What we collect

At inquiry we collect: name, email, phone, group size, approximate travel window, and the preferences you describe. We collect additional detail only once engaged, and only where it is needed to design or deliver your itinerary.

How we use it

To match you with the right specialist, to design your itinerary, and to stay in contact during planning and travel. Nothing else.

What we do not do

• We do not sell personal data.
• We do not share it with third-party marketers.
• We do not run behavioural profiling or advertising retargeting.

How long we keep it

Inquiry data is retained for 24 months. Client engagement data is retained for the life of the engagement plus seven years, in line with legal and tax obligations in our operating jurisdictions.

Your rights (GDPR and CCPA)

You have the right to access, correct, or delete your personal information, and to request a copy of what we hold. To exercise any of these rights, email info@atlasgrouptravel.com. We respond within 30 days.

Cookies & Tracking

We use a small set of cookies and similar technologies. Essential cookies run by default. Analytics and any future marketing cookies load only with your explicit consent, which you can grant, decline, or change at any time using the Cookie preferences link in the footer.

Cookies and storage we may set

Your legal basis (GDPR / ePrivacy)

Essential cookies are set on the legal basis of legitimate interest (Article 6(1)(f) GDPR) where strictly necessary for the site to function. Analytics and any marketing cookies are set only with your prior consent (Article 6(1)(a) GDPR; ePrivacy Directive Article 5(3)). You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Your rights

Under GDPR you have the right to access, rectify, erase, restrict, or object to processing of your personal data, and the right to data portability. To exercise these rights, email info@atlasgrouptravel.com. Under PIPEDA you have equivalent access and correction rights. California residents (CCPA/CPRA) have the right to know, delete, correct, and opt out of sale; we do not sell personal data.

If you are unhappy with how we handle your information, you also have the right to lodge a complaint with your local data protection authority (for example the UK ICO, Ireland DPC, or the Office of the Privacy Commissioner of Canada).

Security

Data is encrypted in transit and at rest. Internal access is limited to the specialists and operations staff working on your engagement.