Privacy policy

1. Introduction

1.1 This Privacy Policy explains how Travantis Ltd collects, uses, stores, shares and protects personal data when individuals visit our Website, create an account, purchase or access a course, complete course activities, communicate with us or otherwise use our services.

1.2 Travantis Ltd is a company registered in England and Wales and is the data controller responsible for the personal data described in this Privacy Policy.

1.3 Our contact details are:

Company: Travantis Ltd

Registered address: Green Park Arlington 5 Exeter Park Road Bournemouth BH2 5BD

Email: privacy@travantis.com

Company number: 12631716

ICO registration number: ZC201502

1.4 For the purposes of this Privacy Policy, references to “Travantis”, “we”, “us” and “our” mean Travantis Ltd.

1.5 References to “you”, “your”, “learner” or “user” mean any person who visits our Website, registers for an account, purchases or accesses a course, communicates with us or otherwise uses our services.

1.6 This Privacy Policy applies to our Website, associated learning-management platform, online courses, digital learning materials, assessments, customer-support services and related communications.

1.7 This Privacy Policy does not apply to third-party websites, applications or services that have their own privacy policies and over which we have no control.

2. Applicable data-protection legislation

2.1 As a business established in the United Kingdom, we process personal data primarily in accordance with the following legislation:

2.1.1 The UK General Data Protection Regulation;

2.1.2 The Data Protection Act 2018;

2.1.3 The Privacy and Electronic Communications Regulations 2003; and

2.1.4 Any other applicable UK data-protection, electronic-marketing and privacy legislation.

2.2 Where we offer courses or services to individuals located in the European Union or European Economic Area, or monitor their behaviour where that behaviour takes place within the EU or EEA, the EU General Data Protection Regulation may also apply to the relevant processing.

2.3 References in this Privacy Policy to “applicable data-protection law” include the UK GDPR and, where relevant, the EU GDPR.

2.4 We are registered as a data controller with the UK Information Commissioner’s Office.

2.5 Where the EU GDPR applies and we are legally required to appoint a representative under Article 27 of the EU GDPR, we will publish the representative’s name and contact details in this Privacy Policy.

2.6 Unless and until an EU representative is required and appointed, users located in the EU or EEA may contact us directly at privacy@travantis.com.

3. Definitions

3.1 For the purposes of this Privacy Policy, the following terms have the meanings set out below.

3.2 “Account” means the account created by a user to purchase, access or participate in our courses and services.

3.3 “Course Content” means any text, graphics, images, audio, video, assessments, downloadable resources, software, data compilations or other educational material made available through our services.

3.4 “Cookie” means a small data file or similar technology stored on or accessed from a user’s device when visiting a website or using an online service.

3.5 “Personal data” means any information relating to an identified or identifiable individual.

3.6 “Processing” means any operation performed on personal data, including collecting, recording, organising, storing, using, sharing, altering, retrieving or deleting it.

3.7 “Services” means the online courses, learning materials, assessments, account functions, communications, customer support and other facilities made available by us.

3.8 “Website” means the website operated by Travantis Ltd, together with any associated course platform or subdomain operated for the delivery of our services.

4. Personal data we collect

4.1 The personal data we collect depends on how you interact with us and which services you use.

4.2 Identity and contact data

We may collect identity and contact information including:

4.2.1 Your full name;
4.2.2 Your email address;
4.2.3 Your telephone number;
4.2.4 Your billing address;
4.2.5 Your account username or unique identifier; and
4.2.6 The name of your employer, educational establishment or sponsoring organisation, where relevant.

4.3 Account and learning data

We may collect information relating to your account and participation in our courses, including:

4.3.1 Account registration details;
4.3.2 Course enrolments;
4.3.3 Course progress;
4.3.4 Lessons and learning activities completed
4.3.5 Assessment or quiz responses;
4.3.6 Assessment scores and results;
4.3.7 Course-completion records;
4.3.8 Certificates issued;
4.3.9 Learning preferences; and
4.3.10 Records of your use of the learning platform.

4.4 Transaction and payment data

We may collect information relating to purchases and payments, including:

4.4.1 The courses or services purchased;
4.4.2 Payment status;
4.4.3 Transaction date;
4.4.4 Transaction reference;
4.4.5 Invoice and billing details;
4.4.6 Discounts or promotional codes applied;
4.4.7 Refund information; and
4.4.8 Correspondence relating to a payment or transaction.

