Política de Privacidade
Last Updated: September 2026
Mount Zion Ltd is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, use our forms, or book a tour with us.
For the purpose of the UK General Data Protection Regulation (UK GDPR), the data controller is Mount Zion Ltd, 16143130, Verulam Court 275 St. Albans Road, Watford, WD24 5BJ.
1. How We Collect Your Information
We collect personal data directly from you when you complete our booking, enquiry, or medical forms.
Third-Party Form Processor: We use Cognito Forms to securely collect, host, and process all the information you submit to us.
2. The Types of Data We Collect
To arrange and secure your travel itineraries, we may process the following types of data:
Identity Data: Full name, date of birth, gender, and passport details.
Contact Data: Email address, telephone number, and physical address.
Financial Data: Payment details and transaction history.
Booking & Travel Data: Travel preferences, emergency contact details, and travel insurance policy information.
Special Category (Sensitive) Data: Dietary requirements, medical conditions, or mobility needs that you explicitly choose to provide so we can safely operate your tour.
3. How We Use Your Personal Data
We only use your data when the law allows us to. Most commonly, we use it to:
Perform our contract with you: To process your booking, manage your itinerary, and deliver your tour.
Comply with legal obligations: To meet regulatory, tax, accounting, or border control requirements.
Fulfill our legitimate interests: To manage our customer relationship with you and improve our travel services.
4. Who We Share Your Data With
Because we arrange travel, we must share your information with external third parties. We only share the minimum details necessary:
Financial Protection & Payment Processing: All client funds, booking payments, and financial transactions are securely handled through Protected Trust Services (PTS) via their independent Trust Account system. PTS processes this data to ensure your financial protection under UK travel regulations.
Travel Suppliers: Airlines, hotels, transport companies, and local tour guides who help fulfill your specific itinerary.
Service Providers: Cloud storage, IT support, and communication tools that help run our business operations.
Note: Some travel suppliers may be located outside the UK or Europe. We ensure appropriate safeguards are in place before transferring your data internationally.
5. Data Security & Retention
We, alongside our partners Cognito Forms and PTS, use industry-standard security measures to prevent your personal data from being accidentally lost, altered, disclosed, or accessed in an unauthorised way.
We only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including any legal, accounting, or financial reporting requirements (typically 7 years after your tour concludes to comply with UK HMRC and package travel regulations).
6. Your Legal Rights
Under the UK GDPR, you have the right to:
Request access to a copy of your personal data.
Request correction of inaccurate data or erasure of your data.
Object to or restrict the processing of your data.
Withdraw your consent at any time (especially regarding sensitive medical or dietary data).
To exercise any of these rights, please contact us using the details below. You also have the right to lodge a complaint at any time with the Information Commissioner’s Office (ICO) (www.ico.org.uk).
If you have any questions about this privacy policy or how your data is handled, please contact us.
