Privacy Policy
Entity: Tin Trips LTD (“the Company”)
Effective Date: April 3, 2026
Version: 2026.Legal.01
1. Unified Global Governance
Tin Trips LTD operates a global travel ecosystem. This policy provides a universal data protection standard that meets or exceeds the requirements of the UK GDPR, EU GDPR, Canada’s PIPEDA, South Africa’s POPIA, and all U.S. State Privacy Statutes (including CA, MD, TX, VA, and FL).
2. Data Minimization & "Strict Necessity" (Maryland/UK Compliance)
We adhere to the principle of "Strict Necessity. " We bifurcate data collection to prevent the unauthorized sharing of sensitive information:
3. Automated Processing & Profiling Disclosure
We utilize automated technologies to enhance your experience.
4. United States 50-State Supplemental Notice
We grant a "Universal Privacy Standard" to all residents of the United States:
5. SMS & Telemarketing Exclusion
Tin Trips LTD does not engage in automated telemarketing or SMS marketing.
6. International Data Transfers
We transfer data to Mailchimp servers in the United States. We utilize the UK International Data Transfer Agreement (IDTA) and EU Standard Contractual Clauses (SCCs) to ensure that your data receives a level of protection "essentially equivalent" to that in your home jurisdiction.
7. Third-Party Data Processors
Your data is processed by the following categories of service providers:
8. Data Retention & Security
9. Exercise of Rights & Verification
To exercise your rights (Access, Portability, Deletion, or Correction), contact: Data Privacy Officer: [email protected]
Verification Protocol: To protect your privacy, we require you to verify your identity via the email address on file before we fulfill any data request. We respond to all verified requests within 30 days (UK/EU) or 45 days (US).10.
10. Contact Information
Tin Trips LTD 30 High Street High Wycombe, England HP11 2AG
Email: [email protected]
Effective Date: April 3, 2026
Version: 2026.Legal.01
1. Unified Global Governance
Tin Trips LTD operates a global travel ecosystem. This policy provides a universal data protection standard that meets or exceeds the requirements of the UK GDPR, EU GDPR, Canada’s PIPEDA, South Africa’s POPIA, and all U.S. State Privacy Statutes (including CA, MD, TX, VA, and FL).
2. Data Minimization & "Strict Necessity" (Maryland/UK Compliance)
We adhere to the principle of "Strict Necessity. " We bifurcate data collection to prevent the unauthorized sharing of sensitive information:
- Marketing Phase (Top of Funnel): We collect only Identity Data (Name, Email) and
- Technical Data (IP, Pixel ID). This is used for lead nurturing via Mailchimp and ad optimization.
- Booking Phase (Bottom of Funnel): Sensitive data (Passport details, health/dietary requirements) is collected only after a formal quote is accepted. This data is logically isolated from our marketing pixels to ensure it is never "shared" with third-party ad platforms (Meta/Google).
3. Automated Processing & Profiling Disclosure
We utilize automated technologies to enhance your experience.
- Profiling: We use pixels and CRM logic to categorize your travel interests (e.g., "Luxury Safari" vs. "Remote Work"). This allows us to serve you relevant content.
- No High-Risk ADMT: We do not use Automated Decision-Making (ADMT) for high-risk purposes, such as determining creditworthiness or insurance eligibility, without human intervention.
4. United States 50-State Supplemental Notice
We grant a "Universal Privacy Standard" to all residents of the United States:
- Notice at Collection: We collect Identifiers, Commercial Information, and Internet Activity.
- Right to Opt-Out of "Sharing": We share identifiers with Meta, Google, and TikTok for cross-contextual behavioral advertising. You have the absolute right to opt-out.
- Global Privacy Control (GPC): We honor GPC browser signals. If your browser sends a GPC signal, we automatically treat it as a request to opt-out of all data sharing for targeted ads.
- Right to Appeal: If we decline a request to access or delete your data, you may appeal our decision within 30 days by emailing [email protected].
5. SMS & Telemarketing Exclusion
Tin Trips LTD does not engage in automated telemarketing or SMS marketing.
- We do not use automatic telephone dialing systems (ATDS) to send promotional texts.
- Any phone number provided is used strictly for 1-to-1 travel coordination and is never shared with third-party "affiliates" for promotional purposes.
6. International Data Transfers
We transfer data to Mailchimp servers in the United States. We utilize the UK International Data Transfer Agreement (IDTA) and EU Standard Contractual Clauses (SCCs) to ensure that your data receives a level of protection "essentially equivalent" to that in your home jurisdiction.
7. Third-Party Data Processors
Your data is processed by the following categories of service providers:
- Marketing Automation: Mailchimp (Intuit).
- Advertising & Analytics: Meta Platforms, Google LLC, TikTok (ByteDance).
- Logistics: Airlines, Hotels, and Tour Operators (limited to data required for booking fulfillment).
8. Data Retention & Security
- Retention: Lead data is archived/deleted after 24 months of inactivity. Financial records are retained for 7 years per UK statutory requirements.
- Security: We utilize TLS 1.3 encryption for all web traffic and multi-factor authentication (MFA) for all internal data access.
9. Exercise of Rights & Verification
To exercise your rights (Access, Portability, Deletion, or Correction), contact: Data Privacy Officer: [email protected]
Verification Protocol: To protect your privacy, we require you to verify your identity via the email address on file before we fulfill any data request. We respond to all verified requests within 30 days (UK/EU) or 45 days (US).10.
10. Contact Information
Tin Trips LTD 30 High Street High Wycombe, England HP11 2AG
Email: [email protected]