Privacy Policy

1. Who We Are

Registered in 2008, Exapad Limited has become a trusted name in premium travel experiences across London and the United Kingdom. We specialise in airport transfers and high-quality tourism services, offering our own curated experiences as well as selected third-party activities that meet our exacting standards. Our mission is simple yet ambitious: to deliver seamless journeys and unforgettable moments for every traveller who chooses us.

2. Introduction

This Privacy Policy describes how we collect, use, and protect your personal data when you interact with us, whether through our website www.nye.london or our services. We are committed to protecting your privacy in accordance with UK GDPR.

3. Information We Collect

We collect various types of personal information from our users to provide and improve our services:

Information provided directly by users:

• Full name
• Address
• Email address
• Phone number
• Nationality
• Payment details

Information collected automatically:

• IP address
• Type of device used
• Geolocation data
• Login and browser information
• Usage data on our platforms (e.g., pages visited, visit duration, page interactions)

Information from other sources:

• Data received from business partners and service providers (e.g., payment services, analytics providers)

4. How We Use the Information Collected

We use your personal information for various purposes, including:

• Providing and managing our tourism services
• Processing your requests and bookings
• Improving our products and services
• Communicating with you about services similar to those you have already requested
• Providing customer support and responding to your inquiries
• Sending promotional information (with prior consent)
• Personalizing your experience on our platforms
• Ensuring the security of our platforms

5. Legal Basis for Data Processing

We process your personal data based on:

• Your consent (which can be withdrawn at any time)
• The necessity to perform a contract to which you are a party
• Compliance with legal obligations
• The pursuit of our legitimate interests, balanced with your fundamental rights and freedoms

6. Sharing Information

We do not sell, distribute, or rent your personal information to third parties without your consent, except in the following cases:

• When necessary to perform a contract or provide a requested service
• When required by law
• To protect the rights, property, or safety of our company, our customers, or others

We share your data with our business partners and service providers only for the specified purposes and ensure they process data securely and in compliance with the law.

7. International Data Transfers

Your personal data may be transferred and stored in countries outside the UK. In such cases, we ensure that the data is protected according to GDPR standards through:

• Approved standard contractual clauses
• European Commission adequacy decisions

8. Data Security

We have implemented appropriate security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. However, the use of the internet is not entirely secure and we cannot guarantee the complete security of data transmitted.

9. Data Retention

We retain personal information only as long as necessary and have strict review and retention policies to meet these obligations. Under UK tax law, we are required to keep your basic personal data (name, address, contact details) for a minimum of 6 years, after which it will be destroyed.

We keep the personal data you have provided, including your name, contact details, in our database for 2 years according to company policy. After that, we anonymize all personal data. Some data is not anonymized, such as product-related information, the number of passengers booked, and the booking date, as it helps us in statistical performance analysis.

If you have consented to the use of your data for direct marketing purposes, we will retain such data until you notify us otherwise and/or withdraw your consent.

10. Your Rights

You have the right to:

• Access your personal data
• Request the correction of inaccurate data
• Request the deletion of data ("right to be forgotten")
• Restrict the processing of data
• Object to data processing
• Request data portability

To exercise your rights, contact us using the details provided in the "Contact Us" section.

11. Contact Us

For questions about our privacy policy or to exercise your rights, contact us at:

• Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
• Physical Address: Exapad Limited, Ground Floor Unit 3 Southview House, St Austell Enterprise Park, St Austell, Cornwall, PL25 4EJ

12. Changes to the Privacy Policy

We may update this policy periodically by posting a new version on our website. We recommend checking this page regularly to stay informed of any changes.