Privacy Policy

1. Who we are

Selah Journeys is responsible (the “controller”) for the processing of your personal data described in this policy. We handle personal data in line with the General Data Protection Regulation (GDPR, in Dutch: AVG).

2. The data we collect

When you contact us or use the form on our website

• your name, email address and phone or WhatsApp number;
• your travel wishes: what you would like help with, where and when you want to travel, the number and type of travellers, and anything you tell us in your message;
• whether you would like to hear about flexible payment options.

When you book with us

• the full names of all travellers as shown in their passports, dates of birth, nationality and passport or ID details, where a supplier or authority needs them;
• contact details for during the journey;
• payment details, such as amounts, payment dates and the bank account you paid from.

When we help with a visa

The information and documents needed for your application, such as a copy of your passport, passport photos, travel plans and supporting documents.

Special requirements

If you tell us about health, mobility, dietary or religious needs so that we can take them into account, this can be sensitive personal data. We only use it with your explicit consent, and only to arrange your journey.

Children

If you book for children, you give us their details as their parent or guardian.

Our website

Our website does not use cookies for analytics, advertising or tracking, and loads no content from third parties such as Google. Like any website, our hosting provider keeps short technical logs (such as IP address, browser and time of visit) to keep the site secure and working.

3. Why we use your data, and on which basis

• To answer your enquiry and prepare a proposal. These are steps you ask us to take before a booking (GDPR article 6(1)(b)).
• To book and manage your journey, including passing the necessary details to airlines, hotels and other suppliers, and keeping you informed of changes. This is needed to carry out our agreement with you (article 6(1)(b)).
• To help with your visa application. This is part of our agreement with you. Sensitive data is only used with your explicit consent (article 9(2)(a)).
• To keep our administration and meet tax obligations. This is a legal obligation (article 6(1)(c)).
• To keep our website and inbox secure, for example by filtering spam. This is our legitimate interest (article 6(1)(f)).
• To send you news or offers, only if you have asked for this. You can unsubscribe at any time (article 6(1)(a)).

We do not use your data for automated decision-making or profiling.

4. Who we share your data with

• Travel suppliers that provide the services you book, such as airlines, hotels and other accommodation, rail and bus companies, transfer companies and local partners at your destination.
• Visa authorities, embassies and visa service providers, when you ask us to help with a visa.
• Service providers that work for us, such as our website host, the form service that delivers website messages to our inbox (Formspree), our email provider (Microsoft Outlook), our bank and our accountant. Where they process data on our behalf, we have agreed with them that they keep it secure and only use it for us.
• Authorities, when the law requires it.

We never sell your personal data.

5. Data outside the European Economic Area

For a journey outside Europe, we have to share your details with suppliers at your destination, for example a hotel in Ghana. This is necessary to carry out your booking (GDPR article 49(1)(b)).

Some of our service providers are based in, or use servers in, the United States. In that case we rely on appropriate safeguards, such as an adequacy decision of the European Commission (including the EU–US Data Privacy Framework, where the provider is certified) or the European Commission’s standard contractual clauses.

6. How long we keep your data

• Enquiries that do not lead to a booking: up to 12 months after our last contact.
• Booking and payment records: 7 years, because Dutch tax law requires us to keep our administration for that long.
• Passport copies and visa documents: deleted no later than 3 months after your journey or the end of the visa process, unless we need them longer for a legal claim.
• Sensitive data about special requirements: deleted after your journey.

7. How we protect your data

We take appropriate technical and organisational measures to protect your data against loss and unauthorised access. Our website uses a secure (HTTPS) connection, our accounts are protected with strong passwords and two-step verification where available, and only the people who need your data to plan your journey can see it.

8. Your rights

You have the right to:

• see the personal data we hold about you;
• have incorrect data corrected;
• have your data deleted, unless we must keep it by law;
• restrict or object to the use of your data;
• receive your data in a common format, or have it sent to another party;
• withdraw your consent at any time, without affecting what we did before.

Send your request to info@selahjourneys.nl. We reply within one month. We may ask you to confirm your identity first, so that we only share data with the right person.

If you are not satisfied with how we handle your data, please tell us. You also have the right to file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

9. Changes to this policy

We may update this policy, for example when our services change. The latest version is always on this page, with the date it was last updated.