Privacy Policy

Effective Date: August 27, 2026

At Allergy Aware Travel Concierge, we respect your privacy and are committed to protecting the personal data you share with us. Because our travel concierge services specialize in allergy awareness, allergy mitigation, and risk-aware travel planning, we must collect and process sensitive information to ensure your safety.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or communicate with us.

1. Information We Collect

To provide specialized, risk-aware travel planning, we collect several categories of information:

Personal Identification Information: Name, email address, phone number, billing address, date of birth, and passport details.

Health and Medical Information (Special Category Data): Specific details regarding your allergies, severity of reactions, dietary restrictions, medical contraindications, emergency medication requirements (e.g., EpiPen carrying status), and medical action plans.

Travel Preferences and Information: Travel dates, destinations, flight details, hotel preferences, and specific dining or accommodation requests related to allergy mitigation.

Technical and Usage Data: IP address, browser type, operating system, and browsing behavior on our website collected via cookies and similar tracking technologies.

2. How We Use Your Information

We use the collected data strictly to deliver a safe, personalized concierge experience:

• To evaluate allergy risks associated with destinations, transit, and accommodations.
• To communicate with airlines, hotels, tour operators, and restaurants regarding your specific safety needs.
• To manage bookings, process payments, and fulfill your service requests.
• To provide emergency support and share critical risk-mitigation data with you during your travels.
• To comply with legal obligations and protect your vital interests in health emergencies.

3. Legal Basis for Processing (For UK/EU Users)

If you reside in the UK or European Economic Area (EEA), we process your data under the following legal frameworks:

• Consent: We require your explicit, affirmative consent to process your health and allergy data. You may withdraw this consent at any time, though doing so will limit our ability to provide allergy-mitigation services.
•  
• Contractual Necessity: To perform the travel concierge services you request.
•  
• Vital Interests: To protect your life or health in an emergency situation where you are physically or legally incapable of giving consent.

4. How We Share Your Information

We do not sell your personal data. To execute your travel itinerary safely, we share your information with trusted third parties only as necessary:

• Travel Suppliers: Airlines, hotels, transport providers, and restaurants explicitly notified of your allergy profiles to secure safe accommodations.
•  
• Local On-Ground Handlers: Specialized guides or emergency medical contacts at your destination.
•  
• Service Providers: Secure payment processors, IT hosting services, and customer management software.
•  
• Legal Requirements: Authorities or medical professionals if required by law or during a critical health crisis.

5. International Data Transfers

Your travel destinations may require us to transfer your personal and medical information outside of your home country (e.g., outside the UK/EEA). Please note that some destinations may not have data protection laws as strict as those in your home jurisdiction. We take appropriate measures to ensure your data receives an adequate level of protection wherever it is processed.

6. Data Security

We implement strict technical and organizational security measures to protect your sensitive health data from unauthorized access, loss, alteration, or disclosure. This includes encrypted data transmission, restricted access controls for staff, and secure third-party storage solutions.

7. Data Retention

We retain your personal and health information only as long as necessary to fulfill your travel bookings, comply with legal and accounting obligations, or resolve potential disputes. If you request the deletion of your account, we will securely delete or anonymize your data unless legally required to retain it.

8. Your Legal Rights

Depending on your location, you have specific rights regarding your personal data:

• Access: The right to request copies of the personal data we hold about you.
• Correction: The right to request that we correct inaccurate or incomplete information.
• Erasure ("Right to be Forgotten"): The right to request that we erase your personal data under certain conditions.
• Restrict Processing: The right to limit how we use your health or personal data.
• Data Portability: The right to request the transfer of your data to another organization.

To exercise any of these rights, please contact us using the details below.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of any material changes by posting the updated policy on this page with a revised "Effective Date."

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your sensitive information, please contact us at:

• Business Name: [Insert Business Name]
• Email Address: [Insert Email Address]