Legal
Last updated 18 September 2026
This policy explains what personal data VacoTours collects, why, who it is shared with and how long it is kept. It is a template published as part of the platform and should be reviewed against your own regulatory obligations before it is relied upon.
For a booking we collect the details needed to deliver it: name, email address, telephone number and, where the experience requires it, traveller details such as age or passport number. We collect these because the operator cannot deliver the experience without them.
To take and confirm your booking, to pass it to the operator who will deliver it, to issue your voucher, to handle cancellations and refunds, to prevent fraud, and to meet accounting and tax obligations.
We do not sell personal data, and we do not share it with advertisers.
The operator delivering your experience receives the details they need to deliver it, and nothing beyond that. Payment processors receive what they need to take payment. Where a booking was made through a trade partner, that partner retains their own record of it under their own policy.
Booking records are retained for the period required by accounting and tax law in the relevant jurisdiction, typically seven years. Technical logs are retained for a substantially shorter period. Accounts that are closed have their personal data removed or anonymised, except where a record must be kept for legal reasons.
Depending on where you live you may have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to its processing, and to receive it in a portable form.
To exercise any of these, contact us and we will respond within the period the applicable law requires.
Experiences are delivered worldwide, which means booking details are sometimes transferred to an operator in a different country from your own. Where that country does not have an equivalent data protection regime, the transfer is covered by appropriate contractual safeguards.
We use the minimum necessary: a session cookie to keep you signed in, and a stored preference for your chosen currency and language. Analytics, where used, is configured without cross-site tracking.
Questions about this policy, or a request to exercise your rights, can be sent to hello@vacotours.com.