Last updated: January 2024
Our Commitment to GDPR
lush-lark is committed to compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We take your privacy seriously and have implemented measures to ensure your personal data is processed lawfully, fairly, and transparently.
Data Controller
lush-lark acts as the data controller for personal information collected through this website and our services. This means we determine how and why your personal data is processed.
Contact details:
Email: [email protected]
Address: 14 Kensington High Street, London, W8 5NP
Lawful Basis for Processing
We process your personal data under one or more of the following lawful bases:
- Contract: Processing necessary to fulfil our travel booking services
- Consent: Where you have given explicit consent for specific purposes
- Legitimate Interest: Where processing is necessary for our legitimate business interests
- Legal Obligation: Where processing is required to comply with the law
Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
Right of Access
You can request a copy of the personal data we hold about you. We will respond to valid requests within one month.
Right to Rectification
If any personal data we hold is inaccurate or incomplete, you have the right to have it corrected.
Right to Erasure
Also known as the "right to be forgotten", you can request deletion of your personal data in certain circumstances. Note that we may need to retain some data for legal or legitimate business purposes.
Right to Restrict Processing
You can request that we limit how we use your personal data while concerns about its accuracy or use are being resolved.
Right to Data Portability
You can request your personal data in a structured, commonly used format to transfer to another service provider.
Right to Object
You can object to processing based on legitimate interests, including direct marketing.
Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing that significantly affect you.
International Data Transfers
When we transfer personal data outside the UK/EEA (for example, to travel suppliers in your destination country), we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.
Data Protection Officer
For any questions about our data processing practices or to exercise your GDPR rights, please contact us at [email protected].
Supervisory Authority
If you believe we have not addressed your concerns satisfactorily, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Updates to This Notice
We may update this GDPR notice periodically to reflect changes in our practices or legal requirements. The most current version will always be available on this page.