or IDFA, for example).
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Storage duration:
- IDE: 2 years
- _gcl_*: 3 months
- test_cookie: 15 minutes
Google Analytics Advertising Reporting Features
Google Analytics on this Website has Advertising Reporting Features activated, which collects additional information from the DoubleClick cookie (web activity) and from device advertising IDs (app activity). It allows the Owner to analyze specific behavior and interests Data (traffic Data and Users' ads interaction Data) and, if enabled, demographic Data (information about the age and gender).
Users can opt out of Google's use of cookies by visiting Google's Ads Settings.
Personal Data processed: Trackers, unique device identifiers for advertising (Google Advertiser ID or IDFA, for example) and various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Storage duration:
- IDE: 2 years
- _gcl_*: 3 months
- test_cookie: 15 minutes
Google Analytics Granular location and device data collection
Google Analytics on this Website has granular data collection activated which collects location and device data on a per-region basis. It allows the Owner to create and analyze User reports that rely on those metrics.
Personal Data processed: browser information, city, device information, number of Users, session statistics, Trackers and Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
-
Anonymized analytics services
The services contained in this section allow the Owner, through the use of third-party Trackers, to collect and manage analytics in an anonymized form.
Google Analytics with anonymized IP (Google Inc.)
Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
This integration of Google Analytics anonymizes your IP address. It works by shortening Users' IP addresses within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the complete IP address be sent to a Google server and shortened within the US.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out.
Storage duration:
- AMP_TOKEN: 1 hour
- _ga: 2 years
- _gac*: 3 months
- _gat: 1 minute
- _gid: 1 day
-
Heat mapping and session recording
Heat mapping services are used to display the areas of a page where Users most frequently move the mouse or click. This shows where the points of interest are. These services make it possible to monitor and analyze web traffic and keep track of User behavior.
Some of these services may record sessions and make them available for later visual playback.
Hotjar Heat Maps & Recordings (Hotjar Ltd.)
Hotjar is a session recording and heat mapping service provided by Hotjar Ltd.
Hotjar honors generic „Do Not Track” headers. This means the browser can tell its script not to collect any of the User's data. This is a setting that is available in all major browsers. Find Hotjar’s opt-out information here.
Personal Data processed: Cookies, Usage Data and various types of Data as specified in the privacy policy of the service.
Place of processing: Malta – Privacy Policy – Opt Out.
Storage duration:
- _hjAbsoluteSessionInProgress: 30 minutes
- _hjCachedUserAttributes: duration of the session
- _hjClosedSurveyInvites: 1 year
- _hjDonePolls: 1 year
- _hjFirstSeen: duration of the session
- _hjIncludedInSessionSample: 30 minutes
- _hjLocalStorageTest: duration of the session
- _hjLocalStorageTest: duration of the session
- _hjMinimizedPolls: 1 year
- _hjSession*: 30 minutes
- _hjSessionRejected: duration of the session
- _hjSessionResumed: duration of the session
- _hjSessionTooLarge: 1 hour
- _hjSessionUser*: 1 year
- _hjSessionUser_*: 2 years
- _hjShownFeedbackMessage: 1 year
- _hjTLDTest: duration of the session
- _hjUserAttributesHash: duration of the session
- _hjViewportId: duration of the session
- _hjid: 1 year
Marketing
This Website uses Trackers to deliver personalized marketing content based on User behavior and to operate, serve and track ads.
Some of the advertising services used by the Owner adhere to the IAB Transparency and Consent Framework, an initiative that facilitates responsible privacy practices across the digital advertising industry - providing Users with enhanced transparency and control over how their data are used for advertising tracking purposes. Users can customize their advertising preferences at any time by accessing the advertising preferences panel from within the cookie notice or via the relevant link on this Website.
This Website participates in the IAB Europe Transparency & Consent Framework and complies with its Specifications and Policies. This Website uses iubenda (identification number 123) as a Consent Management Platform.
-
Advertising
This type of service allows User Data to be utilized for advertising communication purposes. These communications are displayed in the form of banners and other advertisements on this Website, possibly based on User interests.
