Privacy Policy
Last Updated: January 2025
Introduction
Heritage Routes is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, and safeguard your information when you use our website and cultural journey services.
Data We Collect
We collect the following types of personal data:
- Contact Information: name, email address, phone number, mailing address
- Travel Preferences: journey interests, educational background, previous cultural travel experience
- Usage Data: IP address, browser type, pages visited, time spent on site
- Communication Data: messages sent through contact forms and email correspondence
- Cookie Data: preferences and session information
How We Use Your Data
We process your data for the following purposes:
- Service Delivery: Planning and executing cultural journeys, providing scholar accompaniment
- Communication: Responding to inquiries, sending journey information and preparation materials
- Marketing: Sending newsletters about upcoming expeditions (opt-in only)
- Website Improvement: Analyzing usage patterns to enhance user experience
- Legal Compliance: Meeting tax and regulatory requirements
Legal Basis for Processing
We process your data based on:
- Consent: For marketing communications and optional cookies
- Contract: To provide requested cultural journey services
- Legitimate Interest: For business operations and improvements
- Legal Obligation: For tax and regulatory compliance
Data Retention
We retain your data for:
- Contact form submissions: 3 years
- Journey booking records: 7 years (legal requirement)
- Financial records: 7 years
- Marketing data: Until consent withdrawn
Your Rights
Under data protection law, you have the right to:
- Access: Request copies of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data
- Restriction: Limit how we use your data
- Portability: Receive data in structured format
- Objection: Object to data processing
- Withdraw Consent: At any time for marketing
Data Security
We protect your data through:
- SSL encryption for data transmission
- Secure server infrastructure
- Access controls and monitoring
- Regular security audits
- Breach notification within 72 hours if required
Third-Party Services
We may share data with:
- Email service providers for communication management
- Payment processors for secure transactions
- Analytics providers for website improvement
- Cloud hosting services for infrastructure
Contact Us
For privacy concerns or data requests:
Email: [email protected]
Phone: +65 6538 4927
Address: 111 Somerset Road, #06-08, TripleOne Somerset, Singapore 238164