1. Who we are
Tournity is an online marketplace for tours, activities and travel experiences operated by GOLDEN COAST TRAVEL LTD, a company registered in England and Wales under company number 16712966 ("Tournity", "we", "us" or "our").
For the personal information that we determine how and why to process through the Tournity marketplace, GOLDEN COAST TRAVEL LTD acts as the data controller.
GOLDEN COAST TRAVEL LTD is registered with the UK Information Commissioner's Office (ICO), registration number ZC057541.
2. Scope of this Policy
This Policy applies when you browse Tournity, create or use an account, make or manage a booking, contact customer support, communicate with us, submit a review, or otherwise use customer-facing Tournity services.
Independent Activity Providers may process personal information for their own purposes when delivering an Activity. Their processing is governed by their own privacy obligations and, where applicable, their own privacy notices.
3. Information we collect
Depending on how you use Tournity, we may collect information such as your name, email address, telephone number, country, account details, booking reference, messages, review content, selected language and currency, and information you choose to provide to us.
If you create or use an account, we may also process login and authentication information, account preferences, booking history and information needed to keep your account secure.
4. Booking and participant data
When you make or manage a booking, we may process information required to arrange the Activity, including the Activity selected, date and time, number of participants, participant names or age groups where required, pickup or meeting-point information, hotel or accommodation details, special requests, booking status and booking reference.
Some Activities may require additional information, such as identity or travel-document details, accessibility requirements, dietary information or other participation information. We collect such information only where it is relevant to the Activity, requested by the Activity Provider, required by law, or voluntarily supplied by you.
If you provide information about another participant, you confirm that you are authorised to provide that information for the purpose of the booking.
5. Activity Providers and data responsibility
Tournity is a marketplace and booking intermediary. When you book an Activity, we may provide the identified Activity Provider with the personal information reasonably necessary to confirm, manage, operate and support that booking.
An Activity Provider may process that information as an independent data controller for purposes connected with delivering the Activity, complying with local law, managing safety, communicating operational information or handling its own legal obligations. Tournity does not control every separate processing activity carried out by an independent Activity Provider.
Where possible, we limit supplier access to information relevant to the booking and the operation of the Activity.
6. Payments
Online payments may be processed by authorised third-party payment service providers, including Stripe where enabled. Payment providers may collect and process card, bank, wallet, authentication, fraud-prevention and transaction information under their own privacy terms.
Tournity does not normally receive or store your complete payment-card number. We may receive limited payment information such as payment status, amount, currency, transaction or payment reference, payment method type, refund status and information needed for reconciliation, fraud prevention and customer support.
For bookings paid directly to an Activity Provider on the day of the Activity, the Provider is responsible for its own handling of payment information collected directly from you.
7. Customer support
If you contact the Tournity Help Center or communicate with us about a booking, we may process your contact details, booking reference, the contents of your message, previous correspondence and any information you provide to help us investigate or respond.
Where necessary to resolve a booking issue, we may share relevant parts of your support request with the Activity Provider or another service provider involved in the booking.
8. Device, technical and usage data
When you use Tournity, our systems and service providers may automatically receive technical information such as IP address, browser type, device type, operating system, language, referring page, pages viewed, timestamps, session information, error logs and security-related events.
We use this information to operate the website, maintain security, troubleshoot problems, understand performance, prevent abuse and improve the marketplace.
10. Google services
Tournity may use Google services that support marketplace functionality, such as Google Places or location autocomplete. When you interact with these features, technical information and the location text you enter may be sent to Google in order to return suggested places or addresses.
If other Google analytics or advertising services are enabled on Tournity, they will be used subject to applicable consent requirements and the relevant Google privacy terms.
11. Booking communications and marketing
We use your contact details to send service communications needed for your booking or account, such as confirmations, vouchers, payment notices, schedule or pickup updates, support responses and important security messages.
Where permitted, we may also send promotional or marketing communications. You can opt out of marketing messages at any time using the unsubscribe method provided in the message or by contacting us. Opting out of marketing does not stop essential booking or service communications.