4.5 Payments may be processed by third-party payment providers, including providers such as Stripe or PayPal.

4.6 We do not normally receive or store your complete payment-card number, payment-card security code or online banking credentials.

4.7 Communications data

We may collect information contained in communications between you and us, including:

4.7.1 General enquiries;
4.7.2 Customer-support requests;
4.7.3 Complaints;
4.7.4 Feedback;
4.7.5 Survey responses;
4.7.6 Testimonial submissions;
4.7.7 Marketing preferences; and
4.7.8 Correspondence sent by email, contact form or through the learning platform.

4.8 Technical and usage data

We may collect technical information when you access our Website or services, including:

4.8.1 Your internet protocol address;
4.8.2 Browser type and version;
4.8.3 Device type;
4.8.4 Operating system;
4.8.5 Time zone;
4.8.6 Approximate location derived from your internet protocol address;
4.8.7 Login times and account activity;
4.8.8 Pages and course materials viewed;
4.8.9 Referring and exit pages;
4.8.10 Session duration;
4.8.11 System, security and diagnostic information; and
4.8.12 Information concerning errors, failed logins or suspected misuse.

4.9 Cookies and similar technologies

We may collect information through cookies and similar technologies, including pixels, tags, scripts, local storage and software development kits.

4.10 Further information about the cookies and similar technologies we use is provided in our Cookie Policy and through the cookie-preference controls made available on our Website.

5. Special-category personal data

5.1 We do not normally require users to provide special-category personal data.

5.2 Special-category personal data includes information concerning:

5.2.1 Health;
5.2.2 Race or ethnic origin;
5.2.3 Religious or philosophical beliefs;
5.2.4 Political opinions;
5.2.5 Trade-union membership;
5.2.6 Genetic information;
5.2.7 Biometric information used for identification;
5.2.8 Sex life; and
5.2.9 Sexual orientation.

5.3 You should not provide special-category personal data through general contact forms, course discussions, assessments or customer-support functions unless it is genuinely necessary.

5.4 Where special-category personal data is voluntarily provided, we will assess whether we have both:

5.4.1 A lawful basis under Article 6 of the applicable data-protection legislation; and
5.4.2 A separate condition permitting the processing of special-category personal data.

5.5 Where the information is not required to provide our services or comply with a legal obligation, we may securely delete it.

6. How we collect personal data

6.1 We may collect personal data directly from you when you:

6.1.1 Create an account;
6.1.2 Purchase or enrol on a course;
6.1.3 Complete a lesson, assessment, quiz or survey;
6.1.4 Contact us;
6.1.5 Subscribe to marketing communications;
6.1.6 Submit feedback or a testimonial;
6.1.7 Request customer support; or
6.1.8 Exercise a data-protection right.

6.2 We may collect personal data automatically when you use our Website or learning platform through cookies, system logs, analytics technologies and similar tools.

6.3 We may receive personal data from third parties, including:

6.3.1 Payment providers;
6.3.2 Learning-management providers;
6.3.3 Marketing or referral partners;
6.3.4 Educational establishments;
6.3.5 Employers or sponsoring organisations;
6.3.6 Business customers purchasing courses on behalf of learners; and
6.3.7 Fraud-prevention, security or identity-verification providers.

7. How and why we use personal data

7.1 We process personal data only where we have a lawful basis under applicable data-protection law.

7.2 Account registration and administration

We use identity, contact and account information to create, administer and secure user accounts.

7.3 The lawful basis for this processing is the performance of a contract or taking steps at your request before entering into a contract.

7.4 Course delivery

We use account and learning data to:

7.4.1 Provide access to courses and learning materials;
7.4.2 Record participation and progress;
7.4.3 Administer assessments and quizzes;
7.4.4 Calculate and record assessment results;
7.4.5 Issue course-completion records or certificates; and
7.4.6 Provide learning-related communications.

7.5 The lawful basis for this processing is the performance of a contract.

7.6 Payment administration

We use transaction, identity and contact information to:

7.6.1 Process purchases;
7.6.2 Confirm payments;
7.6.3 Issue invoices or receipts;
7.6.4 Administer refunds; and
7.6.5 Maintain financial records.

7.7 The lawful bases for this processing are the performance of a contract and compliance with legal obligations.

7.8 Customer service

We use identity, contact, account and communications information to respond to enquiries, provide customer support, investigate complaints and resolve technical or payment issues.

