Privacy Policy

At Sunlit Marsh, we respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access our website or use our services.

1. Information We Collect

We collect several types of information from and about users of our website and services, including:

1.1 Personal Information

When you book a tour, create an account, sign up for our newsletter, or contact us, we may collect:

• Contact information: Name, email address, postal address, phone number
• Identification information: Passport details, date of birth, nationality
• Payment information: Credit card details, billing address
• Travel preferences: Dietary requirements, accommodation preferences, special assistance needs
• Health information: Medical conditions, disabilities, or allergies that might affect your travel

1.2 Non-Personal Information

As you navigate through our website, we may automatically collect:

• Technical information: IP address, browser type, operating system, device information
• Usage information: Pages visited, time spent on pages, links clicked, search terms used
• Location information: General geographic location based on IP address or more precise location if enabled on your device

2. How We Collect Your Information

We collect information through various methods:

2.1 Direct Interactions

Information you provide when you:

• Create an account or profile on our website
• Book a tour or travel service
• Subscribe to our newsletter
• Request information or assistance
• Complete surveys or provide feedback
• Participate in promotions or contests

2.2 Automated Technologies

As you interact with our website, we may use the following technologies to collect data:

• Cookies: Small files placed on your device that enable website functionality and help us understand how you use our site
• Web beacons: Small electronic files that allow us to count users who have visited certain pages
• Tracking pixels: Tiny graphics with a unique identifier used to track online movements of users
• Log files: Records of website activity that help diagnose problems and improve service

2.3 Third Parties

We may receive information about you from:

• Business partners (e.g., airlines, hotels, activity providers)
• Social media platforms when you interact with our social media presence
• Analytics providers and advertising networks

3. How We Use Your Information

We use the information we collect for various purposes, including:

3.1 Provide and Manage Services

• Process bookings and manage your travel arrangements
• Communicate with you about your bookings or inquiries
• Provide customer support and address issues
• Facilitate payments and complete transactions
• Coordinate with travel suppliers and partners

3.2 Personalization and Improvement

• Personalize your experience on our website
• Recommend destinations and travel options based on your preferences
• Improve our website, products, and services
• Develop new products, services, and features

3.3 Marketing and Communication

• Send promotional emails about new tours, special offers, or other information we think might interest you
• Deliver targeted advertisements based on your interests and online behavior
• Conduct market research and analyze trends
• Measure the effectiveness of our marketing campaigns

3.4 Legal and Security Purposes

• Comply with legal obligations and regulatory requirements
• Enforce our terms and conditions
• Protect our rights, privacy, safety, or property
• Detect and prevent fraud, security breaches, and other potentially prohibited or illegal activities

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

4.1 Contract Performance

Processing is necessary to fulfill our contractual obligations to you, such as arranging your travel or providing requested services.

4.2 Legitimate Interests

Processing is necessary for our legitimate interests, such as managing our business, improving our services, and marketing our products, provided these interests are not overridden by your rights.

4.3 Legal Compliance

Processing is necessary to comply with our legal obligations, such as keeping records for tax purposes or providing information to government authorities when required by law.

4.4 Consent

We process certain data based on your specific consent, such as sending marketing communications or collecting sensitive information. You can withdraw your consent at any time.

5. Disclosure of Your Information

We may share your personal information with:

5.1 Service Providers

We share information with third-party service providers who perform services on our behalf, such as:

• Travel suppliers (airlines, hotels, tour operators, etc.)
• Payment processors and financial institutions
• Customer service providers
• Marketing and advertising partners
• IT and system administration service providers
• Professional advisers (lawyers, bankers, auditors, insurers)

5.2 Business Transfers

If we are involved in a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

5.3 Legal Requirements

We may disclose your information when we believe disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request
• Enforce our policies, including investigation of potential violations
• Detect, prevent, or address fraud, security, or technical issues
• Protect against harm to the rights, property, or safety of Sunlit Marsh, our users, or the public

5.4 With Your Consent

We may share your information with third parties when you have given us your consent to do so.

6. International Transfers

We operate globally and may transfer your personal information to countries other than your country of residence, including to countries that may not provide the same level of data protection as your home country.

When we transfer personal data internationally, we implement appropriate safeguards in accordance with applicable law, which may include:

• Using standard contractual clauses approved by relevant authorities
• Obtaining your explicit consent for certain transfers
• Transferring data to countries deemed to provide adequate protection
• Implementing appropriate security measures to protect your data

7. Data Security

We have implemented appropriate technical and organizational measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. These measures include:

• Encryption of sensitive information
• Secure socket layer (SSL) technology for data transmission
• Access controls and authentication procedures
• Regular security assessments and testing
• Employee training on data protection and security

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including to satisfy legal, accounting, or reporting requirements.

To determine the appropriate retention period, we consider:

• The amount, nature, and sensitivity of the personal data
• The potential risk of harm from unauthorized use or disclosure
• The purposes for which we process the data
• Whether we can achieve those purposes through other means
• Legal, regulatory, and contractual requirements

In some circumstances, we may anonymize your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies to enhance user experience, analyze website usage, and assist in our marketing efforts.

9.1 Types of Cookies We Use

9.2 Managing Cookies

Most web browsers allow you to control cookies through their settings preferences. However, limiting cookies may affect your experience of our website. For more information on how to manage cookies, please visit our Cookie Policy.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

10.1 Access and Information

You have the right to request information about whether we hold personal information about you, and if so, what that information is and why we are holding or using it.

10.2 Rectification

You have the right to request that we correct any personal information about you that is inaccurate or incomplete.

10.3 Erasure

You have the right to request that we delete or remove personal information where there is no good reason for us continuing to process it.

10.4 Restriction

You have the right to request that we restrict the processing of your personal information in certain circumstances.

10.5 Data Portability

You have the right to request that we transfer your personal information to another organization, or directly to you, under certain conditions.

10.6 Objection

You have the right to object to processing of your personal information where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground.

10.7 Automated Decision-making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

10.8 Exercising Your Rights

To exercise any of these rights, please contact us using the details provided in the "Contact Us" section. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information. This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

11. Children's Privacy

Our website and services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information from our systems.

12. Third-Party Links

Our website may contain links to third-party websites, plugins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. We encourage you to read the privacy policy of every website you visit.

13. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the updated privacy policy on our website with a new "Last Updated" date. We encourage you to review this privacy policy periodically to stay informed about how we are protecting your information.

If we make material changes to this privacy policy, we will notify you by email or through a notice on our website prior to the change becoming effective.