Privacy Policy

1. Introduction

Echoes Travel LLC (“we,” “our,” or “us”) operates the website https://www.echoes.travel (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, and the choices you have about your data. By using the Service, you agree to this Policy.

2. Data Controller Contact Information

3. Data We Collect and Legal Basis (GDPR)

We collect information to provide and improve our Service. Below are the categories, purposes, and legal bases under GDPR Article 6.

A. Personal Data (Directly Collected)

B. Financial Data

C. Technical and Usage Data (Automatically Collected)

D. Tracking Data

We use cookies and similar technologies. You will be asked for consent via a cookie banner for all non-essential cookies.

4. Use of Data

• Provide and maintain the Service.
• Manage your account/registration.
• Process and fulfill bookings and payments.
• Send newsletters and marketing communications with your consent.
• Enable interactive features when you choose to use them.
• Monitor usage (analytics), detect and address technical issues.
• Improve the website experience and tailor content.

5. Disclosure and Sharing of Data (Third Parties)

• Payment Processors (e.g., Stripe): Handle secure payment transactions; we do not store full card details.
• Analytics (e.g., Google Analytics, Facebook Pixel): Measure traffic and behavior to improve the Service.
• Email/Marketing (e.g., Mailchimp/Constant Contact): Manage and send newsletters with your subscription.
• Legal/Compliance: We may disclose data if required by law or valid authority requests.

These third parties are obligated to use your data only to perform services for us and not for their own purposes.

6. Data Transfer and International Scope (GDPR)

Your information may be transferred and stored outside your jurisdiction. Where data is transferred from the EEA, we implement appropriate safeguards (e.g., European Commission Standard Contractual Clauses) to protect your data.

7. Data Security and Retention

We use commercially acceptable means to protect your Personal Data; however, no method of transmission or storage is 100% secure.

We retain Personal Data only as long as necessary for the purposes in this Policy or as required by law (e.g., tax/accounting).

8. Your Data Protection Rights under GDPR

If you are an EEA resident, you have the following rights (subject to conditions under law):

• Access (get a copy of your data)
• Rectification (correct inaccurate/incomplete data)
• Erasure (“Right to be Forgotten”)
• Restriction of processing
• Objection to processing (incl. direct marketing)
• Data Portability
• Withdraw Consent where applicable

To exercise your rights, contact us at hello@echoes.travel.

9. Changes to This Privacy Policy

We may update this Policy from time to time. We will post the new version here and update the “Effective Date” above.

Last updated: 27 Oct, 2025