Privacy Policy
BBTB Ltd, trading as Brown Boy Travels Shop (“BBTS”), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website or engage with our services. It is written in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Data controller: BBTB Ltd, trading as Brown Boy Travels Shop, Company No. 14927370, registered in England and Wales.
Contact: contact@brownboytravels.shop
2. Information We Collect
2.1 Information you provide directly
- Full name
- Email address
- Phone number
- Country of residence
- Travel preferences and wellness goals
- Information submitted through consultation forms or retreat bookings
- Information shared during WAJD sessions or consultations (held in strict confidence)
2.2 Automatically collected information
- IP address
- Browser type and device information
- Pages visited and time spent on site
- Cookies and tracking data
3. How We Use Your Information
We use your personal data to:
- Respond to consultation and booking requests
- Design personalised travel and wellness experiences
- Communicate with you about your services and bookings
- Process deposits and payments through third-party payment processors
- Fulfil our legal and contractual obligations
- Improve the website and service quality
- Send updates or marketing communications where you have opted in
4. Payment Data
BBTS does not store, process or retain credit card or debit card data. All payment transactions are handled directly by third-party payment processors who comply with PCI DSS standards. BBTS receives only confirmation of payment, not card details. You should refer to the relevant payment processor’s privacy policy for information on how your card data is handled.
5. Legal Basis for Processing
We process your data under the following lawful bases under the UK GDPR:
- Consent — where you have given us clear permission to process your data for a specific purpose.
- Contractual necessity — where processing is required to fulfil a service you have engaged us for.
- Legitimate interests — where processing is necessary for our legitimate business interests, provided these are not overridden by your rights.
- Legal obligation — where processing is required to comply with applicable law.
6. Sharing of Information
We may share limited personal data with:
- Travel partners and suppliers necessary to fulfil your booking
- Payment processors for deposit and fee transactions
- IT and hosting service providers
- Legal or regulatory authorities where required by law
All third parties with whom we share data are required to maintain confidentiality and appropriate data protection standards. We do not sell your personal data to any third party.
7. WAJD and Consultation Confidentiality
Information disclosed during a WAJD session or consultation is treated with strict confidentiality. It will not be shared with any third party except:
- Where required by law
- Where the facilitator has a duty of care obligation that cannot be overridden by confidentiality (for example, in cases of serious risk of harm)
Notes from sessions, where kept, are stored securely and are not accessible to any third party. Clients may request deletion of session notes at any time.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These include secure data storage, access controls and encryption where appropriate.
No credit card or payment card data is stored on our systems at any time.
9. Data Retention
We retain personal data only for as long as necessary to provide services, fulfil legal obligations and resolve disputes. Where data is no longer required, it is securely deleted or anonymised. Session notes from WAJD or consultation sessions are retained for a maximum of one year unless the client requests earlier deletion.
10. Cookies and Tracking
We use cookies to improve user experience, analyse website traffic and support site functionality. You may manage or disable cookies through your browser settings. Disabling cookies may affect the functionality of certain parts of the website. We use Facebook Pixel and LinkedIn Insight Tag for marketing analytics. These are subject to the respective privacy policies of Meta and LinkedIn.
11. Testimonials and Media
Where you provide a testimonial, we may display your first name, country and feedback on our website. We will always seek your consent before doing so. No other personal identifying information will be published without your explicit written permission.
12. International Data Transfers
As we operate internationally, your data may be processed or transferred outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions, to protect your rights under the UK GDPR.
13. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request erasure of your data where we no longer have a lawful basis to hold it
- Restrict or object to processing in certain circumstances
- Withdraw consent at any time where processing is based on consent
- Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk
To exercise any of these rights, contact us at: contact@brownboytravels.shop
14. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies before submitting personal information.
15. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with the date of the most recent revision. Where changes are material, we will notify existing clients directly.
16. Contact Us
BBTB Ltd, trading as Brown Boy Travels Shop
Company No. 14927370, registered in England and Wales
Email: contact@brownboytravels.shop
Website: https://brownboytravels.shop
For data protection queries or to exercise your rights, please write to us at the email above.