Privacy Policy

This Privacy Policy explains how Flight2Faith Ltd collects, uses, and protects your personal information when you use our website or interact with us in connection with our services. We are committed to handling your data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Flight2Faith Ltd is the data controller responsible for your personal data. We are a company registered in England and Wales under company number 15699384.

If you have any questions about this policy or how we handle your data, you can contact us via WhatsApp at 07341 806 435 or by email at info@flight2faith.com.

2. What Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Identity and contact information - your name, email address, and phone number when you make an enquiry or booking.
• Passport and travel information - a copy of your passport photo page and the names and passport details of any other travellers included in your booking, required to confirm and process your group tour booking.
• Payment information - payment is processed securely through Stripe. We do not store your card details. Stripe may retain transaction records in accordance with their own privacy policy.
• Donation information - the amount donated and transaction reference, processed via Stripe.
• Usage and analytics data - information about how you use our website, including pages visited, time spent, device type, browser, and approximate location. This is collected via Google Analytics 4 (GA4) and only with your consent via our cookie settings.
• Cookie data - see the Cookies section below for full details.

3. How We Collect Your Data

We collect personal data in the following ways:

• When you complete a payment for a group tour or donation via our website.
• When you contact us or send booking confirmation details via WhatsApp or email.
• Automatically through cookies and analytics tools when you browse our website, subject to your consent.

4. Why We Use Your Data and Our Legal Basis

We use your personal data for the following purposes:

• To process and manage your group tour booking - we need your name, passport details, and contact information to confirm your place, arrange travel documentation, and communicate important trip updates. Legal basis: contractual necessity.
• To process payments and donations - transaction data is necessary to process your payment and maintain financial records. Legal basis: contractual necessity and legal obligation.
• To respond to enquiries - if you contact us, we use your details to respond. Legal basis: legitimate interests.
• To understand how our website is used - we use Google Analytics 4 to analyse visitor behaviour and improve our website. This is only done with your consent via our cookie banner. Legal basis: consent.

5. Cookies

Our website uses cookies. Cookies are small text files placed on your device when you visit a website. We use the following types of cookies:

• Essential cookies - necessary for the website to function correctly. These cannot be disabled.
• Analytics cookies - used by Google Analytics 4 to collect information about how visitors use our website. These cookies are only set if you accept analytics cookies via our cookie consent banner. The main cookies used are _ga and _ga_[ID], which help distinguish users and sessions. These expire after 2 years.

When you first visit our website, you will be shown a cookie banner where you can choose to accept or decline analytics cookies. You can change your preferences at any time.

For more information about Google Analytics and how it handles data, visit policies.google.com/privacy.

6. Third-Party Services

We use the following third-party services that may process your data:

• Stripe - processes all payments and donations. Stripe is PCI DSS compliant and operates under its own privacy policy available at stripe.com/privacy.
• Google Analytics 4 - provides website analytics. Data is processed by Google under their privacy policy at policies.google.com/privacy. We have configured GA4 with IP anonymisation enabled.
• WhatsApp - used for booking confirmations and customer support. Messages sent via WhatsApp are subject to Meta's privacy policy.
• Flight and hotel search tool - the search facility on our website is operated by a third-party provider. Any data you enter into that tool is processed by that provider under their own privacy terms.

We do not sell your personal data to any third party.

7. How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes it was collected:

• Booking and travel records - retained for up to 7 years to comply with financial and legal obligations.
• Enquiry and contact records - retained for a reasonable period after your last interaction with us.
• Analytics data - Google Analytics 4 retains data for 14 months by default.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access - you can request a copy of the personal data we hold about you.
• Right to rectification - you can ask us to correct inaccurate or incomplete data.
• Right to erasure - you can ask us to delete your data where we no longer have a lawful reason to hold it.
• Right to restrict processing - you can ask us to limit how we use your data in certain circumstances.
• Right to data portability - you can request your data in a portable format where applicable.
• Right to withdraw consent - where we rely on consent (such as for analytics cookies), you can withdraw it at any time by adjusting your cookie settings.
• Right to object - you can object to processing based on legitimate interests.

To exercise any of these rights, please contact us at info@flight2faith.com. We will respond within one month.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Payments are handled entirely by Stripe and are not stored on our systems.

10. Complaints

If you have a concern about how we handle your personal data, please contact us in the first instance and we will do our best to resolve it. If you remain unhappy, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on this page. We encourage you to review it periodically.