This does not mean that all Personal Data are used for this purpose. Information and conditions of use are shown below.
Some of the services listed below may use Trackers for identifying Users, behavioral retargeting i.e. displaying ads tailored to the User’s interests and behavior, or to measure ads performance. For more information, please check the privacy policies of the relevant services.
Services of this kind usually offer the possibility to opt out of such tracking. In addition to any opt-out feature offered by any of the services below, Users may learn more on how to generally opt out of interest-based advertising within the dedicated section "How to opt-out of interest-based advertising" in this document.
Meta ads conversion tracking (Meta pixel) (Meta Platforms, Inc.)
Meta ads conversion tracking (Meta pixel) is an analytics service provided by Meta Platforms, Inc. that connects data from the Meta Audience Network with actions performed on this Website. The Meta pixel tracks conversions that can be attributed to ads on Facebook, Instagram and Meta Audience Network.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy – Opt out.
Storage duration:
- _fbp: 3 months
- fr: 3 months
Microsoft Advertising (Microsoft Corporation)
Microsoft Advertising is an advertising service provided by Microsoft Corporation.
Personal Data processed: Tracker and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out.
Storage duration:
- MUID: 2 years
- _uetmsclkid: 3 months
- _uetmsclkid: indefinite
- _uetsid: 1 day
- _uetsid: indefinite
- _uetvid: 2 years
- _uetvid: indefinite
Google Ads conversion tracking
Google Ads conversion tracking is an analytics service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that connects data from the Google Ads advertising network with actions performed on this Website.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Storage duration:
- IDE: 2 years
- test_cookie: 15 minutes
-
Managing contacts and sending messages
This type of service makes it possible to manage a database of email contacts, phone contacts or any other contact information to communicate with the User.
These services may also collect data concerning the date and time when the message was viewed by the User, as well as when the User interacted with it, such as by clicking on links included in the message.
Trustpilot Automatic Feedback Service (Trustpilot A/S)
The Trustpilot Automatic Feedback Service is a message-sending service provided by Trustpilot A/S that automates the sending of email requests for product or service reviews based on specific Users’ actions performed on this Website.
Personal Data processed: Trackers.
Place of processing: Denmark – Privacy Policy.
Emarsys Email Marketing
Emarsys Email Marketing is an email address management and message-sending service provided by SAP Emarsys eMarketing Systems GmbH or by Emarsys North America, Inc., depending on how the Owner manages the Data processing.
Personal Data processed: email address, first name, last name, Trackers and Usage Data.
Place of processing: Austria – Privacy Policy; United States – Privacy Policy.
-
Remarketing and behavioral targeting
This type of service allows this Website and its partners to inform, optimize and serve advertising based on past use of this Website by the User.
This activity is facilitated by tracking Usage Data and by using Trackers to collect information which is then transferred to the partners that manage the remarketing and behavioral targeting activity.
Some services offer a remarketing option based on email address lists.
In addition to any opt-out feature provided by any of the services below, Users may opt out by visiting the Network Advertising Initiative opt-out page.
Users may also opt-out of certain advertising features through applicable device settings, such as the device advertising settings for mobile phones or ads settings in general.
Google Ads Remarketing (Google LLC)
Google Ads Remarketing is a remarketing and behavioral targeting service provided by Google LLC that connects the activity of this Website with the Google Ads advertising network and the DoubleClick Cookie.
Users can opt out of Google's use of cookies for ads personalization by visiting Google's Ads Settings.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out.
Storage duration:
- AID: 2 years
- ANID: 2 years
- Conversion: 3 months
- DSID: 14 days
- FCNEC: 1 year
- FLC: 10 seconds
- FPAU: 3 months
- FPGCLAW: 3 months
- FPGCLDC: 3 months
- FPGCLGB: 3 months
- IDE: 2 years
- NID: 6 months
- RUL: 1 year
- TAID: 14 days
- __gads: 2 years
- __gsas: 2 years
- _gac_: 3 months
- _gac_gb_: 3 months
- _gcl_au: 3 months
- _gcl_aw: 3 months
- _gcl_dc: 3 months
- _gcl_gb: 3 months
- _gcl_gf: 3 months
- _gcl_ha: 3 months
- id: 2 years
- test_cookie: 15 minutes
Facebook Remarketing (Facebook, Inc.)
Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook, Inc. that connects the activity of this Website with the Facebook advertising network.
Personal Data processed: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out.
Storage duration:
Google Signals
This Website uses Google Signals, a feature of Google Analytics, which will associate the visitation information that it collects from this Website with Google information from accounts of signed-in Google-account users who have consented to this association for the purpose of ads personalization. This Google information may include User location, search history, YouTube history and Data from sites that partner with Google – and is used to provide aggregated and anonymized insights into Users' cross device behaviors.
If a User falls under the described association, they may access and/or delete such Data via My Activity provided by Google.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.
Activities that do not fit the above categorizations
-
ResponseIQ
Response IQ Ltd Privacy Policy
Last updated: April 24, 2018
https://responseiq.com/ website (the “Website”) is operated by Response IQ Ltd, company registration number 09951115 and the registered office of which is at Response IQ LTD, 124 City Road, London, EC1V 2NX (“We”, “Us” or “ResponseIQ”).
We take your privacy very seriously and we ask that you read this Privacy Policy carefully as it contains important information on:
- the personal information we collect about you,
- what we do with your information, and
- who your information might be shared with.
Who we are
ResponseIQ are a “data controller” for the purposes of the General Data Protection Regulation EU 2016/679 (the “GDPR”), (i.e. we are responsible for, and control the processing of, your personal information).
What information we collect?
Personal information provided by you
We may collect personal information about you (such as your name, address, telephone number, payment card details etc.) when you use our Website, register with us or purchase services from us. We may also collect personal information when you contact us, send us feedback or post material to the Website.
We may also collect information that your browser sends us whenever you visit our Website. This data may include information such as your computer’s IP address, browser type, browser version, the pages of our Website that you visit and other statistics relating to your use of the Website. This information may be collected in conjunction with third party services such as Google Analytics.
Personal information provided by third parties
The nature of the Services we offer means that we may receive information about you from a third-party source, such as one of our clients. We will only accept that information if we have evidence that you have consented for the personal information to be passed to us or it is passed pursuant to another legal basis under the GDPR.
Personal information about other individuals
If you give us information on behalf of someone else, you confirm that the other person has appointed you to act on his/her behalf and has agreed that you can:
- give consent on his/her behalf to the processing of his/her personal data;
- receive on his/her behalf any data protection notices; and
- give consent to the transfer of his/her personal data abroad.
Sensitive personal information
It is very unlikely that we will ask you to provide sensitive personal information. If we request such information, we will explain why we are requesting it and how we intend to use it.
Sensitive personal information includes information relating to your ethnic origin, your political opinions, your religious beliefs, whether you belong to a trade union, your physical or mental health or condition, your sexual life, and whether you have committed a criminal offence.
We will only collect your sensitive personal information with your explicit consent.
Monitoring and recording communications
We may monitor and record communications with you (such as telephone conversations and emails) for the purpose of performing the Services we offer to our clients, quality assurance, training, fraud prevention and regulatory compliance.
Sensitive personal information
A cookie is a small text file which is placed onto your computer (or other electronic device) when you access our Website. We use cookies on this Website to:
- keep track of any services you may wish to purchase;
- recognise you whenever you visit this Website (this speeds up your access to the Website as you do not have to log in each time);
- obtain information about your preferences, online movements and use of the internet;
- carry out research and statistical analysis to help improve our content and services and to help us better understand our visitor and customer requirements and interests;
- target our marketing and advertising campaigns more effectively by providing interest-based advertisements that are personalised to your interests; and
- make your online experience more efficient and enjoyable.
The information we obtain from our use of cookies will not usually contain your personal data. Although we may obtain information about your computer or other electronic device such as your IP address, your browser and/or other internet log information, this will not usually identify you personally. In certain circumstances we may collect personal information about you—but only where you voluntarily provide it (e.g. by completing an online form) or where you purchase services from us.
