Privacy Policy
Crossing Travel Company · Last updated 19 October 2026
Crossing Travel Company ("Crossing", "we", "us", "our") respects your privacy. This Policy explains what personal data we collect through crossingtravel.com and in the course of designing and booking travel for you, why we collect it, who we share it with, and the rights you have over it. It is written to comply with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.
1. Who We Are
Crossing Travel Company is the "data controller" of the personal data described in this Policy.
Legal entity: Crossing Travel Company Ltd
Company number: 07399000
Registered office: 10 John Street, London WC1N 2EB
ICO registration number: ZA850619
Contact for data protection queries: sam@crossingtravel.com
2. What Personal Data We Collect
Depending on how you interact with us, we may collect:
Identity and contact data — name, email, phone number, postal address.
Enquiry and booking data — details you provide when making an enquiry or Booking, including travel preferences, dates, party composition, and budget.
Travel documentation data — passport details, date of birth, nationality, visa information, frequent-flyer and loyalty programme numbers, where required to arrange travel.
Special category data — where relevant and volunteered by you, information about health conditions, disabilities, accessibility needs, or dietary requirements (including religious dietary needs), so that we and our Suppliers can accommodate them. We only collect this with your explicit consent and only to the extent necessary for your trip.
Payment data — billing details and payment card data, processed on our behalf by our payment processor.
Communications — records of calls, emails, and messages between you and your advisor.
Messaging data — where you, or the host of an event you are attending, have asked us to keep in touch via WhatsApp, your mobile number and the messages exchanged, processed through Meta's WhatsApp Business platform. You can opt out of WhatsApp messages at any time by replying STOP or telling your advisor.
Marketing preferences — whether you have opted in to receive The Crossing Edit newsletter or other marketing.
Website and technical data — IP address, browser and device type, pages visited, and similar data collected via cookies and analytics tools (see Section 11).
Where a Booking includes other travellers in your party, you are responsible for providing this Policy to them and, where required, obtaining their consent before sharing their data with us.
3. How We Use Your Data and Our Legal Basis
We use your personal data for the following purposes, each with a lawful basis under UK GDPR:
Preparing quotes, itineraries, and Crossings; arranging and administering your Booking — performance of a contract, or steps taken before entering into one.
Sharing necessary details with hotels, airlines, DMCs, guides, and other Suppliers to deliver your trip — performance of a contract.
Processing payments — performance of a contract; legal obligation.
Accommodating disclosed health, dietary, or accessibility needs — explicit consent.
Sending The Crossing Edit newsletter and other marketing — consent where you have opted in, or legitimate interests for existing clients in relation to similar services, with an opt-out on every communication.
Sending event and travel updates by WhatsApp — consent, or performance of a contract where the messages concern a trip or event we are arranging for you.
Improving our service and our website — legitimate interests, balanced against your rights.
Complying with tax, accounting, and anti-money-laundering obligations — legal obligation.
Preventing fraud and protecting our business — legitimate interests.
4. Automated Tools and Our AI Assistant
We use software tools to help our advisors prepare itineraries and respond to enquiries more efficiently. These tools support our advisors' work; they are not used to make any automated decision about you (such as accepting or declining a Booking, or setting an individual price) without human review. If this changes, we will update this Policy and, where required, seek your consent.
5. Who We Share Your Data With
We share personal data, on a need-to-know basis, with:
Suppliers necessary to deliver your trip — hotels, airlines, DMCs, private guides, restaurants, transfer providers, and travel insurers;
Payment processors to process payments securely;
Meta (WhatsApp Business) for guest and client messaging, where you have agreed to it;
Our CRM and operational systems (including Salesforce) used to manage client relationships and bookings;
Our accounts and finance back-office team, who process booking and payment records on our behalf as part of Crossing's own internal operations;
Professional advisors such as our accountants, lawyers, and insurers, where necessary;
Virtuoso and other consortia and partner networks, where this is necessary to secure preferred-partner benefits for your stay;
Regulators or authorities, where required by law; and
A prospective buyer or successor of our business, in the event of a sale, merger, or reorganisation, subject to equivalent protection of your data.
We do not sell your personal data, and we do not sell or rent mailing lists to third parties. We only disclose your data to the categories of recipient listed above, to the extent necessary to deliver your trip or run our business.
6. International Transfers
Because we arrange travel worldwide, your data may be transferred to Suppliers and service providers located outside the UK, including in countries that do not have data protection laws equivalent to the UK's. Where we do so, we rely on an adequacy decision, the UK International Data Transfer Agreement or Addendum, or the fact that the transfer is necessary to perform the contract you have asked us to arrange.
7. How Long We Keep Your Data
We retain personal data for as long as necessary to fulfil the purposes described above, including to satisfy legal, accounting, or reporting requirements. As a general guide:
Booking and financial records: 6 years
Enquiry data where no Booking results: 24 months
Marketing and messaging data: until you unsubscribe or opt out
8. Your Rights
Under UK GDPR, you have the right to:
access the personal data we hold about you;
rectify inaccurate or incomplete data;
erase your data in certain circumstances ("right to be forgotten");
restrict or object to our processing in certain circumstances;
data portability, where processing is based on consent or contract and carried out by automated means;
withdraw consent at any time, where processing is based on consent (this will not affect processing carried out before withdrawal); and
lodge a complaint with the UK Information Commissioner's Office (ICO), ico.org.uk, or the data protection authority in your own country if you are based outside the UK.
To exercise any of these rights, contact us at sam@crossingtravel.com. We will respond within one month, as required by law.
9. Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including access controls, encryption in transit, and staff training. No system is completely secure, and we cannot guarantee the absolute security of data transmitted to us.
10. Children's Data
Our services are aimed at adults. Where we hold data relating to children (for example, as part of a family Booking), we do so with the consent and involvement of a parent or guardian, and only to the extent necessary to arrange travel for the family.
11. Cookies and Analytics
Our website uses cookies and similar technologies. Essential cookies set by our website host, Squarespace, keep the site working. With your consent via the cookie banner, we also use Squarespace analytics and Microsoft Clarity to understand how the site is used, and an OpenAI advertising pixel to measure the effectiveness of our advertising. You can manage your preferences through the cookie banner or your browser settings. We do not use cookies to sell data to third parties.
12. Changes to This Policy
We may update this Policy from time to time to reflect changes in our practices or the law. The version published on this page is the current version.
13. Contact Us
Crossing Travel Company Ltd (company number 07399000)
10 John Street, London WC1N 2EB
sam@crossingtravel.com
If you are not satisfied with our response, you have the right to complain to the ICO at ico.org.uk or by calling 0303 123 1113.