12. Legal bases for processing
Under applicable data-protection law, including the UK GDPR where it applies, we rely on one or more lawful bases depending on the processing activity. These may include:
- Contract: where processing is necessary to take steps at your request before a booking or to provide marketplace, account or booking services.
- Legitimate interests: where reasonably necessary to operate and improve the marketplace, protect accounts, prevent fraud, support customers, manage supplier relationships or establish and defend legal claims, provided those interests are not overridden by your rights.
- Legal obligation: where we must retain or disclose information to comply with tax, accounting, regulatory, law-enforcement or other legal requirements.
- Consent: where applicable law requires consent, for example for certain optional cookies, marketing activities or particular categories of information.
14. International data transfers
Tournity connects customers with Activity Providers in different countries. This means booking information may need to be transferred to or accessed from a country outside the United Kingdom or the country in which you live in order to arrange and operate the Activity.
Where data-protection law requires safeguards for an international transfer, we use an applicable lawful transfer mechanism, such as an adequacy regulation, approved contractual safeguards or another mechanism permitted by law. The exact mechanism can depend on the destination, the recipient and the reason for the transfer.
15. Sensitive or special-category information
Some booking requests may involve information relating to health, disability, accessibility, dietary needs or other information that may receive additional legal protection. Please provide only information that is reasonably necessary for the Activity.
Where information is treated as special-category data under applicable law, we will process it only where a lawful condition applies, which may include your explicit consent or another condition permitted by law. Where necessary for the Activity, relevant information may be shared with the Activity Provider.
16. Security and fraud prevention
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. No internet or storage system can be guaranteed to be completely secure.
We may process account, device, booking and payment-related information to detect suspicious activity, protect customers and suppliers, prevent fraud, enforce our Terms and respond to security incidents.
17. Automated decision-making
Tournity does not currently use its own systems to make decisions that produce legal or similarly significant effects for customers solely by automated means.
Third-party payment or security providers may use automated systems to detect fraud or assess transactions under their own privacy policies. Where applicable law gives you rights in relation to a significant automated decision made by Tournity, we will respect those rights.
18. How long we keep personal information
We keep personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide bookings and support, maintain account and transaction records, comply with legal, tax and accounting obligations, resolve disputes, prevent fraud and enforce agreements.
Retention periods vary depending on the type of data, the booking or account status, legal requirements and whether information is needed for an ongoing claim or investigation. When information is no longer required, we delete it, anonymise it or securely restrict further use where deletion is not immediately possible.
19. Your data protection rights
Depending on the law that applies to you, you may have rights to:
- request access to personal information we hold about you;
- ask us to correct inaccurate or incomplete information;
- ask us to delete information in certain circumstances;
- ask us to restrict processing in certain circumstances;
- receive certain information in a portable format;
- object to processing based on legitimate interests or to direct marketing;
- withdraw consent where processing is based on consent, without affecting earlier lawful processing;
- raise a complaint with a competent data-protection authority.
We may need to verify your identity before responding to a rights request. Some rights are subject to legal exceptions and may not apply in every situation.
20. Children and participant data
Tournity is not intended for children to make bookings or create contractual accounts independently. An adult making a booking may provide information about child participants where required for the Activity.
Adults making bookings for children should provide only the information reasonably necessary for the booking and should ensure they are authorised to provide it.
21. Third-party websites and services
Tournity may contain links to Activity Provider websites or other third-party services. This Privacy Policy does not govern independent websites or services that we do not control. You should review the privacy information provided by the relevant third party.
22. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes to Tournity, our suppliers, technology, legal requirements or data-protection practices. The current version will be published on this page with the updated date shown above.
Where a change materially affects how we use personal information and the law requires additional notice or consent, we will take appropriate steps.
23. Contact and complaints
For privacy questions or to exercise a data-protection right, contact:
GOLDEN COAST TRAVEL LTD
Tournity marketplace
Email: info@tournity.com
Company number: 16712966
ICO registration: ZC057541
If you are in the United Kingdom and are unhappy with how we handle your personal information, you also have the right to complain to the UK Information Commissioner's Office (ICO). We would appreciate the opportunity to address your concern first, but you are not required to contact us before making a complaint.