Privacy notice

Headseast Ltd, trading as The Luxury Train Travel Company, is the data controller for the personal data described in this notice. We are a UK company registered at 9 Bonhill Street, London, EC2A 4DJ (company number 6717612) and have been working exclusively in luxury rail since 2008.

You can reach our privacy contact by email at privacy@theluxurytraintravelcompany.com or by telephone on +44 (0)20 8191 0620.

• Enquiry details you give us: name, email address, telephone number, party size, preferred departure dates, trains and regions of interest, and anything you write in your message.
• Booking details, where an enquiry becomes a booking: traveller names, passport and travel document details where a rail operator requires them, accessibility or dietary requirements you choose to tell us, and payment confirmation records.
• Technical data: IP address, device and browser information, and pages viewed. Analytics data is only collected where you have consented.

Please only send us health, dietary or accessibility information where it is needed for your journey. We treat it as special category data and use it solely to arrange your travel.

• To answer your enquiry and prepare a quotation: our legitimate interest in responding to people who contact us, and steps taken at your request before entering a contract.
• To arrange and administer a booking: performance of our contract with you.
• To send marketing emails about rail journeys: your consent, or our legitimate interest in contacting existing customers about similar journeys. Every message has a one click unsubscribe.
• To meet legal, accounting, ABTA and ATOL obligations: compliance with a legal obligation.
• To run and secure this website and, with your consent, to measure how it is used.

We share only what is necessary, with: the rail operator and any hotel, transfer or tour supplier involved in your journey; our IT, hosting, email and customer messaging providers; our payment provider; our accountants and insurers; and regulators or authorities where the law requires it. We never sell personal data and we do not share it for cross context behavioural advertising.

Some suppliers and journeys are outside the UK and the European Economic Area. Where personal data is transferred internationally we rely on adequacy regulations, the UK International Data Transfer Addendum or Standard Contractual Clauses, or, for the travel arrangements you have asked us to make, the necessity of the transfer to perform your contract.

• Enquiries that do not become bookings: up to 24 months from your last contact.
• Booking and financial records: 7 years after the end of the tax year in which travel took place.
• Marketing consents and opt outs: for as long as needed to honour your choice.
• Website consent records: 12 months, after which we ask you again.

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. You can withdraw consent at any time, and you can opt out of marketing at any time. If you are in California you may also request details of the categories of personal information collected, disclosed or shared, and you will not be treated differently for exercising your rights.

Use our privacy request form or email us. We respond within one month. If you are unhappy with our response you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority.

Non essential cookies are only set after you agree. See our cookie policy for the categories we use and how to change your choice.

This website is not directed at children and we do not knowingly collect data from anyone under 16 other than the traveller details a booking adult provides.

We review this notice regularly. Material changes will be posted here with a new revision date.