Privacy Policy
Last Updated: 1 January 2026
At Vagabond, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website vagabond.com and use our services. Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the website.
We are a data controller under the General Data Protection Regulation (GD) and other applicable data protection laws. We are committed to protecting your personal data and being transparent about how we handle it.
1. Information We Collect
We collect information you provide directly to us when you book a tour, subscribe to our newsletter, request a quote, or contact us. This may include:
- Personal Identification Information: Name, title, date of birth, and passport details (required for travel bookings).
- Contact Information: Email address, postal address, and phone number.
- Payment Information: Billing address and credit card details (processed securely via third-party payment processors; we do not store full credit card numbers).
- Travel Preferences: Dietary requirements, medical conditions, room preferences, and tour interests.
We also automatically collect certain information about your device and how you interact with our website, including IP addresses, browser type, operating system, referring URLs, and usage data.
2. How We Use Your Information
We use the information we collect to provide, maintain, and improve our services, including:
- Processing Bookings: To manage your reservations, issue tickets, and coordinate with our local partners and guides.
- Communication: To send you confirmations, updates, travel itineraries, and essential information regarding your trip.
- Customer Support: To respond to your inquiries, requests, and support needs.
- Marketing: To send you newsletters and promotional materials about our tours (with your consent).
- Security: To detect, prevent, and address technical issues and fraudulent activity.
- Legal Compliance: To comply with legal obligations, such as immigration reporting or tax requirements.
3. Legal Basis for Processing
Under GDPR, we rely on the following legal bases to process your personal data:
- Contractual Necessity: To perform our obligations under our contract with you (e.g., booking a tour).
- Legitimate Interests: For the purposes of direct marketing, fraud prevention, and network security, provided these interests are not overridden by your rights.
- Consent: When you provide explicit consent to receive marketing communications or for specific data processing activities.
- Legal Obligation: Where we are required by law to process your data (e.g., keeping financial records for tax purposes).
4. Sharing Your Information
We do not sell your personal data. We may share your information with third parties only in the following circumstances:
- Service Providers: With trusted third parties who perform services on our behalf, such as payment processors, IT service providers, and analytics providers.
- Travel Partners: With hotels, transport providers, activity organizers, and guides necessary to fulfill your travel itinerary.
- Legal Authorities: If required by law, court order, or to protect our rights, property, or safety.
- Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.
6. Data Retention
We retain your personal data only for as long as is necessary for the purposes set out in this privacy policy. We will retain and use your data to the extent necessary to comply with our legal obligations (for example, retaining financial records for tax purposes), resolve disputes, and enforce our agreements. Generally, booking data is retained for 7 years following the completion of your trip.
7. Your Privacy Rights
Under GDPR, you have the following rights regarding your personal data:
- Access: You have the right to request a copy of the personal data we hold about you.
- Rectification: You have the right to request that we correct any inaccurate or incomplete data.
- Erasure: You have the right to request the deletion of your personal data, subject to certain conditions.
- Restriction: You have the right to request that we restrict the processing of your personal data.
- Portability: You have the right to request that we transfer the data you have provided to another organization.
- Objection: You have the right to object to our processing of your personal data.
- Withdraw Consent: You have the right to withdraw consent at any time where we rely on consent for processing.
To exercise these rights, please contact us using the details provided below.
8. International Data Transfers
Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. If you are located outside Ireland and choose to provide information to us, please note that we transfer the data, including Personal Data, to Ireland and process it there.
9. Cookies
We use cookies and similar tracking technologies to track the activity on our website and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our website.
10. Children's Privacy
Our website and services are not intended for individuals under the age of 16. We do not knowingly collect personal identifiable information from children under 16. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us.
11. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
12. Contact Us
If you have any questions about this Privacy Policy, please contact us:
Vagabond
12 Fitzwilliam Square
Dublin 2, D02 P366
Ireland
Email: [email protected]
Phone: +353 61 459 5421