Privacy Policy

Last updated: February 2026

1. Introduction

BRPTravel.co.uk ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website at brptravel.co.uk (the "Site").

This policy applies to all visitors and users of the Site. By using the Site, you agree to the collection and use of information as described in this policy.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

2.1 Information You Provide Voluntarily

If you use our contact form, you may provide:

  • Your name
  • Your email address
  • The content of your message

We only collect this information when you choose to submit it through our contact form. We do not require registration or account creation to use the Site.

2.2 Information Collected Automatically

When you visit our Site, certain information may be collected automatically through cookies and similar technologies:

  • Usage data: pages viewed, time spent on pages, referring website, browser type, device type and operating system
  • IP address: your Internet Protocol address (which may indicate your approximate geographic location)
  • Cookies: small text files stored on your device (see Section 5 below)

3. How We Use Your Data

We use the data we collect for the following purposes:

  • To respond to your enquiries: if you contact us through our form, we use your name and email to reply
  • To improve our Site: analytics data helps us understand which content is most useful and how visitors navigate the Site
  • To display advertisements: we use Google AdSense to show relevant advertisements, which helps fund the Site and keep it free to use
  • To maintain and secure the Site: server logs help us identify and address technical issues

4. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

  • Consent: when you submit information through our contact form or accept cookies
  • Legitimate interest: for analytics and site improvement purposes, where processing is necessary for our legitimate interests and does not override your rights

5. Cookies

Our Site uses cookies and similar technologies. Cookies are small text files placed on your device that help us provide a better experience.

5.1 Essential Cookies

These are necessary for the Site to function properly. They do not collect personal information and cannot be disabled.

5.2 Analytics Cookies

We use Google Analytics to understand how visitors use our Site. Google Analytics uses cookies to collect anonymous usage data including pages visited, time on site and traffic sources. This data is aggregated and does not personally identify you.

  • Provider: Google LLC
  • Purpose: website usage analysis
  • Data collected: anonymised usage statistics
  • Privacy policy: policies.google.com/privacy

5.3 Advertising Cookies

We use Google AdSense to display advertisements on our Site. Google AdSense may use cookies to serve ads based on your prior visits to our Site and other websites. These cookies enable Google and its partners to show relevant advertisements.

  • Provider: Google LLC (AdSense, publisher ID: ca-pub-6400987422522002)
  • Purpose: personalised advertising
  • Opt out: you can opt out of personalised advertising by visiting Google Ads Settings or www.aboutads.info

5.4 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. Please note that disabling cookies may affect the functionality of some parts of the Site.

6. Third-Party Services

We use the following third-party services that may process your data:

Service Provider Purpose
Google AdSense Google LLC Display advertisements
Google Analytics Google LLC Website usage analysis
Google Fonts Google LLC Web font delivery
Font Awesome Fonticons, Inc. Icon delivery via CDN
Flag Icons jsDelivr / GitHub Country flag icons via CDN

Each of these services has its own privacy policy governing the use of your data. We encourage you to review their policies. Google LLC participates in the EU-US Data Privacy Framework for transfers of personal data from the UK/EEA to the US.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:

  • Contact form submissions: retained for up to 12 months, then deleted
  • Analytics data: retained by Google Analytics for 26 months in anonymised form
  • Server logs: retained for up to 90 days

8. Data Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, misuse or alteration. Our Site is served over HTTPS, which encrypts data transmitted between your browser and our server.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.

9. Your Rights Under UK GDPR

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access: you can request a copy of the personal data we hold about you
  • Right to rectification: you can ask us to correct inaccurate data
  • Right to erasure: you can ask us to delete your personal data
  • Right to restriction: you can ask us to limit how we process your data
  • Right to data portability: you can request your data in a machine-readable format
  • Right to object: you can object to processing based on legitimate interest
  • Right to withdraw consent: where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us through our contact page. We will respond within one month of receiving your request.

10. Children's Privacy

Our Site is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has submitted personal data through our Site, please contact us and we will take steps to delete it.

11. International Data Transfers

Some of our third-party service providers (notably Google LLC) may process your data outside the United Kingdom. Where data is transferred internationally, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or certification under an adequacy framework recognised by the UK.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

13. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.

14. Contact

For any questions or requests regarding this Privacy Policy or your personal data, please contact us through our contact page.