1. Introduction and Contact Details

Golden Magic Passport is deeply committed to safeguarding your privacy and protecting your personal data. This privacy notice explains how we gather and handle your personal information across all touchpoints. This includes when you purchase our goods or services, get in touch with our team, or participate in any of our scheduled events. Additionally, this document outlines your statutory privacy rights, the legal frameworks that safeguard you, and our security protocols.

How to Reach Us

For any inquiries regarding this policy or our data management protocols, please reach out to our Office:

• Email: info@goldenmagicpassport.com
• Address: 167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF.

While you maintain the right to lodge a complaint at any moment with the UK’s data protection regulator—the Information Commissioner’s Office (ICO) at www.ico.org.uk—we kindly ask that you contact our office team first so we can address your concerns directly.

Policy Revisions and Accurate Data

We review this notice regularly and update it periodically. We encourage you to check our website for the latest updates. To ensure we can serve you effectively, please notify us if your personal details change during your time with us, as keeping your records precise and current is essential.

2. Third-Party Interactions and Links

Our digital platforms may contain links to external websites, applications, or plug-ins. Clicking these links or enabling those connections could permit external entities to gather or distribute your data. Golden Magic Passport does not oversee these third-party platforms and cannot be held responsible for their privacy standards. We highly recommend reviewing the specific privacy policy of every external site you visit after leaving ours.

3. Organizational Roles and Our Independent Agents

Under applicable data protection legislation, Golden Magic Passport Limited acts as a «data controller.» This means we are legally responsible for establishing how and why your personal information is stored and utilized, and we are obligated to transparently share this notice with you.

If you are a customer, our independent franchise agents—referred to as Golden Magic Passport agents—frequently operate as «joint controllers» of your data. This implies that we collaborate to determine how your information is handled to fulfill your travel plans, sharing mutual responsibilities under the law.

In specific instances, your Golden Magic Passport agent might act as an independent, separate controller. For example, they independently manage how they market travel options to you or handle direct communications. If you have any questions regarding how an individual agent processes your information, please communicate with them directly.

4. The Categories of Data We Gather

Personal data refers to any information that can uniquely identify a living individual; it excludes completely anonymized records. Depending on your relationship and interactions with us, Golden Magic Passport collects, stores, and transfers various types of data, categorized as follows:

• Identity Data: First name, surname, usernames, title, gender, civil status, date of birth, and comprehensive passport information (such as passport number, expiration dates, and nationality). This covers all primary clients, additional passengers (including children), corporate travelers, and business suppliers.
• Contact Data: Billing addresses, shipping addresses, telephone numbers, and email addresses for the primary contact or booking party.
• Financial Data: Bank account details, credit/debit card information, transaction histories, outstanding balances, or payment failures.
• Booking Data: Payment logs, travel and accommodation records, visa and insurance particulars, relevant travel-related criminal declarations, and resort incident reports.
• Travel Preferences Data: Customer preferences such as dietary needs, medical or mobility accommodations, religious requirements, sexual orientation (if relevant to travel safety), and airport preferences.
• Technical Data: IP addresses, browser specifications, browsing history, time zone configurations, and general operating system metrics from your devices.
• Profile Data: App credentials, inquiry histories, previous bookings, loyalty/frequent flyer scheme numbers, emergency contact details, and feedback or survey submissions.
• Usage Data: Statistics regarding how you interact with our digital platforms, goods, and services.
• Marketing Data: Your stated preferences for receiving promotional updates from us and our partners.
• Telephone Records: Contact details and personal context captured during phone consultations.
• Attendance Data: Vehicle registrations, accessibility requirements, and CCTV footage captured when you visit our offices or attend hosted events.

We also compile and utilize Aggregated Data (like demographic or statistical summaries) for business analysis. Because this data is completely stripped of identifiable traits, it is not legally classified as personal data.

5. Sensitive and Criminal Offence Data

Certain types of sensitive information require heightened security measures. Depending on your travel requirements, Golden Magic Passport may process:

• Health Data: Information regarding medical conditions, physical disabilities, or pregnancies to secure required travel assistance, as well as handling medical emergencies that occur during your trip.
• Origin & Beliefs: Data extracted from official ID photographs and passports indicating nationality, as well as religious or philosophical beliefs that may be inferred from your specific dietary requests.
• Criminal Records: Necessary background details that could directly impact your international entry privileges or car rental eligibilities.

Important Notice: If you choose to withhold mandatory personal or sensitive data required by law or contractual terms (either with us or our third-party travel providers), we may be unable to finalize your bookings. If a cancellation is required due to missing information, we will notify you immediately.

6. How We Collect Your Data

We gather information through several distinct channels:

1. Direct Interactions: Information you provide voluntarily when filling out forms, purchasing services, subscribing to newsletters, entering contests, or contacting us. Phone calls may also be recorded for quality, training, or fraud prevention purposes.
2. From Your Personal Agent: We receive data directly from your Golden Magic Passport agent, collected during your consultations via email, text, phone, or mail.
3. Corporate Clients: If you travel for business, your employer may provide your professional and travel details to us.
4. Automated Technologies: Cookies, server logs, and tracking technologies automatically capture Technical Data as you navigate our website or app.
5. Service Providers & Software: Third-party partners (such as booking platforms and payment processors) supply necessary transaction and travel data.
6. Public Sources & Third Parties: Background details may be sourced via public platforms like Google Analytics, social media, or commercial databases like Companies House for business verifications.

Note: If you provide personal details regarding individuals traveling with you, you must ensure you have their explicit consent to share their information based on these terms.