7.9 The lawful basis for this processing may be:

7.9.1 The performance of a contract;
7.9.2 Taking steps before entering into a contract; or
7.9.3 Our legitimate interest in supporting customers and administering our business.

7.10 Security and fraud prevention

We may use technical, account and transaction information to:

7.10.1 Protect user accounts;
7.10.2 Detect unauthorised access;
7.10.3 Prevent fraud;
7.10.4 Investigate misuse;
7.10.5 Maintain platform security; and
7.10.6 Protect our legal and commercial interests.

7.11 The lawful basis for this processing is our legitimate interest in maintaining secure services, preventing fraud and protecting our users and business.

7.12 Service improvement

We may use account, usage and communications data to:

7.12.1 Understand how our courses and Website are used;
7.12.2 Improve course content;
7.12.3 Develop new services;
7.12.4 Identify technical problems;
7.12.5 Improve accessibility and usability; and
7.12.6 Measure customer satisfaction.

7.13 The lawful basis for this processing is our legitimate interest in improving our services and operating our business effectively.

7.14 Legal and regulatory compliance

We may process personal data where necessary to:

7.14.1 Comply with tax, accounting or corporate obligations;
7.14.2 Respond to lawful requests from regulators, courts or public authorities;
7.14.3 Investigate or defend legal claims;
7.14.4 Enforce our contractual rights; or
7.14.5 Meet our obligations under applicable law.

7.15 The lawful basis for this processing is compliance with a legal obligation or our legitimate interest in establishing, exercising or defending legal claims.

8. Legitimate interests

8.1 Where we rely on legitimate interests, those interests may include:

8.1.1 Operating and administering our business;
8.1.2 Providing customer support;
8.1.3 Improving our Website, courses and services;
8.1.4 Protecting our systems and user accounts;
8.1.5 Preventing fraud and misuse;
8.1.6 Maintaining appropriate business records;
8.1.7 Understanding how our services are used; and
8.1.8 Establishing, exercising or defending legal claims.

8.2 Before relying on legitimate interests, we consider:

8.2.1 Whether the processing is necessary;
8.2.2 Whether the processing is proportionate;
8.2.3 The reasonable expectations of the individuals concerned;
8.2.4 The potential impact on their rights and freedoms; and
8.2.5 Whether appropriate safeguards can reduce the impact of the processing.

9. Marketing communications

9.1 We may send information about our courses, travel-safety resources, service developments, promotions and related services where permitted by law.

9.2 We may send marketing communications where:

9.2.1 You have provided your consent;
9.2.2 You have purchased a related product or service and the electronic-marketing soft opt-in applies; or
9.2.3 Another lawful marketing basis is available.

9.3 Marketing consent will be requested separately from acceptance of our contractual terms.

9.4 We will not use pre-selected consent boxes where consent is legally required.

9.5 You can withdraw your consent or opt out of marketing at any time by:

9.5.1 Selecting the unsubscribe link contained in a marketing email;
9.5.2 Changing your account preferences, where this function is available; or
9.5.3 Contacting us at privacy@travantis.com.

9.6 Opting out of marketing will not prevent us from sending necessary service communications relating to your account, purchase, course access, security or customer-support request.

9.7 We may retain limited suppression information to ensure that your request not to receive marketing communications continues to be respected.

10. Automated processing

10.1 We do not currently use personal data to make decisions that produce legal or similarly significant effects solely through automated processing.

10.2 Our learning platform may use automated functions to:

10.2.1 Calculate quiz or assessment scores;
10.2.2 Display course progress;
10.2.3 Trigger course reminders;
10.2.4 Provide standardised learning feedback; and
10.2.5 Issue course-completion notifications or certificates.

10.3 These functions do not normally produce legal or similarly significant effects.

10.4 We will update this Privacy Policy if our use of automated decision-making materially changes.

11. Children and younger users

11.1 Our courses may be relevant to young travellers, including some users under the age of 18.

11.2 Unless we expressly provide an alternative authorised arrangement, purchases must be completed by a person aged 18 or over.

11.3 A learner aged 16 or 17 may access a course where it has been purchased or authorised by:

11.3.1 A parent or guardian;
11.3.2 An educational establishment;
11.3.3 An employer;
11.3.4 A travel organisation; or
11.3.5 Another responsible sponsoring organisation.

