1. Who We Are

Aurora Luxury Travels Ltd ('Aurora', 'we', 'us', or 'our') operates at auroraluxurytravels.com and provides premium private hire coach services across the United Kingdom.

Our registered address is: Pan Peninsula Square, Canary Wharf, London E14 9HJ.

Our contact email is: gurpreet@auroraluxurytravels.com

Our contact telephone is: +44 7884 691080

2. What This Privacy Policy Covers

This Privacy Policy explains how Aurora Luxury Travels collects, uses, stores, and protects your personal data when you:

• Visit our website at auroraluxurytravels.com
• Submit an enquiry through our booking enquiry form
• Contact us by telephone, email, or WhatsApp
• Receive a proposal, booking confirmation, or invoice from us
• Travel as a passenger on an Aurora vehicle

This Policy is written in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025.

3. The Personal Data We Collect

3.1 Data You Provide Directly

When you submit an enquiry through our website, we collect the following information:

• Your full name
• Your email address
• Your mobile telephone number (including international country code where provided)
• Your company name (where provided for corporate enquiries)
• Your journey details: pickup location, drop-off location, date, time, passenger count, and luggage information
• Flight number and airline (where provided for airport transfers)
• Event or production company details (where provided)
• Accessibility and mobility requirements (where disclosed)
• Special requests and additional information you choose to share
• Your preferred method of receiving your proposal

3.2 Data Collected Automatically

When you visit our website, we may automatically collect the following technical data:

• Your IP address
• Browser type and version
• Pages visited and time spent on the site
• Referring website or search term
• Device type (desktop, mobile, or tablet)

This data is collected through cookies and analytics tools (including Google Analytics 4) only where you have given your consent through our cookie consent mechanism.

3.3 Data We Do Not Collect

Aurora does not collect, store, or process card payment data. All payments are processed securely through Stripe's hosted payment platform. Aurora never sees or handles your card number, expiry date, or CVV code. Stripe's own privacy policy governs the processing of your payment data.

4. How We Use Your Personal Data

We use your personal data for the following purposes:

• To respond to your enquiry and provide you with a personalised travel proposal
• To confirm, manage, and fulfil your booking
• To send you a booking confirmation, invoice, and journey details
• To send WhatsApp and SMS notifications relating to your journey
• To communicate with you about changes to your booking
• To comply with our legal obligations as a PSV licensed operator
• To confirm vehicle suitability for passengers with accessibility requirements
• To generate automated PDF invoices on payment
• To analyse website performance and improve our service (analytics data only, with consent)

5. Our Legal Basis for Processing Your Data

Under UK GDPR, we rely on the following legal bases to process your personal data:

• Contract performance: processing your name, contact details, and journey information is necessary to fulfil the services you have requested from us or to take steps prior to entering into a contract with you.
• Legal obligation: we may process certain data to comply with our obligations as a PSV licensed operator under UK transport law.
• Legitimate interests: we process website analytics data (where consented) to improve our website and understand how our services are being found online.
• Consent: where we rely on your consent (for example, for analytics cookies), you may withdraw that consent at any time by adjusting your cookie preferences on our website.

6. Accessibility Data — Special Category Processing

Where you disclose mobility, hearing, visual, or other accessibility requirements relating to passengers in your group, this may constitute special category personal data under UK GDPR. We process this information solely for the purpose of confirming vehicle suitability and making appropriate arrangements for your journey. We do not share this information with any third party other than the driver assigned to your booking.

7. Who We Share Your Data With

Aurora does not sell your personal data to any third party. We may share limited data with the following parties where necessary to fulfil your booking:

• Your assigned driver: your name, pickup details, drop-off details, flight number (where applicable), nameboard text, and any accessibility requirements confirmed for your journey.
• Stripe: payment processing. Stripe processes your payment data under its own privacy policy. Aurora only receives confirmation of payment — no card data.
• SendGrid / AWS SES: transactional email delivery (booking confirmations, invoices). These providers process your email address solely to deliver emails on our behalf.
• Twilio / WhatsApp: WhatsApp and SMS notification delivery. These providers process your telephone number solely to deliver booking-related messages on our behalf.
• Google Analytics: anonymised website usage data where you have given consent through our cookie banner.

All third-party processors are subject to data processing agreements and are required to handle your data in accordance with UK GDPR.

8. How Long We Keep Your Data

We retain your personal data for the following periods:

• Enquiry data (where no booking results): deleted after 6 months from the date of enquiry.
• Booking records (confirmed bookings): retained for 7 years from the date of the journey to comply with HMRC record-keeping requirements.
• Invoice and payment records: retained for 7 years in accordance with UK tax legislation.
• Website analytics data: retained in accordance with Google Analytics' standard retention settings, typically 26 months.

After the applicable retention period, your data is securely deleted or anonymised.

9. Your Rights Under UK GDPR

You have the following rights in relation to your personal data held by Aurora:

• Right of access: you may request a copy of the personal data we hold about you.
• Right to rectification: you may ask us to correct inaccurate or incomplete data.
• Right to erasure: you may ask us to delete your personal data, subject to our legal retention obligations.
• Right to restriction: you may ask us to restrict processing of your data in certain circumstances.
• Right to data portability: you may request your data in a structured, machine-readable format.
• Right to object: you may object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at gurpreet@auroraluxurytravels.com . We will respond within one calendar month of receiving your request.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or dial 18001 followed by telephone on 0303 123 1113.

10. Cookies

Our website uses cookies to improve your experience and to analyse how the site is used. We use the following categories of cookies:

• Strictly necessary cookies: required for the website to function. These cannot be disabled.
• Analytics cookies: used to understand how visitors use our site (Google Analytics 4). These are only placed with your consent.
• Preference cookies: used to remember your cookie consent choice.

You can manage your cookie preferences at any time through the cookie consent banner on our website. You can also delete cookies through your browser settings at any time.

11. Data Security

Aurora takes the security of your personal data seriously. We implement the following measures to protect your data:

• All data is transmitted over HTTPS with valid SSL encryption.
• API keys and credentials are stored as environment variables and are never exposed in the browser or source code.
• Payment data is handled entirely by Stripe — Aurora's systems never receive or store card details.
• Access to booking records is restricted to authorised Aurora personnel only.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The most current version will always be available at auroraluxurytravels.com/privacy-policy. The date at the top of this page indicates when the policy was last updated. Where changes are significant, we will notify you by email where we hold your contact details.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

• By email: gurpreet@auroraluxurytravels.com
• By telephone: +44 7884 691080
• By post: Aurora Luxury Travels, Pan Peninsula Square, Canary Wharf, London E14 9HJ