top of page

Privacy Policy

1. Who We Are

VOYA Cruise Travel is a trading name of Patrick McGinnis operating in partnership with The JLT Group. We are a data controller for personal data collected through this website and in the course of arranging your travel. For any privacy-related enquiries, please contact us at enquiries@voyacruisetravel.co.uk

2. What Data We Collect

We collect and process the following categories of personal data from our clients:

  • Identity data: full name, date of birth.

  • Contact data: email address, telephone number, home address.

  • Booking data: purchase and account history, travel dates and preferences.

  • Health data: dietary requirements, allergies and health conditions, where relevant to your booking (for example, for flights, cruises or travel insurance purposes).

  • Identification documents: passport or other ID details where required by a supplier.

  • Communications data: enquiries, messages and correspondence relating to your booking.

  • Complaints data: information relating to any compliments or complaints you raise with us.

3. How We Use Your Data

We use your personal data for the following purposes:

  • To provide travel planning and booking services.

  • To process bookings, amendments, cancellations and refunds on your behalf.

  • To communicate with you regarding your enquiry, booking or account.

  • To meet health, dietary or accessibility needs relevant to your travel.

  • To comply with our legal and regulatory obligations.

  • Where you have given consent, to send you marketing communications.

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

  • Consent: where you have given us permission, such as for marketing communications. You may withdraw this consent at any time.

  • Contract performance: processing necessary to arrange and manage your booking with us.

  • Legal obligation: processing required to comply with applicable law, including anti-money laundering and travel industry regulations.

5. Who We Share Your Data With

The JLT Group

We share your personal data with The JLT Group, who hold the ATOL, IATA and PTS financial protection accreditations that VOYA Cruise Travel operates under. When you make a booking with us, certain personal information — such as your name, contact details, travel dates, and payment information — is shared with The JLT Group so that they can process your booking, issue the relevant financial protection documentation, and handle payments on your behalf. The JLT Group also provide our customer relationship management (CRM) system, used to securely store and manage client booking details, enquiries and communication history.

Suppliers

We share relevant personal data — such as your name, contact details, travel dates and any specific requirements — with the airlines, hotels, cruise lines and other travel suppliers involved in your booking, solely for the purpose of arranging and fulfilling your trip. Each supplier is responsible for how they handle your data once received, in accordance with their own privacy policy.

Other service providers

  • Wix.com — our website hosting platform, which stores enquiry form submissions and website visitor data.

  • Mailchimp — used for email communications and marketing, where you have opted in to receive updates.

  • Cal.com — used for scheduling client calls and consultations.

Others we share personal information with

  • Organisations we are legally obliged to share personal information with.

  • Regulatory bodies, where required by law.

We do not sell your personal data to third parties.

6. International Transfers

Where your booking involves travel outside the United Kingdom or European Economic Area, relevant personal data may be transferred to suppliers in those destinations for the purpose of fulfilling your booking. We take reasonable steps to ensure such transfers are handled appropriately.

7. Data Retention

We retain personal information only for as long as necessary. Financial and booking records are retained for 6 years, in line with UK tax law requirements. General enquiries that do not result in a booking are retained for up to 24 months before being securely deleted. Marketing communication preferences are retained until you unsubscribe or withdraw your consent. Where a longer retention period is required by law or by our travel protection obligations, we will retain information for that longer period.

8. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

  • Right of access: to request a copy of the personal data we hold about you.

  • Right to rectification: to request correction of inaccurate or incomplete data.

  • Right to erasure: to request deletion of your data in certain circumstances.

  • Right to restrict processing: to request that we limit how we use your data.

  • Right to object: to object to processing based on legitimate interests.

  • Right to data portability: to receive your data in a structured, machine-readable format.

  • Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us using the details above. We will respond within one month.

9. Cookies and Tracking

Our website may use cookies for essential functionality and, where you consent, for analytics purposes. You can manage your cookie preferences through your browser settings.

10. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure.

11. Complaints

If you have any concerns about our use of your personal information, please contact us at enquiries@voyacruisetravel.co.uk. If you remain unhappy with how we've used your data after raising a complaint with us, you can also complain to the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk/make-a-complaint

12. Changes to This Policy

We may update this Privacy Policy from time to time. The date of the most recent revision appears at the top of this page.

Last updated: 25 July 2026

bottom of page