Privacy Policy

1. Controller

AmpleTravel Limited is the controller for personal data described in this policy. For data protection enquiries contact privacy@ampletravel.com.

2. What we collect

Account and enquiry data — name, business email, company name, country, phone number, business type and expected booking volume, submitted when you register or contact us.

Traveller data — passenger names, contact details, dates of birth and document details, which you provide in order to make a booking. You are the controller for this data; we process it on your instructions in order to make the booking.

Usage data — IP address, browser and device information, pages viewed and referring page, collected to keep the service secure and to understand how the site is used.

Communications — records of your correspondence with our support and sales teams.

3. Why we use it

To create and administer your account; to make, amend and cancel bookings on your instructions; to provide support; to prevent fraud and abuse; to meet legal and accounting obligations; and — where you have not objected — to send relevant service and product updates to your business email address.

4. Legal bases

We rely on contract for account administration and booking fulfilment; legitimate interests for security, fraud prevention, service improvement and business-to-business marketing; legal obligation for accounting and regulatory record keeping; and consent where required for non-essential cookies.

5. Sharing

We share data with the airlines, hotels, wholesalers and payment providers necessary to fulfil a booking; with technology service providers acting as processors under written terms; and with professional advisers, auditors and authorities where legally required.

We do not sell personal data.

6. International transfers

Travel is inherently international, so booking data is transferred to suppliers in the destination country. Where data leaves the UK or EEA we rely on adequacy decisions or standard contractual clauses with appropriate supplementary measures.

7. Retention

Enquiry data that does not become an account is retained for 24 months. Account and booking records are retained for seven years to meet accounting and limitation-period requirements. Server logs are retained for 90 days.

8. Your rights

You may request access to, correction of or deletion of your personal data; object to or ask us to restrict processing; request portability; and withdraw consent where we rely on it. Email privacy@ampletravel.com and we will respond within one month.

You may also complain to your local supervisory authority. In the UK this is the Information Commissioner's Office.

9. Security

We use encryption in transit, access controls on a least-privilege basis, audit logging and regular review of our processors. No system is perfectly secure, but we will notify you and the relevant authority of a qualifying breach without undue delay.

10. Changes

Material changes to this policy will be notified by email to account holders and posted here with a revised date.

---

These documents are drafts provided with the site build and are not legal advice. Have them reviewed by a qualified solicitor and reconciled with your actual supplier contracts and data processors before you rely on them.