Privacy Policy

Introduction

cobalt-mesa respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard information when you visit our website or engage our travel services.

Information We Collect

We may collect and process the following types of personal data:

• Contact information including name, email address, and postal address
• Travel preferences, booking details, and service enquiries
• Payment information necessary to process bookings
• Communication records including emails and consultation notes
• Website usage data through cookies and analytics tools

How We Use Your Information

We use your personal data for the following purposes:

• Processing your travel bookings and service requests
• Communicating with you about your enquiries and bookings
• Providing customer support and travel assistance
• Improving our website functionality and user experience
• Sending promotional communications when you have consented
• Complying with legal and regulatory obligations

Legal Basis for Processing

We process your personal data under the following legal grounds:

• Contractual necessity to fulfil our travel services
• Legitimate business interests in operating our agency
• Your explicit consent for marketing communications
• Legal obligations under UK and EU regulations

Data Sharing and Third Parties

We may share your information with:

• Travel service providers including hotels, tour operators, and transport companies
• Payment processors for secure transaction handling
• Professional advisors such as lawyers and accountants
• Regulatory authorities when legally required

We do not sell your personal data to third parties for marketing purposes.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes secure server hosting, encrypted communications, and access controls.

Data Retention

We retain your personal data only as long as necessary to fulfil the purposes outlined in this policy or to comply with legal requirements. Booking records are typically retained for seven years in accordance with financial regulations.

Your Rights

Under UK data protection law, you have the following rights:

• Access to your personal data
• Correction of inaccurate or incomplete data
• Erasure of your data in certain circumstances
• Restriction of processing under specific conditions
• Data portability to transfer your information
• Objection to processing based on legitimate interests
• Withdrawal of consent for marketing communications

To exercise any of these rights, please contact us at [email protected].

Cookies

Our website uses cookies to enhance your browsing experience. For detailed information about the cookies we use and how to manage them, please see our Cookies Policy.

International Transfers

When booking international travel, your data may be transferred to countries outside the UK and EU. We ensure appropriate safeguards are in place to protect your information in accordance with data protection laws.

Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. The revised policy will be posted on this page with an updated effective date.

Contact Us

If you have questions about this privacy policy or how we handle your personal data, please contact us:

cobalt-mesa
27 Colmore Row
Birmingham B3 2EW
United Kingdom
Email: [email protected]

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters, if you believe your data has been mishandled.