Privacy Policy
Policy Scope
This Privacy Policy pertains to the use of the website www.topbustourslondon.com and the Top Bus Tours London mobile application, available on both Apple Store and Google Play, and is governed by the regulations of London, including GDPR and the European Union laws. Crossover Tourism ("we" or "us") is a tourism company based in London, and this policy is designed to inform users about the collection and processing of their personal data.
Types of Personal Data Collected
We collect various categories of personal data, including but not limited to identifying information (such as names and birthdates), contact details (such as email and postal addresses), browsing data (including search history and visit dates), and geolocation data.
Purposes of Data Processing
User data is processed for multiple purposes, including managing bookings, maintaining customer relationships, conducting surveys to enhance user experience, providing services, sharing relevant information, performing statistical analysis, and optimizing advertising efforts.
Data Retention
Top Bus Tours London retains user data for the duration of the contractual relationship and as required by legal obligations. Ticketing data is typically retained for a maximum of 48 hours.
Recipients of Personal Data
Entities that may receive user data include Top Bus Tours London, its subcontractors engaged in service provision, and relevant authorities as mandated by law.
Rights of Data Subjects
Users are entitled to various rights under data protection regulations, including the right of access, rectification, restriction of processing, objection to processing, erasure ("right to be forgotten"), and data portability.
Exercising Rights
To exercise their rights, users can contact our designated Data Protection Officer (DPO), providing appropriate identification documents. We endeavor to respond to requests within one month, unless they are particularly complex.
Personal Data Security
Top Bus Tours London employs robust security measures, including encryption and continuous system monitoring, to safeguard user data against unauthorized access, disclosure, alteration, or destruction.
Storage of Personal Data
User data is stored on servers located within the European Union to ensure compliance with GDPR regulations. Additionally, subcontractors outside the EU adhere to GDPR standards for data storage and processing.
Modification of Privacy Policy
We reserve the right to update this Privacy Policy periodically. Users will be notified of any changes, and the updated policy will be made accessible on our website.