Privacy Policy

This policy explains what personal data SKYMIA collects, how it is used, and your rights in relation to it.

1. Who We Are

SKYMIA is a UK-based small-group travel company. In this Privacy Policy, “SKYMIA”, “we”, “us”, and “our” refers to the business operating under that name.

We are committed to protecting your personal data and respecting your privacy. This policy explains what data we collect, how we use it, and your rights in relation to it.

If you have any questions about how we handle your data, please contact us at: hello@skymiatravel.com

2. What Data We Collect

We collect personal data when you interact with SKYMIA, including when you submit an application, make a booking, or contact us. The data we collect may include:

• Full name
• Email address and phone number
• Date of birth and nationality
• Passport details (where required for trip logistics)
• Emergency contact information
• Travel history and preferences
• Responses to application questions
• Payment information (processed securely via our payment provider)
• Correspondence with SKYMIA

3. How We Use Your Data

We use your personal data for the following purposes:

• To assess and process your trip application
• To manage your booking and communicate trip details
• To arrange accommodation, transfers, and experiences on your behalf
• To send pre-trip information, itineraries, and host communications
• To respond to enquiries and provide customer support
• To comply with legal obligations
• To improve our services based on your feedback

We will only use your data for the purposes for which it was collected. We will not use your data for automated decision-making or profiling.

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: processing is necessary to fulfil our obligations to you as a guest
• Legitimate interests: to operate and improve our business in a way that does not override your rights
• Legal obligation: where we are required to process data to comply with the law
• Consent: where you have explicitly agreed to a specific use of your data

5. How We Share Your Data

We do not sell your personal data. We may share your data with trusted third parties only where necessary to deliver trip services, including:

• Accommodation providers (villa or hotel operators)
• Transfer and transport providers
• Payment processors
• Communication platforms (e.g. WhatsApp for pre-trip group communication)

All third parties are required to handle your data securely and in accordance with applicable data protection law. We will not share your data with any third party for their own marketing purposes.

6. Data Retention

We will retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. In practice, this means:

• Application data for unsuccessful applicants: deleted within 6 months of the application decision
• Booking and guest data: retained for up to 6 years for legal and financial record-keeping purposes
• Marketing communications data: retained until you unsubscribe or request deletion

7. Your Rights

Under UK data protection law (UK GDPR), you have the following rights:

• Right of access: to request a copy of the data we hold about you
• Right to rectification: to request correction of inaccurate data
• Right to erasure: to request deletion of your data in certain circumstances
• Right to restriction: to request that we limit how we use your data
• Right to portability: to receive your data in a structured, machine-readable format
• Right to object: to object to processing based on legitimate interests

To exercise any of these rights, please contact us at hello@skymiatravel.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk if you believe we have not handled your data appropriately.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Payment data is processed by our payment provider and is never stored directly by SKYMIA.

9. International Transfers

Some of our trips take place outside the UK. Where it is necessary to share your data with suppliers in other countries (for example, a villa operator in Thailand), we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on our website. We encourage you to review this policy periodically. Continued use of our services following an update constitutes your acceptance of the revised policy.