11.4 Where our services are likely to be accessed by children, we will take reasonable and proportionate steps to ensure that:

11.4.1 Privacy information is clear and accessible;
11.4.2 Only necessary personal data is collected;
11.4.3 High-privacy settings are applied where appropriate;
11.4.4 Children’s information is not used for unnecessary profiling;
11.4.5 Children’s information is not used for unnecessary behavioural advertising; and
11.4.6 The best interests of the child are appropriately considered.

11.5 A young person may exercise their own data-protection rights where they have sufficient understanding to do so.

11.6 A parent or guardian may contact us at privacy@travantis.com if they have concerns regarding the personal data of a child or young person.

12. Sharing personal data

12.1 We may share personal data only where necessary, proportionate and permitted by law.

12.2 Personal data may be shared with:

12.2.1 Learning-management and course-hosting providers;
12.2.2 Website and cloud-hosting providers;
12.2.3 Payment processors;
12.2.4 Email and communications providers;
12.2.5 Customer-support providers;
12.2.6 Analytics providers;
12.2.7 Cookie-consent management providers;
12.2.8 Information-technology and cybersecurity providers;
12.2.9 Accountants, auditors, insurers and professional advisers;
12.2.10 Marketing and advertising providers, where legally permitted;
12.2.11 Educational establishments, employers or other sponsoring organisations;
12.2.12 Regulators, courts, law-enforcement bodies or public authorities; and
12.2.13 Prospective purchasers, investors or professional advisers involved in a legitimate business sale, investment, merger or restructuring.

12.3 Some recipients process personal data on our instructions and act as data processors.

12.4 Other recipients, including some payment providers, professional advisers, regulatory authorities and sponsoring organisations, may act as independent data controllers.

12.5 Where a supplier acts as our processor, we require it to:

12.5.1 Process personal data only on documented instructions;
12.5.2 Maintain appropriate security measures;
12.5.3 Restrict access to authorised personnel;
12.5.4 Assist us in meeting applicable data-protection obligations;
12.5.5 Notify us of relevant personal-data breaches; and
12.5.6 Securely return or delete personal data when the service relationship ends, subject to applicable legal requirements.

12.6 We do not sell personal data.

13. Organisational and sponsored learners

13.1 A school, university, employer, travel organisation or other organisation may purchase or administer course access on behalf of learners.

13.2 In these circumstances, the sponsoring organisation may receive limited information concerning:

13.2.1 Learner enrolment;
13.2.2 Course participation;
13.2.3 Course progress;
13.2.4 Assessment results;
13.2.5 Course completion; and
13.2.6 Certificates issued.

13.3 The specific information shared will depend on the contractual arrangement and the legitimate requirements of the sponsoring organisation.

13.4 Depending on the arrangement, we and the sponsoring organisation may act as:

13.4.1 Separate data controllers;
13.4.2 Joint controllers; or
13.4.3 A controller and processor.

13.5 Where appropriate, additional privacy information will be provided to learners participating through an organisational programme.

14. International transfers

14.1 We are established in the United Kingdom, but some of our service providers may process personal data in the UK, EU, EEA, United States or other jurisdictions.

14.2 Personal data may therefore be transferred:

14.2.1 From the EU or EEA to the United Kingdom;
14.2.2 From the United Kingdom to the EU or EEA; or
14.2.3 From the UK, EU or EEA to another country in which an approved service provider operates.

14.3 Where personal data is transferred internationally, we take reasonable steps to ensure that an appropriate legal transfer mechanism applies.

14.4 Depending on the relevant transfer, the mechanism may include:

14.4.1 A UK adequacy regulation;
14.4.2 An adequacy decision adopted by the European Commission;
14.4.3 The UK International Data Transfer Agreement;
14.4.4 The UK Addendum to the European Commission’s Standard Contractual Clauses;
14.4.5 The European Commission’s Standard Contractual Clauses; or
14.4.6 Another legally recognised transfer safeguard.

14.5 Where required, we will assess the risks associated with an international transfer and implement supplementary contractual, technical or organisational safeguards.

14.6 You may request further information about the safeguards applicable to a particular transfer by contacting privacy@travantis.com.

15. Retention of personal data

15.1 We retain personal data only for as long as reasonably necessary for the purpose for which it was collected.

15.2 When determining a retention period, we consider:

15.2.1 The nature and sensitivity of the information;
15.2.2 The purpose for which it was collected;
15.2.3 Whether it remains necessary to provide the relevant service;
15.2.4 Applicable legal, accounting and tax requirements;
15.2.5 Contractual obligations;
15.2.6 Relevant limitation periods;
15.2.7 Potential complaints, disputes or legal claims;
15.2.8 The potential harm arising from unauthorised access or disclosure; and
15.2.9 Whether the information can be deleted or anonymised.

