Privacy Policy

This privacy policy explains how opal-travel collects, uses, and protects your personal information when you use our website and services.

Information We Collect

Information You Provide

When you enroll in our programs or contact us, we may collect:

• Your name and contact information (email address, postal address)
• Your child's age and relevant information for program placement
• Program preferences and enrollment details
• Communication preferences
• Payment information (processed securely through third-party payment processors)

Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address and browser information
• Pages visited and time spent on our website
• Referring website or source
• Device information

How We Use Your Information

We use the information we collect to:

• Provide and deliver our educational programs
• Process enrollments and payments
• Communicate with you about programs, schedules, and updates
• Respond to your inquiries and provide customer support
• Improve our website and services
• Send marketing communications (only with your consent)
• Comply with legal obligations

Legal Basis for Processing

We process your personal data based on:

• Contractual necessity: To fulfill our obligations in providing educational services
• Legitimate interests: To improve our services and communicate relevant information
• Consent: For marketing communications and optional data processing
• Legal obligations: To comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service providers: Third parties who assist in delivering our services (payment processors, email services, scheduling tools)
• Legal requirements: When required by law or to protect our legal rights
• Business transfers: In connection with a merger, acquisition, or sale of assets

All third-party service providers are contractually obligated to protect your information and use it only for the purposes we specify.

Children's Privacy

Our services are designed for children and teenagers. We collect minimal information about children themselves, focusing primarily on what is necessary for program delivery. We obtain parental consent before collecting any information from children under 13.

Parents have the right to:

• Review information collected about their child
• Request deletion of their child's information
• Refuse further collection of their child's information

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

While we take reasonable steps to protect your information, no method of transmission over the internet is completely secure.

Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Specifically:

• Enrollment and program information: Duration of program plus 7 years
• Financial records: 7 years from transaction date
• Marketing communications: Until you unsubscribe or withdraw consent
• Website analytics: Up to 26 months

Your Rights

Under data protection law, you have the right to:

• Access: Request copies of your personal information
• Rectification: Request correction of inaccurate information
• Erasure: Request deletion of your information
• Restriction: Request limitation of processing
• Data portability: Receive your data in a structured format
• Object: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent for processing at any time

To exercise these rights, contact us at [email protected].

Cookies

Our website uses cookies to improve functionality and user experience. See our Cookies Policy for detailed information.

International Data Transfers

Your information is primarily stored and processed in the United Kingdom. If we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place.

Changes to This Policy

We may update this privacy policy periodically. We will notify you of significant changes by email or through a prominent notice on our website.

Contact Us

For questions about this privacy policy or our data practices, contact:

opal-travel
142 Princes Street
Edinburgh EH2 4BJ
United Kingdom
Email: [email protected]

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: opal-travel.com