Privacy policy
We are WinuHolidays, and we are committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data when you use our website.
This policy may be updated. We will inform you of significant changes and recommend that you review it regularly.
What information do we collect?
We collect the following categories of data:
- Information you provide to us: First name, last name, email address, postal address, phone number, transaction details, marketing preferences, communications with our customer service.
- Technical and usage data: IP address, browser type, device used, pages visited, searches performed, completed transactions, date and time of connections.
- Information received from third parties: Limited billing data provided by our payment provider (name, email address, billing address).
What are our purposes?
Our purposes include:
- Processing orders and fulfilling contracts
- Managing customer service
- Preventing fraud and ensuring site security
- Sending marketing communications
- Complying with legal and tax obligations
- Analyzing site performance and improving services
You may withdraw your consent to marketing communications at any time by contacting us or through the unsubscribe links included in our emails.
How long do we retain your personal data?
We retain your data only for as long as necessary to fulfill the purposes mentioned above.
- Customer data: retained for 5 years after the last interaction (in accordance with legal obligations).
- Billing data: retained for 10 years to meet tax obligations.
- Marketing data: retained for 3 years after the last contact or until you withdraw your consent.
- Technical logs: retained for 6 months to 1 year for security and fraud prevention.
After these periods, your data is deleted or anonymized.
With whom do we share your personal data?
We share your data only when necessary with:
- Service providers (e.g., payment services, hosting, delivery, analytics, and communication tools)
- Judicial or administrative authorities, if required by law
- Our legal advisors and insurers, in case of litigation
- A potential buyer, in case of sale or merger of our company
Are your data transferred outside the European Union?
Our servers are located within the UK, but some of our data may be transferred, notably to the United States. In such cases, we ensure that these transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission or by companies certified under the Data Privacy Framework (DPF).
What about cookies?
We use cookies to enhance your experience on our site.
- Essential cookies: required for the site to function.
- Analytical cookies: help us measure audience and improve services (e.g., Google Analytics).
- Advertising cookies: used to personalize ads and measure their effectiveness (e.g., Google Ads, Facebook Pixel).
You can manage your preferences via our consent banner or your browser settings. Non-essential cookies (analytical and advertising) require your explicit consent before activation.
What are your rights?
- Access your data and obtain a copy
- Correct incorrect information
- Request deletion of your data (except legal obligations)
- Limit or object to certain processing
- Withdraw your consent at any time for marketing
- Request portability of your data to another provider
How to exercise your rights?
You can contact us at contact@winuholidays.com for any request. We will respond within a maximum of 30 days.
If you believe your rights are not being respected, you can contact the Information Commissioner’s Office (ICO) in the UK or your local data protection authority (e.g., CNIL in France).
For any questions or requests, you can write to us at: contact@winuholidays.com