Who we are

World Alliance is a trading name of World Alliance Ltd, a company registered in England and Wales (company number 17365060). Registered office: 35 Ferndale Road, Birmingham, England, B28 9AU. World Alliance Ltd is the data controller. Privacy contact: admin@worldalliance.uk.

Data we collect

• name, email address and phone number
• billing information and payment status (we never store full card details)
• account and order information
• travel preferences, destination and travel dates
• communications and customer support records
• IP address, device and browser information
• website usage and cookie information (subject to your choices)

Why we use it and our lawful basis

• Processing and delivering orders, preparing personalised itineraries, account management — contract.
• Payment processing and fraud prevention — contract and legitimate interests.
• Customer support — contract and legitimate interests.
• Keeping tax, accounting and consent records — legal obligation.
• Website security — legitimate interests.
• Analytics cookies — consent.
• Marketing emails — consent (you can withdraw at any time).

Who we share data with

We share data only where needed, with categories of recipient including: payment processors, hosting providers, email delivery providers, customer relationship tools, analytics providers (only with consent), fraud and security providers, professional advisers, and authorities where the law requires.

International transfers

Some suppliers may process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement / UK Addendum.

How long we keep data

• Order and invoice records — 6 years after the order, for tax and legal purposes.
• Checkout acceptance and consent records — for as long as needed to show compliance, normally 6 years.
• Customer support messages — up to 2 years after your last contact.
• Marketing preferences — until you withdraw consent, plus a record of the withdrawal.
• Account data — while your account is active, then deleted or anonymised unless we must keep it.

Your rights

You have the right to access, correct, delete (where applicable), restrict, object to, and port (where applicable) your data, and to withdraw consent at any time. Email admin@worldalliance.uk. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

Automated decision-making

We do not make decisions with legal or similarly significant effects about you solely by automated means. Our payment provider may use automated fraud checks when you pay; if a payment is declined you can contact us for a manual review.

Security

We use encrypted connections, access controls limited to staff who need them, and trusted providers to protect your data.