In most cases we will need your consent in order to use cookies on this Website. The exception is where the cookie is essential in order for us to provide you with a service you have requested (e.g. to enable you to purchase services from us).
There is a notice on our home page which describes how we use cookies and which also provides a link to this Privacy Policy. If you use our Website after this notification has been displayed to you, we will assume that you consent to our use of cookies for the purposes described in this Privacy Policy.
We may work with third party suppliers who may also set cookies on our Website. These third-party suppliers are responsible for the cookies they set on our Website. If you want further information, please go to the website of the relevant third party.
If you do not want to accept cookies, you can change your browser settings so that cookies are not accepted. If you do this, please be aware that you may lose some of the functionality of this Website. For further information about cookies and how to disable them please go to the Information Commissioner’s webpage on cookies: https://ico.org.uk/for-the-public/online/cookies/.
How will we use the information about you?
We collect information about you so that we can:
- identify you and manage any accounts you hold with us;
- process your order or carry out obligations arising from any contract(s) entered into between you and us;
- conduct research, statistical analysis and behavioural analysis;
- carry out customer profiling and analyse your purchasing preferences;
- if you agree, let you know about other products or services that may be of interest to you—see ‘Marketing’ section below;
detect and prevent fraud;
- customise our Website and its content to your particular preferences;
- notify you of any changes to our Website or to our services that may affect you;
- carry out security vetting; and
- improve our services and notify you about changes to these services.
Marketing
Only where you have provided us with specific, informed and unambiguous consent shall we provide you with marketing materials by the mechanism(s) you have consented to (e.g. email). We will only provide you with marketing materials relating to features that you have explicitly consented to.
If you have consented to such receive marketing from us, you can opt out at any time. See ‘What rights do you have?’ below for further information.
Who your information might be shared with
We may disclose your personal data to:
- our clients as part of the service offered, but only with your explicit consent or pursuant to another legal basis under the GDPR;
- our service providers pursuant to strict data processing agreements that protect your personal data to the same or higher standards than we treat it;
- law enforcement agencies in connection with any investigation to help prevent unlawful activity; and
a court of law or regulator where we are under a duty to disclose or share your personal data in order to comply with a legal or regulatory obligation.
Rest assured that we will never pass your information to a third party outside of the categories above without your explicit consent.
Keeping your data secure
We will use technical and organisational measures to safeguard your personal data, for example:
- access to your account is controlled by a password and username that are unique to you;
- we store your personal data on secure servers; and
- payment details are encrypted using SSL technology (typically you will see a lock icon or green address bar (or both) in your browser when we use this technology).
While we will use all reasonable efforts to safeguard your personal data, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data that are transferred from you or to you via the internet. If you have any particular concerns about your information, please contact us (see ‘How can you contact us?’ below).
Our Website may contain links to other websites of our partners, suppliers, advertisers or other approved third parties. If you follow a link to any of these websites, please note that these websites have (or should have) their own privacy policies. We do not accept any responsibility or liability for these policies or the way in which your personal data may be treated by these third parties. We recommend you check the privacy policy of any third party before you submit any personal data to their website.
Transfers of your information out of the EEA
We may need to transfer your personal data to countries which are located outside the European Economic Area (“EEA”), for the purpose of providing the services to you. You may be located in a country outside of the EEA and therefore we may have no choice but to transfer your data outside of the EEA. Rest assured that any transfer of your personal data outside of the EEA will be subject to a GDPR-compliant guarantee (such as the EU-US Privacy Shield or a Model Contract Clause approved by the European Commission) that will safeguard your privacy rights and give you remedies in the unlikely event of a security breach.
How long do we hold your data for?
We only keep your personal data as long as necessary for the purpose for which it was obtained. After that period, we either: (1) anonymise the data if we still wish to use it for analytical purposes, or (2) pseudonymise the data if believe in good faith that we may need to process the data in the future for a legitimate purpose, or in all other cases (3) delete it completely from our servers.
What rights do you have?