7. How We Utilize Your Personal Information

Golden Magic Passport strictly processes your information when permitted by legal frameworks. Most frequently, we process data under the following circumstances:

• To fulfill and execute the travel contracts we have established with you.
• To pursue our legitimate business interests (or those of a third party), provided your fundamental privacy rights do not override those interests.
• To comply with mandatory legal or regulatory requirements.

Generally, we only rely on explicit, affirmative consent when handling sensitive data categories or when deploying direct digital marketing communications to individual consumers. We may utilize multiple legal justifications depending on the specific operational purpose for processing your information.

8. Marketing, Profiling, and Promotions

You will automatically receive promotional updates from us if you have previously requested information or bought travel services through our platform, provided you haven’t opted out of these communications.

We may analyze your Identity, Contact, Booking, Travel Preferences, Technical, Profile, and Usage Data to build a tailored overview of what deals, products, or services might appeal to you. We call this process profiling. To enhance your experience, we may collaborate with carefully vetted third-party marketing companies. This allows us to suggest relevant, personalized add-ons for your upcoming trips, such as local excursions, event tickets, or airport transfers.

Our Commitment: We never sell your personal information to external third parties for marketing purposes.

Opting Out

You can request that we halt all marketing messages at any moment by contacting us. Please note that opting out of promotional updates will not halt essential correspondence regarding active or future travel bookings, nor will it alter data held for servicing those arrangements.

You can also revoke your consent to our profiling practices at any time by emailing info@goldenmagicpassport.com.

9. Change of Purpose

Your personal data will only be utilized for the reasons it was originally gathered. If we find it necessary to use your information for an alternate reason, we will ensure that the new purpose aligns closely with our original goal.

If we must utilize your data for an entirely unrelated matter, we will reach out to explain the situation and the legal framework that permits it. Furthermore, please be aware that we may process your data without your explicit knowledge or consent if required or permitted by law.

10. Disclosures of Your Personal Data

To effectively deliver our services, we may share your personal data with internal and external parties for the reasons outlined in our usage guidelines.

Internal Third Parties

• All corporate entities within the current or future Golden Magic Passport corporate group.
• Authorized Golden Magic Passport agents (both current and future), acting as separate or joint controllers depending on your specific travel arrangements.

External Third Parties

• Travel Providers: Airlines, hotels, tour operators, cruise lines, train networks, destination management companies (DMCs), and local excursion providers.
• Professional Experts: Legal counsel, banking partners, external auditors, trust managers, and insurance providers.
• Regulatory Authorities: HM Revenue & Customs, IATA, the Civil Aviation Authority (CAA), and global border control, immigration, and security agencies at your point of departure or destination.
• Service Providers: Partners supporting our core operations, including IT infrastructure, payment processing, marketing assistance, event organization, booking aggregators, and software platforms.
• Business Successors: Third parties involved in the sale, merger, or acquisition of Golden Magic Passport assets or business divisions.
• Credit & Background Checkers: Specialized third parties utilized for corporate customer due diligence.

We require all third parties to strictly respect your privacy rights, uphold rigorous data security standards, and handle your information solely for the authorized purposes specified by law.

11. International Data Transfers

Sharing information within the global Golden Magic Passport group may require transferring your data outside of the United Kingdom. Because we coordinate international itineraries, many of our third-party suppliers are based globally, meaning your data must cross borders to secure your bookings.

When we transfer your data outside the UK, we secure binding contractual agreements with external partners to ensure your information receives a level of protection equivalent to UK standards. This is achieved by either transferring data to nations officially recognized for adequate protection levels or by utilizing UK-approved standard contractual clauses.

12. Data Security

We have implemented robust security protocols to protect your personal details from accidental loss, unauthorized access, alteration, or disclosure. We restrict internal access to your personal files strictly to staff members, contractors, and agents who have a legitimate business need to know. They operate under our direct instructions and are bound by strict legal confidentiality agreements.

We maintain formal response plans to address potential or confirmed data security incidents. If a breach occurs, we will notify you and the appropriate regulatory bodies whenever we are legally required to do so.

13. Data Retention

We hold your personal data only as long as necessary to complete the purposes for which it was gathered, including satisfying any legal, tax, accounting, or regulatory obligations. We may extend this retention period if we anticipate legal disputes or if a formal complaint is raised.

To establish the appropriate retention timelines, we evaluate:

• The volume, sensitivity, and nature of the data.
• The potential risk of harm from unauthorized use or exposure.
• Whether we can achieve our goals through alternative, less intrusive methods.
• Applicable legal statutory limits.

In certain scenarios, we may completely anonymize your information so it can no longer be traced back to you. When anonymized, this data may be kept and utilized indefinitely for statistical purposes without further notification. For detailed timeline inquiries, please contact our data team at info@goldenmagicpassport.com.

14. Your Legal Rights

Depending on data protection laws, you possess the following rights regarding your personal information:

To invoke any of these rights, please message info@goldenmagicpassport.com or write to us at our main administrative address.

Fees, Validation, and Response Expectations

• No Costs Attached: You generally do not have to pay a fee to access your files or exercise your rights. However, we reserve the right to charge a reasonable fee or deny requests if they are clearly repetitive, baseless, or excessive.
• Identity Validation: To ensure maximum security and prevent accidental disclosures to unauthorized individuals, we will require specific information from you to verify your identity before processing any request.
• Response Windows: We aim to reply to all valid requests within one calendar month. If your inquiry is exceptionally complex or numerous, it may take longer. In these instances, we will keep you fully updated on our progress.

Last updated: June 1st 2026