Privacy
Policy

Overview

Corsini Travel ("we", "us", "our") operates as a bespoke luxury travel company. We take the privacy of our clients, partners, and website visitors extremely seriously. This Policy explains what personal information we collect, why we collect it, how we use it, and the rights you hold over it.

This Policy applies to all data processing activities carried out by Corsini Travel, including through our website, email communications, and direct client services. By using our website or engaging our services, you acknowledge this Policy.

Data We Collect

We collect information in the following ways:

• Contact & enquiry data — name, email address, phone number, and the content of messages you submit through our contact or enquiry forms.
• Travel preferences — destination interests, travel dates, group size, dietary requirements, and any special requests you share with our team.
• Agent registration data — company name, company type, country, username, and credentials provided during partner registration.
• Technical data — IP address, browser type, operating system, referring URLs, pages visited, and session duration collected automatically when you use our website.
• Communications — records of email, telephone, and WhatsApp exchanges between you and our team, retained for service quality and legal purposes.

We never collect sensitive categories of personal data (health, religion, political opinion) unless you voluntarily provide them for travel logistics purposes, with your explicit consent.

How We Use Your Data

We use your personal data only for legitimate, disclosed purposes:

• To respond to enquiries and plan your bespoke journey.
• To provide, manage, and improve our travel services.
• To send booking confirmations, itinerary documents, and relevant travel information.
• To manage your travel agent or partner account.
• To send occasional editorial updates (The Journal newsletter) — only with your explicit consent, which you may withdraw at any time.
• To comply with legal obligations, including financial record-keeping and fraud prevention.
• To analyse website usage patterns and improve site performance.

We do not use your data for automated decision-making or profiling that has legal or similarly significant effects on you.

Data Sharing

We share personal data with third parties only where strictly necessary to deliver your journey:

• Travel suppliers — hotels, villa managers, transportation providers, and local guides require certain personal details to fulfil bookings.
• Payment processors — securely handle transaction data; we do not store full card details.
• Technology providers — hosting, email, and CRM providers operating under data processing agreements with strict confidentiality obligations.

We never sell, rent, or trade your personal information to any third party for marketing purposes. We never share client itinerary details, preferences, or travel plans with any party not directly involved in the delivery of your service.

Cookies

Our website uses cookies to provide a functional and personalised experience. We categorise cookies as follows:

• Essential — required for the website to function (session management, security). Cannot be disabled.
• Analytics — help us understand how visitors use the site (page views, time on page). Used only with your consent.
• Preference — remember your language or display preferences.

You may adjust cookie settings at any time via your browser preferences. Disabling non-essential cookies will not affect your ability to use the site.

Your Rights

Subject to applicable law, you hold the following rights over your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your data where we have no legal obligation to retain it.
• Portability — receive your data in a structured, machine-readable format.
• Restriction — request that we limit processing in certain circumstances.
• Objection — object to processing based on legitimate interests or for direct marketing.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.

To exercise any right, please contact us at privacy@corsinitravels.com. We will respond within 30 days.

Data Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include encrypted data transmission (TLS), access controls, and regular security reviews.

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware.

Data Retention

We retain personal data only as long as necessary for the purposes stated in this Policy:

• Client enquiry and booking records — 7 years (financial and legal obligations).
• Marketing consent records — until you withdraw consent.
• Website analytics data — 26 months.
• Agent account data — for the duration of the partnership plus 3 years.

Contact Us

For any privacy-related queries, requests, or complaints, please contact:

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your data appropriately.