This policy explains how Gibraltar Jewish Travel & Tours (“we”) handles personal data collected through this website. We act as data controller under the Gibraltar GDPR and Data Protection Act 2004.
What we collect
When you request a booking, send a message or leave a review we store the details you enter (name, email, phone, tour preferences, notes) so we can reply, arrange your tour and keep proper business records. We also store your IP address with these submissions to prevent abuse.
Analytics
We keep simple, cookie-free statistics of page visits (the page, the referring website and the device type). Visitors are counted using a hash that changes every day and cannot identify you.
Cookies
We use an essential session cookie to protect our forms against forgery; it is deleted when you close your browser. If you start filling in the booking form, a second cookie (gjt_cart) lets us save your progress so you can come back to it. It holds only a random code, lasts 60 days, and is removed from our records when you book or press “Remove” on your cart.
Booking reminders
If you enter your email on the booking form but don’t send it, we email you once, about an hour later, with a link to finish your booking. We don’t use your email for anything else unless you book, and we delete unfinished forms after 60 days. To ask us to delete them sooner, just reply to the email.
Payments
Payments are made directly through Revolut or your bank; we never see or store card details.
How long we keep data
Booking records are kept for up to 6 years for accounting purposes. Messages and unpublished reviews are deleted within 2 years.
Your rights
You may ask to see, correct or delete your data, or object to its use, by emailing info@gibraltar-jewish-tours.com. You can also complain to the Gibraltar Regulatory Authority.