In the case of Bridgwater International the Nature of our work is Travel Agent. Although our business is very small and we only hold information temporarily in order to assist in the booking of flights and registration at hotels we have been compelled to register with ICO (ref A8338267) for £35 and to explain our privacy policy and the nature of how we may use that information.

The information below is from the ICO advisory site pertaining to ALL travel agents.

Description of processing

The following is a broad description of the way this organisation/data controller processes personal information. To understand how your own personal information is processed you may need to refer to any personal communications you have received, check any privacy notices the organisation has provided or contact the organisation to ask about your personal circumstances. 

Reasons/purposes for processing information

We process personal information to enable us to provide travel agency services to our customers, to promote our services, to maintain our accounts and records and to manage and support our employees.  

Type/classes of information processed

We process information relevant to the above reasons/purposes. This may include:

• personal details
• financial details
• goods and services provided
  

We also process sensitive classes of information that may include:

• physical or mental health details
• racial or ethnic origin
• religious or other beliefs of a similar nature
• trade union membership
• information about offences and alleged offences
• criminal proceedings, outcomes and sentences
• visual images, personal appearance and behaviour
  

Who the information is processed about

We process personal information about:

• customers
• complainants and enquirers
• professional advisers and consultants
• employees
  

Who the information may be shared with

We sometimes need to share the personal information we process with the individual themselves, their relatives, guardians or other representatives and also with other organisations. Where this is necessary we are required to comply with all aspects of the Data Protection Act (DPA). What follows is a description of the types of organisations we may need to share some of the personal information we process with for one or more reasons. 

Where necessary or required we share information with:

• education and examining bodies
• employment and recruitment companies
• suppliers and service providers
• financial organisations
• business associates and professional advisers
• credit reference agencies
• debt collection and tracing agencies
• private investigators
• police forces
• security organisations
• central government