Privacy policy | Travel the World

Last updated: 12 August 2026

1. Controller

The controller of personal data processing is SIA Travel the World, registration No. 50203730421, registered address: Oskara Kalpaka iela 109 – 65, Liepāja, Latvia. Licence No. T-2026-17. Board members: Aigars Klavins, Maris Klavins. Business address: 109–65 Oskara Kalpaka Street, Liepāja, Latvia. Contact details: [email protected], +371 22 458 447.

2. What data we process

Depending on how you use our website, we may process:

• Contact information — first name, last name, email address and phone number you provide in the application or contact form.
• Travel data — the chosen destination, dates, number and age of travellers, meal plan and other preferences you state in your booking request.
• Traveller data — if you apply for a group or family, the form may require the first name, last name and age of fellow travellers (including minors). This data is provided to us by the applicant acting on behalf of the data subject (including as a legal representative of a child).
• Communication history — messages you send us by email, WhatsApp or other channels, and our replies.
• Technical data — IP address, browser type and similar technical information processed by our web infrastructure and security provider (Cloudflare) to keep the site running and protect it from misuse.

The website itself does not place cookies on a visitor's device for content personalisation, tracking or advertising. If this changes (for example, by adding analytics or marketing tools), this section will be updated and, where required, your consent will be requested.

3. For what purposes and on what legal basis

• Processing of an application or offer request — to prepare and send you a travel offer and arrange a booking. Legal basis: contract preparation at your initiative (Art. 6(1)(b) GDPR).
• Communicating with you — to answer questions and provide customer support. Legal basis: legitimate interests in providing the requested information (Art. 6(1)(f) GDPR).
• Sending offers and news (only if you have given consent, e.g. by ticking the relevant box in a form). Legal basis: consent (Art. 6(1)(a) GDPR) — consent may be withdrawn at any time.
• Accounting and compliance with legal obligations — if you complete a purchase/booking, we keep part of the data to fulfil statutory accounting and consumer protection obligations. Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).

4. How long we keep data

Data from contact and application forms that has not led to a booking is kept for 12 months from the last contact, after which it is deleted or anonymised. Data related to a completed booking (including accounting documents) is kept for the period set by regulation (under the Accounting Law — 5 years). Data based on consent for marketing messages is deleted as soon as the consent is withdrawn.

5. Who we share data with

We do not use personal data for purposes other than those listed in this policy and do not sell it to third parties. We may share data with the following processors to the extent necessary to provide the service:

• Tour operator(s) (e.g. Novatours or another tour operator) to arrange your booking — only to the extent necessary to provide the specific service.
• Cloudflare, Inc. — provider of web infrastructure, content delivery and security services.
• Cloud server (VPS) — for the technical maintenance of the website and database.

6. Cookies

The website currently does not use analytics, marketing or tracking cookies. Technically necessary information (e.g. to ensure security and server operation) is processed through the Cloudflare service and does not involve profiling of individual visitors.

7. Data of minors

Our services are intended for adults who book travel for themselves and their family members, including children. Data about minors (e.g. name and age in a travel application) is provided to us by the child's parent or legal representative and is used only to arrange the specific booking.

8. Your rights

Under the GDPR you have the right to:

• request access to your personal data and a copy of it;
• request the rectification of inaccurate data;
• request the erasure of data where there is no legal basis to keep it;
• object to processing based on legitimate interests;
• restrict processing in certain cases;
• receive your data in a structured, machine-readable format (data portability);
• withdraw previously given consent (e.g. for marketing messages) at any time without affecting the lawfulness of processing carried out before the withdrawal;
• lodge a complaint with the State Data Inspectorate (www.dvi.gov.lv) if you consider that the processing of your data breaches regulations.

To exercise your rights, write to us at [email protected]. We will respond no later than within one month.

9. Data security

We use appropriate technical and organisational measures (including encrypted connections, access control and regular backups) to protect your data from unauthorised access, loss or misuse.

10. Changes to this policy

We may update this policy from time to time, for example when regulations or our services change. The current version is always available on this page, and we will try to notify you of significant changes through other reasonably accessible means as well.

11. Contact

SIA Travel the World · Reg. No. 50203730421 · 109–65 Oskara Kalpaka Street, Liepāja, Latvia · [email protected] · +371 22 458 447 Payment details: LV96PARX0034534490001 (Citadele Banka), LV95HABA0551066008650 (Swedbank).