Privacy Policy

Aetheria Tourism Ltd (“we”, “us”, “our”, or “Company”) is committed to protecting your personal privacy. This Privacy Policy outlines how we collect, process, store, disclose, and safeguard your personal records when you interact with www.aetheriatourism.com and purchase travel packages.
This policy satisfies compliance mandates under the UK General Data Protection Regulation (UK-GDPR), the Data Protection Act 2018, and international merchant card processing standards.
1. Data Controller & Global Operations Disclosure
    • Legal Entity: Aetheria Tourism Ltd
    • Registered Office Address: B68 4-6 Greatorex Street, London, United Kingdom, E1 5NF
    • Data Protection Contact: [email protected]

Operational Note: Global reservation and support operations are coordinated via international hubs, including our support number at +447988031546, under the governance of our UK corporate entity.
 
2. Information We Collect
    • Directly Provided Data: Full name, contact details, travel preferences, and basic transaction data. Full primary account numbers (PAN) are never stored on our internal servers.
    • Automatically Collected Data: Technical metrics, IP addresses, and clickstream interactions.
    • Third-Party Data: Transaction alerts from secure payment processors (e.g., Braintree, PayPal) and updates from local tour suppliers.

 
3. Legal Grounds & Data Sharing
We process data under performance of a contract, legal obligations, legitimate interests, and explicit consent. Data is shared with vetted local tour operators, payment infrastructure providers, and secure cloud hosts to fulfill bookings.
4. Customer Privacy Safeguards During Tours
While we vet local operators, we do not physically control independent local guides or transport drivers. We advise you to minimize sharing unnecessary personal details (such as passport copies or financial indices) with fellow travelers or unverified local vendors. Aetheria Tourism Ltd holds no liability for data disclosures made voluntarily during physical tours.
 
5. International Transfers & Retention
    • Cross-Border Transfers: Transfers outside the UK/EEA use the UK International Data Transfer Agreement (IDTA) or the standard UK Addendum.
    • Data Retention: Retained for the duration required to fulfill bookings or satisfy UK financial legislation (up to 7 years for tax records).

 
6. Your Legal Rights
You hold rights of access, rectification, erasure, and portability under UK-GDPR. Requests can be sent to [email protected] and will be fulfilled without undue delay, and at the latest within one calendar month. Grievances may be reported to the Information Commissioner’s Office (ICO) (www.ico.org.uk).
(For the complete unabridged policy text and structural details, please refer to the referenced operational documentation.)