Right to request a copy of your information
You can request a copy of your information which we hold (this is known as a subject access request). If you would like a copy of some or it, please:
- email, call or write to us (see ‘How can you contact us?’ below),
- let us have proof of your identity and address (a copy of your driving licence or passport and a recent utility or credit card bill will suffice), and
- let us know the information you want a copy of, including any account or reference numbers, if you have them.
We will acknowledge receipt of your request and will respond within thirty (30) days. We will not charge you for providing the information.
Right to correct any mistakes in your information
You can require us to correct any mistakes in your information which we hold free of charge. If you would like to do this, please:
- email, call or write to us (see ‘How can you contact us?’ below),
- let us have enough information to identify you (e.g. account number, user name, registration details), and
- let us know the information that is incorrect and what it should be replaced with.
We will acknowledge receipt of your request and will respond within thirty (30) days.
Right to ask us to stop contacting you with direct marketing
You can ask us to stop contacting you for direct marketing purposes. If you would like to do this, please:
email, call or write to us (see ‘How can you contact us?’ below). You can also click on the ‘unsubscribe’ button at the bottom of marketing emails from us,
let us have proof of your identity and address (a copy of your driving licence or passport and a recent utility or credit card bill will suffice), and
let us know what method of contact you are not happy with if you are unhappy with certain ways of contacting you only (for example, you may be happy for us to contact you by email but not by telephone).
We will acknowledge receipt of your request and will respond within thirty (30) days.
Right to erasure
You can request that we delete all personal data relating to you free of charge. If you would like to do this, please:
- email, call or write to us (see ‘How can you contact us?’ below), and
- let us have proof of your identity and address (a copy of your driving licence or passport and a recent utility or credit card bill will suffice), and
- provide us with the justification for the erasure request (e.g. you are withdrawing your consent, you no longer believe that we should be processing the personal data for the original purpose for which it was obtained, the personal data is being unlawfully processed, there is a legal reason for erasure etc.).
We will acknowledge receipt of your request and will respond within thirty (30) days.
Right to Restrict Processing
You can request that we restrict processing of some of your personal data. If you would like to do this, please:
- email, call or write to us (see ‘How can you contact us?’ below), and
- let us have proof of your identity and address (a copy of your driving licence or passport and a recent utility or credit card bill will suffice), and
- provide us with details of what personal data you would like us to restrict the processing of (e.g. where you contest the accuracy of some personal data, we shall restrict the processing of it whilst its accuracy is verified).
We will acknowledge receipt of your request and will respond within thirty (30) days. If we agree to restrict the processing of the personal data before the thirty (30) day period, we will inform you as soon as we have put in place the restriction.
Right to Object
You can object to us processing any of your personal data. If you would like to do this, please:
- email, call or write to us (see ‘How can you contact us?’ below), and
- let us have proof of your identity and address (a copy of your driving licence or passport and a recent utility or credit card bill will suffice), and
- provide us with details of what personal data you object to us processing.
We will acknowledge receipt of your request and will respond within thirty (30) days.
Right to Data Portability
You can request that be provide some or all of your personal data we hold to a third party free of charge. If you would like to do this, please:
- email, call or write to us (see ‘How can you contact us?’ below),
- let us have proof of your identity and address (a copy of your driving licence or passport and a recent utility or credit card bill will suffice), and
- provide us with sufficient details of the third-party entity to which you would like your data transferred.
We will acknowledge receipt of your request and will provide your personal to the third-party entity in a commonly used machine-readable format within thirty (30) days providing you have provided us with sufficient information to do so. We will not charge you for this service.
Rights relating to automated decision making and profiling
We use software that automatically processes personal data for us. We ensure that processing using this software is fair and we implement all appropriate technical and organisational measures to ensure inaccuracies are minimised. If you are concerned about the use of such software, you have the right to ask for more details about the processing and request that we stop using the software to process your data. If you would like to do this, please:
- email, call or write to us (see ‘How can you contact us?’ below),
- let us have enough information to identify you (e.g. account number, user name, registration details), and
- provide us with details of your concerns and the categories of personal data you believe are being processed by automated software.
