GDPR Data Rights Request

1. Rights you can exercise

• Access — a copy of your personal data and details of how it is used.
• Rectification — correction of inaccurate or incomplete records.
• Erasure — deletion where we no longer need the data and no legal duty requires it.
• Portability — a machine-readable export of data you gave us.
• Restriction — pause processing while a dispute is resolved.
• Objection — to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent — where consent was our legal basis, without affecting past lawful processing.

2. Submit your request

3. Verification and timing

We verify identity before disclosing data, normally by matching booking details, and respond within one month. Complex or multiple requests may be extended by two further months with notice. There is no fee unless a request is manifestly excessive or repetitive.

4. Limits

We may refuse erasure where records must be retained for tax, insurance, chargeback or aviation security purposes, or while a booking is active. Some data must be shared with airlines and border authorities to complete travel; that sharing cannot be opted out of while a trip is booked.

5. Complaints

You may also email booking@wanderluxetravel.com or lodge a complaint with your national supervisory authority (or the UK ICO). We would appreciate the chance to resolve it first.