How StoryTailor collects, uses and protects the personal data of everyone who gets in touch with us, in accordance with the GDPR.
STORYTAILOR SRL, a travel organiser established in Belgium (registered office: 46, rue Louis Socquet, 1030 Brussels · company number (BCE/VAT): BE0738.680.437), is the data controller for the personal data described in this policy. For any question about this policy or your data, contact us at info@storytailor.travel or +32 474 09 32 11.
We collect personal data that you provide to us directly, for example when you:
We do not knowingly collect sensitive categories of data (Article 9 GDPR) except where you volunteer it because it is necessary for your trip (for example, a medical condition relevant to travel or dietary requirements linked to religious belief) — such data is used solely to arrange your journey safely and is not used for any other purpose.
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Responding to your enquiry and preparing a travel proposal | Steps taken at your request prior to entering into a contract (Art. 6(1)(b)) |
| Organising and managing your booked journey | Performance of a contract (Art. 6(1)(b)) |
| Sending you our newsletter or travel inspiration | Consent (Art. 6(1)(a)), which you may withdraw at any time |
| Accounting, invoicing and legal record-keeping | Legal obligation (Art. 6(1)(c)) |
| Improving our services and preventing misuse of the site | Legitimate interest (Art. 6(1)(f)) |
Enquiry data from prospective travellers who do not book a journey is kept for a limited period ([to be completed, e.g. 24 months]) from your last contact with us, after which it is deleted or anonymised, unless you ask us to delete it sooner. Data related to a booked journey is kept for the duration of statutory limitation periods under Belgian law (in particular the 2-year period applicable to package travel claims under the Act of 21 November 2017, and the longer periods applicable to accounting records under Belgian tax law). Newsletter data is kept until you unsubscribe.
We share personal data only where necessary to arrange your journey or operate our business, with:
We do not sell your personal data to third parties.
Some of the providers referred to above (for example, Google) may process data outside the European Economic Area. Where this occurs, we rely on the safeguards recognised under Chapter V GDPR, in particular the European Commission's Standard Contractual Clauses or an applicable adequacy decision, as implemented by that provider.
This website uses a minimal amount of local browser storage (not a tracking cookie) to remember that you have already seen the entrance animation on your first visit in a session, and does not currently use third-party advertising or analytics cookies. Some pages load Google Fonts directly from Google's servers for typography purposes, which involves your browser connecting to Google's infrastructure; no advertising identifiers are set by this. [StoryTailor: update this section if analytics tools (e.g. Google Analytics) or advertising pixels are added in future — a cookie consent banner would then be required under Belgian ePrivacy rules.]
Under the GDPR, you have the right to:
To exercise any of these rights, contact us at info@storytailor.travel. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit, autoriteprotectiondonnees.be).
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or misuse, appropriate to the sensitivity of the data concerned. No method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.
We may update this policy from time to time to reflect changes in our practices or in the law. The date at the top of this page indicates when it was last revised.