We will acknowledge receipt of your request and will respond within thirty (30) days. Please note that if the automated processing is necessary for the performance of a contract between you and us, if you request that the software is no longer used to process your data, we may not be able to provide you with services anymore.
Right to complain to the supervisory authority
If you are unhappy with the way in which we have dealt with a request you have made or you feel that we are not complying with this Privacy Policy in any way, you have the right to complain to the supervisory authority in the country in which you live. The supervisory authority in England and Wales is the Information Commissioners Office and details of how to contact them are available on their website: www.ico.org.uk.
Time Extensions and Refusals
We reserve the right to extend the time period to respond to any of the requests listed above by up to sixty (60) days where a request is complex or a large number of requests are made. If we fail to respond to you by the deadline we set, you have a right to complain to the supervisory authority or seek a judicial remedy (see – ‘Right to complain to the supervisory authority’ above).
We may also refuse a request where there are legitimate reasons to do so. These include, but are not limited to:
- where a request is manifestly unfounded, excessive or repetitive; or
- where personal data is being processed:
• in order to comply with a legal obligation;
the public interest;
• in the exercise or defence of a legal claim;
• in the exercise of the right to freedom of expression and information.
How to contact us
Please contact us via help@responseiq.com or call +44 208 629 5280. Our Data Protection Officer is Scott Lee. If you have any questions about this Privacy Policy or the information we hold about you, we will be delighted to assist.
Changes to this Privacy Policy
We may change this Privacy Policy from time to time. You should check this policy occasionally to ensure you are aware of the most recent version that will apply each time you access this Website.
How to manage preferences and provide or withdraw consent
There are various ways to manage Tracker related preferences and to provide and withdraw consent, where relevant:
Users can manage preferences related to Trackers from directly within their own device settings, for example, by preventing the use or storage of Trackers.
Additionally, whenever the use of Trackers is based on consent, Users can provide or withdraw such consent by setting their preferences within the cookie notice or by updating such preferences accordingly via the relevant consent-preferences privacy widget, if available.
It is also possible, via relevant browser or device features, to delete previously stored Trackers, including those used to remember the User’s initial consent preferences.
Other Trackers in the browser’s local memory may be cleared by deleting the browsing history.
With regard to any third-party Trackers, Users can manage their preferences via the related opt-out link (where provided), by using the means indicated in the third party's privacy policy, or by contacting the third party.
Locating Tracker Settings
Users can, for example, find information about how to manage Cookies in the most commonly used browsers at the following addresses:
Users may also manage certain categories of Trackers used on mobile apps by opting out through relevant device settings such as the device advertising settings for mobile devices, or tracking settings in general (Users may open the device settings and look for the relevant setting).
How to opt out of interest-based advertising
Notwithstanding the above, Users may follow the instructions provided by YourOnlineChoices (EU and UK), the Network Advertising Initiative (US) and the Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow Users to select their tracking preferences for most of the advertising tools. The Owner thus recommends that Users make use of these resources in addition to the information provided in this document.
The Digital Advertising Alliance offers an application called AppChoices that helps Users to control interest-based advertising on mobile apps.
Consequences of denying the use of Trackers
Users are free to decide whether or not to allow the use of Trackers. However, please note that Trackers help this Website to provide a better experience and advanced functionalities to Users (in line with the purposes outlined in this document). Therefore, if the User chooses to block the use of Trackers, the Owner may be unable to provide related features.
Owner and Data Controller
Blue Bay Travel Ltd, Unit A4 Bellringer Road, Trentham Business Quarter, Stoke on Trent, ST4 8GB
Owner contact email: gdpr@bluebaytravel.co.uk
Since the use of third-party Trackers through this Website cannot be fully controlled by the Owner, any specific references to third-party Trackers are to be considered indicative. In order to obtain complete information, Users are kindly requested to consult the privacy policies of the respective third-party services listed in this document.
Given the objective complexity surrounding tracking technologies, Users are encouraged to contact the Owner should they wish to receive any further information on the use of such technologies by this Website.