15.3 Account and course records will normally be retained while the account or course access remains active and for an appropriate period afterwards.

15.4 Financial, payment, tax and accounting records will normally be retained for six years after the end of the relevant accounting period, unless a different period is required by law.

15.5 General customer-support correspondence will normally be retained for up to three years, unless a longer period is justified.

15.6 Complaint and legal-claim records may be retained for the applicable legal limitation period.

15.7 Marketing records may be retained while you remain subscribed and for a limited period afterwards to demonstrate how your preferences were managed.

15.8 Suppression records may be retained for as long as necessary to ensure that an opt-out request continues to be respected.

15.9 Security and technical logs will be retained for a limited period proportionate to our security, diagnostic and fraud-prevention requirements.

15.10 Cookie-consent records will be retained for the period reasonably required to evidence and manage your preferences.

15.11 We may retain anonymised or aggregated information indefinitely where it can no longer be used to identify an individual.

16. Data security

16.1 We use proportionate technical and organisational measures designed to protect personal data against:

16.1.1 Unauthorised access;
16.1.2 Accidental loss;
16.1.3 Misuse;
16.1.4 Alteration;
16.1.5 Unauthorised disclosure; and
16.1.6 Destruction.

16.2 Our security measures may include:

16.2.1 Access restrictions based on operational need;

16.2.2 Multifactor authentication;
16.2.3 Password and account controls;
16.2.4 Encryption where appropriate;
16.2.5 Secure cloud and platform providers;
16.2.6 System monitoring;
16.2.7 Data backups;
16.2.8 Supplier due diligence;
16.2.9 Periodic access reviews;
16.2.10 Security awareness measures; and
16.2.11 Incident-response procedures.

16.3 Access to personal data is restricted to individuals and service providers who have a legitimate operational requirement to access it.

16.4 No internet-based service can be guaranteed to be completely secure.

16.5 Users are responsible for keeping their account credentials confidential and must notify us promptly if they believe their account or password has been compromised.

17. Personal-data breaches

17.1 We maintain procedures for identifying, containing, investigating and responding to suspected or confirmed personal-data breaches.

17.2 A personal-data breach may include:

17.2.1 Unauthorised access to an account;
17.2.2 Loss or theft of a device containing personal data;
17.2.3 Accidental disclosure to an incorrect recipient;
17.2.4 Unauthorised publication of personal information;
17.2.5 Loss of access to personal data;
17.2.6 Malicious interference with personal data; or
17.2.7 A relevant incident affecting one of our service providers.

17.3 Where required by applicable law, we will notify:

17.3.1 The Information Commissioner’s Office;
17.3.2 An appropriate EU or EEA supervisory authority; and
17.3.3 Affected individuals.

17.4 Notifications will be made within the applicable statutory time limits and will include the information required by law.

18. Your data-protection rights

18.1 Depending on your location, the circumstances and the lawful basis used, you may have the rights described in this section.

18.2 Right to be informed

You have the right to receive clear information about how we collect and use your personal data.

18.3 Right of access

You may request confirmation of whether we process your personal data and obtain a copy of the personal data we hold about you.

18.4 Right to rectification

You may request that inaccurate personal data is corrected and incomplete information is completed.

18.5 Right to erasure

You may request deletion of your personal data in certain circumstances.

18.6 The right to erasure does not apply where continued retention is necessary for legal, regulatory, contractual or legitimate business reasons permitted by law.

18.7 Right to restriction

You may request that we restrict the processing of your personal data in certain circumstances.

18.8 Right to object

You may object to processing based on legitimate interests or to processing carried out for direct-marketing purposes.

18.9 Where you object to direct marketing, we will stop using your personal data for that purpose.

18.10 Right to data portability

Where applicable, you may request that personal data you provided to us is supplied in a structured, commonly used and machine-readable format or transferred to another controller.

18.11 Right to withdraw consent

Where processing is based on consent, you may withdraw your consent at any time.

18.12 Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.

18.13 Rights relating to automated decision-making

Where applicable, you may have rights relating to decisions based solely on automated processing that produce legal or similarly significant effects.

