← Back to Home

Privacy Policy

Effective Date: January 1, 2024 | Last Updated: September 9, 2025

1. Introduction

Shiny Holdings ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our tour booking services.

Our registered address is: 74 Hoxton St, London N1 6LP, United Kingdom. You can contact us at [email protected] or +447783437620.

2. Information We Collect

We collect information you provide directly to us, such as when you:

  • Book a tour or travel service
  • Subscribe to our newsletter
  • Contact us for customer support
  • Fill out forms on our website
  • Participate in surveys or promotions

This information may include:

  • Personal identifiers (name, email address, phone number)
  • Contact information and postal address
  • Payment information (processed securely by third-party providers)
  • Travel preferences and requirements
  • Communication records with our customer service team

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our travel services
  • Process bookings and handle customer transactions
  • Send you confirmations, updates, and administrative information
  • Respond to your comments, questions, and customer service requests
  • Send you newsletters and marketing communications (with your consent)
  • Comply with legal obligations and protect our legal rights
  • Prevent fraud and enhance the security of our services

4. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your personal data based on:

  • Contract performance: To fulfill our travel service contracts
  • Legitimate interests: For business operations and customer service
  • Consent: For marketing communications and optional services
  • Legal compliance: To meet regulatory requirements

5. Information Sharing and Disclosure

We may share your information with:

  • Service Providers: Third-party companies that help us operate our business
  • Travel Partners: Hotels, transport providers, and attractions for booking purposes
  • Payment Processors: Secure payment gateway providers
  • Legal Requirements: When required by law or to protect our rights

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our services and maintain customer accounts
  • Comply with legal obligations (typically 7 years for financial records)
  • Resolve disputes and enforce our agreements

Marketing data is retained until you unsubscribe or request deletion.

7. Your Rights

Under UK GDPR, you have the right to:

  • Access: Request copies of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your personal data
  • Restriction: Request limitation of processing
  • Data Portability: Receive your data in a portable format
  • Objection: Object to processing based on legitimate interests
  • Withdraw consent: For consent-based processing

To exercise these rights, contact us at [email protected].

8. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your browsing experience. Our cookie policy provides detailed information about:

  • Types of cookies we use
  • How to manage cookie preferences
  • Third-party cookies and analytics

You can manage your cookie preferences through our cookie consent banner.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and employee training
  • Secure payment processing systems

10. International Transfers

Your personal data is primarily processed within the UK. If we transfer data outside the UK/EEA, we ensure adequate protection through:

  • Adequacy decisions by the UK government
  • Standard contractual clauses
  • Other appropriate safeguards

11. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16 without parental consent.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date.

13. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

  • Email: [email protected]
  • Phone: +447783437620
  • Address: 74 Hoxton St, London N1 6LP, United Kingdom

14. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator:

  • Website: ico.org.uk
  • Phone: 0303 123 1113