Last Updated: October 7, 2026
Draco Travels (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, store, share and protect your personal data when you visit our website, communicate with us, or use our travel agency and booking services.
We process personal data in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).
1. Data Controller Details
Draco Travel and Tours is a trading name of Draco Group Limited (company number 08509655, registered in England and Wales). Draco Group Limited is the data controller for the personal data that we process for our own business and agency purposes.
Email: info@dracotravels.co.uk
Telephone: +44 20 3769 0850
Where we act as a travel agent or booking intermediary, certain personal data may also be processed by the relevant airline, hotel, tour operator, package organiser, Destination Management Company (DMC), payment provider or other travel supplier. Those organisations may act as separate or independent data controllers for the personal data they receive and process.
2. Personal Data We Collect
Depending on the services you request or book, we may collect the following categories of personal data:
| Category | Types of Data Collected |
|---|---|
| Identity Data | Full name, title, date of birth, gender, nationality, passport details and visa information where required for travel arrangements. |
| Contact Data | Address, email address, telephone number and emergency contact details. |
| Financial & Transaction Data | Payment information, payment history, invoice records and transaction details. Full payment-card information may be processed directly by our payment providers rather than being stored by Draco Travels. |
| Booking & Travel Data | Itinerary details, travel preferences, accommodation selections, flight details, frequent-flyer information and travel-companion details. |
| Technical & Usage Data | Basic technical information such as your IP address, browser type and device, which our website host may record in server logs to keep the website secure and working. |
| Special Category Data | Where voluntarily provided and necessary to arrange travel services, information concerning health conditions, mobility requirements, allergies, dietary requirements, religious or cultural requirements, or other special assistance needs. |
We only request information that is reasonably necessary for the relevant purpose.
3. How We Collect Your Data
We may collect personal data through:
Direct Interactions
You may provide information when you:
- Request a quote or send an enquiry through our website, which opens a prepared message in your own email app or WhatsApp for you to send;
- Contact us by telephone, email, WhatsApp or social media;
- Make a booking or a payment;
- Provide details of other travellers in your party; or
- Contact us with a question, feedback or complaint.
Third Parties
We may receive personal data from airlines, hotels, tour operators and other Suppliers in connection with your booking, from payment providers when you make a payment, and from the lead passenger or another person who makes a booking on your behalf.
4. How We Use Your Data
We use your personal data only where we have a lawful basis to do so:
| Purpose | Lawful Basis |
|---|---|
| Responding to enquiries and preparing quotes | Taking steps at your request before entering into a contract, and our legitimate interests in responding to you. |
| Arranging, managing and changing your booking | Performance of a contract with you. |
| Taking payments and keeping financial records | Performance of a contract and compliance with our legal obligations. |
| Sending important information about your trip, including changes and disruptions | Performance of a contract and our legitimate interests. |
| Arranging special assistance, dietary or medical requirements | Your explicit consent, or where necessary to protect your vital interests. |
| Handling complaints, claims and legal requirements | Compliance with legal obligations and our legitimate interests in defending our business. |
| Sending marketing about offers and holidays | Your consent, which you can withdraw at any time. |
We do not sell your personal data, and we do not make decisions about you based solely on automated processing.
5. Sharing Your Data
We may share your personal data with:
- Airlines, hotels, tour operators, transfer companies, activity providers and other Suppliers, as needed to arrange your travel;
- Payment providers, to process payments securely;
- Service providers that support our business, such as email, telephone, messaging (including WhatsApp, operated by Meta) and website hosting providers;
- Insurers and professional advisers, where necessary; and
- Government, border and law-enforcement authorities, where required by law (for example, advance passenger information required by airlines and immigration authorities).
6. International Transfers
Arranging travel often requires sharing your personal data with Suppliers and authorities outside the United Kingdom. Where we transfer personal data outside the UK, we do so where the transfer is necessary to provide the travel services you have requested, or where appropriate safeguards are in place, such as UK adequacy regulations or approved contractual clauses.
7. How Long We Keep Your Data
We keep personal data only for as long as necessary for the purposes described in this notice. Booking and financial records are kept for as long as required for legal, tax and accounting purposes, which is usually six years. Enquiries that do not lead to a booking are kept for a limited period and then deleted.
8. Keeping Your Data Secure
We use appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. Card payments are handled by our payment providers on their own secure systems. We will never ask you to send full card details by email, text or WhatsApp.
9. Your Rights
Under UK data protection law, you have the right to:
- Access the personal data we hold about you;
- Ask us to correct inaccurate or incomplete data;
- Ask us to delete your data, where there is no good reason for us to keep it;
- Ask us to restrict or stop processing your data in certain circumstances;
- Object to processing based on our legitimate interests, and to direct marketing at any time;
- Ask us to transfer your data to you or another organisation, where applicable; and
- Withdraw your consent at any time, where we rely on consent.
To exercise any of these rights, contact us at info@dracotravels.co.uk. We will respond within one month.
10. Cookies and Our Website
Our website does not use advertising or analytics cookies, and it does not track you across other websites. It stores a small setting in your browser, such as whether you have turned the snowfall effect on or off, which is not used to identify you.
Our website links to other services, including WhatsApp, Facebook and our payment provider. When you use those services, their own privacy policies apply.
11. Children
Our services are intended for adults. Where children are travelling, their personal data is provided by a parent, guardian or the lead passenger and is used only to arrange their travel.
12. Complaints
If you have a concern about how we handle your personal data, please contact us first and we will do our best to resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.
13. Changes to This Notice
We may update this Privacy Notice from time to time. The latest version will always be published on this page, with the date it was last updated.
14. Contact Us
Draco Travels
Email: info@dracotravels.co.uk
Telephone: +44 20 3769 0850