Data Protection Policy
​ALTITUDE LUXURY TRAVEL
Address: Workstation, 15 Paternoster Row, Sheffield, S1 2BX, United Kingdom
Date: January 2024

​1. Terms & Definitions

• Data Controller: The person who decides what personal information Altitude Luxury Travel will hold and how it will be used.
• Data Protection Act 1998 & General Data Protection Legislation: UK legislation for responsible use of personal information.
• Data Protection Officer: Responsible for ensuring compliance with the Data Protection Act 1998.
• Consumer: The person whose personal information is processed by Altitude Luxury Travel (e.g., staff, business contacts, suppliers, customers).
• Explicit Consent: A consumer's specific agreement to process their personal information. Necessary for processing sensitive data.
• Information Commissioners Office (ICO): The UK authority overseeing the Data Protection Act 1998.
• Processing: Collecting, amending, handling, storing, or disclosing personal information.
• Personal Information: Details about individuals that enable identification (e.g., name, address, phone, email).
• Sensitive Data: Includes racial/ethnic origin, political affiliations, religion, trade union membership, health, sexuality, criminal record.

​2. Introduction
Altitude Luxury Travel collects and uses information about customers and potential customers to carry out its work, adhering to the Data Protection Act 1998 and GDPR.

​3. Data Controller

• Nominated Officer: Robert Burley
• Responsibilities: Determines use of personal information, notifies the Information Commissioner about data usage.

4. Disclosure
Altitude Luxury Travel may share data with agencies like police and local authorities. Disclosure scenarios include legal obligations, protecting vital interests, public information, legal proceedings, equal opportunities monitoring, and providing confidential services without consent.

Principles of Data Protection (as per Data Protection Act 1998 and GDPR)

• Processed fairly and lawfully.
• Obtained for specific, lawful purposes.
• Adequate, relevant, and not excessive.
• Accurate and up-to-date.
• Not kept longer than necessary.
• Processed in accordance with data subject's rights.
• Securely kept.
• Not transferred outside the EEA without adequate protection.

​Operational Guidelines

• Fair collection and use of information.
• Legal specification of information use.
• Collection of appropriate information to fulfill operational needs or legal requirements.
• Maintenance of information quality.
• Full exercise of data subjects' rights, including access and correction.
• Technical and organisational security measures.
• Non-transfer of personal information abroad without suitable safeguards.
• Fair treatment regardless of age, religion, disability, gender, sexual orientation, or ethnicity.
• Clear procedures for responding to information requests.

5. Data Collection
Data is collected with informed consent, ensuring the consumer understands the need, use, and consequences of data collection.

6. Data Storage
Information about service users is stored securely, accessible only to authorized personnel, and disposed of appropriately.

7. Data Access and Accuracy
​Consumers can access their information and request updates. Altitude Luxury Travel ensures compliance, training, supervision, and regular review of data management practices.

For queries: Contact Data Protection Officer Robert Burley at
[email protected]