18.14 Exercising your rights

Requests to exercise a data-protection right should be sent to learners@travantis.com.

18.15 We may request reasonable and proportionate evidence of identity before responding to a request.

18.16 You will not normally be charged for exercising your rights.

18.17 We may charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive, where permitted by law.

18.18 We will normally respond without undue delay and within one month.

18.19 Where a request is complex or multiple requests have been made, the response period may be extended by up to two further months where permitted by law.

18.20 Where an extension is required, we will inform you and explain the reason.

19. Complaints

19.1 If you have concerns about how we have handled your personal data, you should contact us in the first instance.

19.2 You can contact us at:

Email: privacy@travantis.com

Post: Travantis Ltd, Green Park Arlington 5 Exeter Park Road Bournemouth BH2 5BD

19.3 We will investigate data-protection concerns and complaints in accordance with our internal procedures.

19.4 UK complaints

You have the right to complain to the UK supervisory authority:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

United Kingdom

Telephone: 0303 123 1113

19.5 EU and EEA complaints

Where the EU GDPR applies, you may also have the right to complain to the data-protection supervisory authority in:

19.5.1 The EU or EEA country where you normally live;
19.5.2 The EU or EEA country where you work; or
19.5.3 The EU or EEA country where you believe an infringement occurred.

19.6 Where we appoint an EU representative, the representative’s details will be published in this Privacy Policy.

20. Cookies and similar technologies

20.1 Our Website and learning platform may use essential and non-essential cookies and similar technologies.

20.2 Essential technologies may be used where necessary to:

20.2.1 Operate the Website;
20.2.2 Maintain security;
20.2.3 Authenticate users;
20.2.4 Provide account, shopping-cart or course functions;
20.2.5 Remember privacy preferences; or
20.2.6 Deliver a service expressly requested by a user.

20.3 Where required by law, we will obtain consent before using:

20.3.1 Analytics cookies;
20.3.2 Advertising cookies;
20.3.3 Retargeting technologies;
20.3.4 Marketing pixels; or
20.3.5 Other non-essential tracking technologies.

20.4 Non-essential cookies should not be activated before the required consent has been provided.

20.5 Users can manage or withdraw their cookie preferences through the cookie-consent controls available on our Website.

20.6 Further information about specific cookies, providers, purposes and durations is provided in our Cookie Policy.

21. Third-party websites and services

21.1 Our Website, courses or learning materials may contain links to websites, applications or services operated by third parties.

21.2 We do not control the privacy, security or information-handling practices of those third parties.

21.3 The inclusion of a link does not mean that we endorse or accept responsibility for the third party’s privacy practices.

21.4 You should review the relevant third party’s privacy policy before providing personal data or using its services.

22. Changes in ownership or control

22.1 We may expand, restructure, merge, sell or transfer all or part of our business or assets.

22.2 Where relevant to such a transaction, personal data may be disclosed to prospective purchasers, investors and professional advisers under appropriate confidentiality arrangements.

22.3 Where a sale, merger or transfer is completed, personal data may be transferred to the new owner or controlling organisation where permitted by law.

22.4 The receiving organisation may use the personal data only for purposes consistent with this Privacy Policy or as otherwise permitted by applicable data-protection law.

22.5 Where required by law, affected individuals will be informed of a material change in controller or processing arrangements.

23. Changes to this Privacy Policy

23.1 We may update this Privacy Policy to reflect changes to:

23.1.1 Our courses or services;
23.1.2 The personal data we collect;
23.1.3 Our use of personal data;
23.1.4 Our technology or service providers;
23.1.5 Regulatory guidance; or
23.1.6 Applicable law.

23.2 The current version will be published on our Website with its effective or revision date.

23.3 Where a change materially affects how personal data is used, we will take reasonable steps to bring the change to the attention of affected individuals.

23.4 Where a new use of personal data requires consent, we will request that consent before beginning the new processing.

24. Contacting us

24.1 Questions, requests or complaints relating to this Privacy Policy or our processing of personal data should be sent to:

Email: privacy@travantis.com

24.2 Written correspondence may be sent to:

Travantis Ltd

Green Park Arlington 5 Exeter Park Road Bournemouth BH2 5BD

24.3 When contacting us about a data-protection matter, please provide sufficient information to allow us to identify your account or locate the relevant records.

24.4 You should not provide passwords, complete payment-card details or other unnecessary sensitive information when contacting us.