Privacy Policy

Loremas Travel Services Limited ("Loremas", "we", "us", or "our") is the data controller responsible for your personal data. We are committed to protecting your privacy and handling your data in an open and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at [email protected].

We may collect and process the following categories of personal data: identity data (name, job title, company name); contact data (email address, telephone number, business address); travel data (travel preferences, loyalty programme numbers, passport details where required); transaction data (booking details and payment records); technical data (IP address, browser type, and usage data via cookies); and communications data (records of correspondence and enquiries).

We use your personal data to provide and manage corporate accommodation and travel services; to process bookings and communicate confirmations and updates; to respond to enquiries submitted via our contact form or email; to comply with legal and regulatory obligations; to improve our website and services through analytics; and to send service-related communications where you have consented or where we have a legitimate interest.

We process your personal data on the following legal bases: contract (where processing is necessary to perform a contract with you or your employer); legitimate interests (where we have a legitimate business interest not overridden by your rights); legal obligation (where we are required to process data to comply with applicable law); and consent (where you have given explicit consent, such as for marketing communications).

We may share your personal data with accommodation providers and other third-party suppliers necessary to fulfil your booking. We do not sell your personal data to third parties.

We may also share data with service providers who assist us in operating our business (e.g. IT systems, email platforms), subject to appropriate data processing agreements.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Booking and transaction records are typically retained for seven years in accordance with UK tax and accounting obligations.

Under UK GDPR, you have the right of access (to request a copy of the data we hold about you); right to rectification (to request correction of inaccurate data); right to erasure (to request deletion of your data in certain circumstances); right to restrict processing; right to data portability; and right to object to processing based on legitimate interests.

To exercise any of these rights, please contact us at [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Our website uses cookies to improve your browsing experience and analyse site traffic. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy at loremas.com/cookies.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.