Privacy Policy
1. Who We Are
Picked & Packed Travel is the trading name of Ellie Powell, an independent travel consultant registered with InteleTravel. We operate this website and two associated specialist sites: Elles Cruises (ellescruises.com) and Pint & Pack Travel (pintandpacktravel.com).
For data protection purposes, the data controller is Ellie Powell, Picked & Packed Travel. You can contact us at hello@pickedandpackedtravel.com.
2. What Information We Collect
When you use our contact forms or make an enquiry, we collect:
- Your name and email address
- Phone number, if provided
- Details of your travel enquiry (destinations, dates, number of travellers)
- Any preferences or requirements you share with us voluntarily
We may also collect technical information via cookies and analytics tools, such as your approximate location, the pages you visited, and your device type. See our Cookie Policy for details.
3. How We Use Your Information
We use your personal data to:
- Respond to your travel enquiry and provide quotations
- Arrange bookings on your behalf with our supplier partners
- Send you booking confirmations, travel documents and updates
- Send occasional travel inspiration emails, where you have opted in
- Meet our legal and regulatory obligations as an ATOL/ABTA-protected agent
We do not use your data for profiling, automated decision-making, or targeted advertising. We never sell your data.
4. Legal Basis for Processing
We process your personal data on the basis of:
- Contract performance — to fulfil a booking you have made or requested
- Legitimate interests — to respond to enquiries and maintain business records
- Consent — for marketing communications, which you may withdraw at any time
- Legal obligation — where required by ATOL, ABTA, HMRC or other regulators
5. Who We Share Your Data With
Your information may be shared with:
- InteleTravel — our host travel agency, for booking processing and ATOL protection
- Travel suppliers — airlines, hotels, cruise operators, and transfer companies, solely to arrange your booking
- AWS (Amazon Web Services) — our hosting and email infrastructure provider
- HMRC and regulatory bodies — where required by law
We do not share your data with marketing companies, data brokers, or any third parties for commercial purposes.
6. Data Retention
We retain personal data for as long as necessary to fulfil our contractual obligations and comply with legal requirements. Typically:
- Booking records are retained for 7 years (in line with HMRC guidance)
- Enquiries that do not result in a booking are deleted after 12 months
- Marketing consent records are kept for as long as you remain opted in
7. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention obligations)
- Withdraw consent for marketing communications at any time
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these rights, please contact hello@pickedandpackedtravel.com.
8. Cookies
We use cookies to understand how people use our website and to improve the experience. See our Cookie Policy for full details.
9. Security
We use industry-standard security measures including HTTPS encryption, secure AWS hosting, and access controls. No internet transmission is completely secure, and we cannot guarantee absolute security, but we take reasonable steps to protect your information.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of our websites following any changes constitutes acceptance of those changes.
11. Contact
If you have any questions about this policy or how we handle your data, please contact us at hello@pickedandpackedtravel.com.