GDPR Privacy Notice

If you are a resident of the European Economic Area (EEA) or the United Kingdom, you have specific data protection rights under the General Data Protection Regulation (GDPR) and the UK GDPR. Beyond Words Travel acts as the "Data Controller" for the personal information we collect from you through this website (www.beyondwordstravel.com).

1. Legal Basis for Processing Personal Data

We process your personal data under the following legal bases:

• Consent: You have given clear consent for us to process your personal data for a specific purpose (e.g., accepting analytics cookies).
• Contractual Necessity: Processing is necessary for the preparation of a contract or business relationship to which you are a party (e.g., you email us directly to inquire about our travel curation services).
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our website functionality and understanding general traffic trends, provided those interests are not overridden by your rights and freedoms.

2. International Data Transfers

Beyond Words Travel is headquartered in the United States. By communicating with us via email or using our website, your information may be transferred to, stored, or processed in the United States. We ensure that any such transfers are conducted securely and in accordance with applicable data protection laws, relying on your explicit consent when you voluntarily email our team.

3. Data Retention

Because we do not use third-party CRM databases, any personal data you voluntarily provide via direct email is stored securely in our corporate email systems. We retain this information only for as long as necessary to fulfill the purposes for which it was collected, including the duration of our business relationship and to satisfy any legal, accounting, or reporting requirements.

4. Your Data Protection Rights

Under the GDPR, you possess the following rights regarding your personal data:

• The Right to Access: You can request copies of your personal data that we hold.
• The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The Right to Erasure ("Right to be Forgotten"): You have the right to request that we erase your personal data, under certain conditions.
• The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
• The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

5. Exercising Your Rights

If you would like to exercise any of these rights, please contact us. We have one month to respond to your request.

Email: info@beyondwordstravel.com
Please include "GDPR Data Request" in the subject line so we can route it appropriately.

6. Right to Complain to a Supervisory Authority

If you believe that our processing of your personal information infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection in your country of residence within the EEA or the UK.