Last updated: August 2026
Introduction
This privacy policy explains how cagioattos collects, uses, and protects your personal information when you use our website and services. We are committed to ensuring that your privacy is protected and that we handle your data responsibly.
Information We Collect
We may collect the following types of personal information:
- Name and contact information including email address
- Demographic information such as postcode and preferences
- Travel preferences and booking history
- Information relevant to customer surveys and offers
- Technical data including IP address, browser type, and device information
How We Use Your Information
We collect and use your personal information for the following purposes:
- Processing and managing your travel bookings
- Communicating with you about your enquiries and bookings
- Improving our services and customer experience
- Sending you information about journeys and experiences that may interest you, with your consent
- Maintaining the security and integrity of our website
- Complying with legal obligations
Legal Basis for Processing
We process your personal data based on one or more of the following legal grounds:
- Contractual necessity: to fulfil our obligations under a booking contract with you
- Consent: where you have given explicit permission for specific uses
- Legitimate interests: to operate and improve our business while respecting your rights
- Legal compliance: to meet regulatory and legal requirements
Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, accounting, or reporting requirements. Booking records are typically retained for seven years after completion of travel for accounting and legal purposes.
Your Rights
Under data protection law, you have the following rights:
- The right to access your personal data
- The right to rectification of inaccurate data
- The right to erasure in certain circumstances
- The right to restrict processing
- The right to data portability
- The right to object to processing
- The right to withdraw consent at any time
To exercise any of these rights, please contact us at [email protected].
Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
Third-Party Services
We may share your information with trusted third parties who assist us in operating our website and conducting our business, including:
- Travel service providers and accommodation partners
- Payment processors
- Email service providers
- Analytics providers
These third parties are contractually obligated to use your information only for the purposes we specify and to protect it appropriately.
International Transfers
Some of our service providers may be located outside the United Kingdom. When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with UK data protection law.
Cookies
Our website uses cookies to enhance your browsing experience. Please see our Cookies Policy for detailed information about the cookies we use and how to manage them.
Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
Contact Us
If you have questions about this privacy policy or how we handle your personal data, please contact us at:
Email: [email protected]
Address: 27 Charlotte Square, Edinburgh, EH2 4ET, United Kingdom