Privacy Policy

Last updated: July 2026 · PLA Tours · Promised Land Africa

PLA Tours is committed to protecting your personal data. This policy explains what information we collect, how we use it, and your rights in relation to it. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

PLA Tours (trading name of Promised Land Africa) is the data controller responsible for your personal data. You can contact us at info@pla-tours.co.uk.

2. What Data We Collect

We collect the following personal data when you join our waitlist, make a booking, or contact us:

Full name
Email address
Package preference or booking details
Payment information (processed securely — we do not store full card details)
Passport details (required for travel bookings)
Any special requirements or health information you choose to share

3. How We Use Your Data

We use your personal data for the following purposes:

To process your waitlist registration and send you relevant updates
To manage your booking and provide the services you have purchased
To communicate with you about your trip, itinerary, and any changes
To comply with our legal obligations as a PTS-protected tour operator
To send you marketing communications where you have given consent (you can unsubscribe at any time)

4. Legal Basis for Processing

Contract performance — processing your booking and delivering your holiday
Legal obligation — complying with PTS, financial, and travel regulations
Legitimate interests — running and improving our business
Consent — marketing communications (you can withdraw consent at any time)

5. Who We Share Your Data With

We may share your data with trusted third parties where necessary to deliver your holiday, including:

Brevo — our email marketing and CRM platform
PTS (Protected Trust Services) — as required by our membership obligations
Hotels, accommodation providers, and local suppliers in the Gambia
Transport providers where applicable

We do not sell your personal data to third parties.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy. For booking records we retain data for a minimum of 6 years in line with financial and legal obligations. Waitlist data is retained until you unsubscribe or request deletion.

7. Your Rights

Under UK GDPR you have the following rights:

Right of access — request a copy of the data we hold about you
Right to rectification — ask us to correct inaccurate data
Right to erasure — ask us to delete your data in certain circumstances
Right to restrict processing — ask us to limit how we use your data
Right to data portability — receive your data in a portable format
Right to object — object to processing based on legitimate interests or for marketing

To exercise any of these rights, contact us at info@pla-tours.co.uk. We will respond within 30 days.

8. Cookies

Our website uses only essential cookies required for the reCAPTCHA security feature on our waitlist form. We do not use tracking or advertising cookies.

9. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website is served over HTTPS and our email systems are authenticated with DKIM and DMARC.

10. Changes to This Policy

We may update this privacy policy from time to time. The current version will always be available at pla-tours.co.uk/privacy.html. We will notify you of significant changes by email where we hold your contact details.

11. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

12. Contact

PLA Tours · info@pla-tours.co.uk · pla-tours.co.uk