Privacy Policy

INTRODUCTION

uk.lowtickets.com is faithful to maintaining this policy and safeguarding your information. The information we gather when you visit our website, how we use it, where we store it, and how we protect it are all described in our Privacy Notice and Policy. We also describe the conditions under which we might disclose the information you give us. We will also inform you of your rights regarding the information we collect and provide instructions on how to contact us.

An overview of the privacy statement

As a friendly reminder, this is a brief overview of our Privacy Notice. Take a moment to verify the facts. We are dedicated to tackling the different facets listed below:

• How and what types of information we gather and utilize
• When and with whom we share your information
• Your options on how we gather, utilize, and distribute your data
• How to view and amend your information

How do we collect and use personal information?

We gather personally identifiable information when you use our websites and apps, including your name, email address, phone number, mailing address, credit card number, and other payment information. Additionally, we gather information about your device, internet connection, and service usage. Although it is pertinent to your use of our app or website, this information does not individually identify you.

We may collect other information when assisting you with your travel arrangements, including your gender, date of birth, airline mileage, and arrival and departure times. Additionally, we might require your passport or another official form of identification.

This is when we gather personal information:

• When you give it to us directly.
• We will automatically gather information as you navigate the website, including data from web beacons, cookies, IP addresses, and other tracking technologies.
• We also get information from our business partners and from external sources.

We get your personal information when you create an account on our websites, sign up to receive offers or information, or use our platform to book a reservation. When you visit our websites or download and use our apps (with your consent, if applicable), we also collect this personal information through automated technologies, such as cookies that are placed on your browser. Furthermore, uk.lowtickets.com Group affiliates, business partners, and other third parties provide us with personal information that enables us to improve our platform and associated products and services, maintain accurate records, potentially detect and investigate fraud, and more effectively sell our services.

When is the sharing of your personal data?

Your personal information may be shared for a number of purposes. This includes assisting you with travel or holiday arrangements, providing support while traveling, offering product and service information, and facilitating communication with travel agencies. To comply with the law, we may also share your data. Please review our complete Privacy Statement below for further details on how we manage your personal information.

How We Gather and Utilize Your Personal Data

Here are specifics regarding:

• What categories of personal information do we gather and utilize
• How we gather and use it
• Why do we gather and use it
• And the legal justifications we apply.

Legal underpinnings of processing:

The table below enumerates the legal grounds we use to collect and use your personal data.

Yet, we must adhere to one of the following guidelines whenever we collect or use your personal information:

• Consent: When we send you marketing materials as required, for example, you confirm that you have permitted us to do so.
• Legal Obligation: This means that we have a legal obligation to collect personal information from you or to use it for a specific purpose (e.g., using your transaction history to fulfill our tax, financial, and legal obligations).
• Contract Performance: This indicates that your personal data is required to fulfill a commitment to you, such as booking your hotel, processing payments, or creating an account at your request.

If we need your personal information to comply with a legal requirement or to complete a transaction with you, we will notify you in advance and explain whether or not you are required to supply it (as well as the consequences of not providing it).

Legitimate Interest: Your rights (explained below) do not outweigh our legitimate interests, which are served by the processing of your data.

Some countries and regions permit us to process personal data for legitimate purposes. Our legitimate interests (or the legitimate interests of any third party) will typically be to operate or improve our platform, contact you as needed to provide our services, for security verification when you contact us, to respond to your inquiries, to market to you, or to detect and halt illegal activity. When evaluating whether a specific use of your personal data is permissible, we always consider the potential impact on your rights, even if we believe the use serves a legitimate legal purpose. We consider your rights globally when determining how we use your personal information, even though the concept of legitimate interest is restricted to particular countries and regions.

Types of Personal Data We Gather and Utilize

We collect and use personal data for the following purposes:

1. Reasons for Using the Platform and Bookings:

• Get travel insurance, expedite your reservation, and verify your identification.
• Offer services related to your account and reservation.
• Create, manage, and update your account on our platform and confirm your user status.
• We will keep track of your search and travel history, preferences for accommodations and travel, and other information about your use of the platform and services offered by uk.lowtickets.com Group, as detailed in our Privacy Statement.
• You must enable and facilitate payment processing (such as collecting or validating payment details for our various payment models), coupons, and other transactions to secure a reservation, confirm a reservation, validate your bank card, expedite checkout, or handle fees, charges, payments, or refunds.
• Oversee loyalty and incentive schemes.
• Gather and present reservation-related reviews.
• We make it simpler and quicker for you to utilize our services with features like allowing you to log in with your account on the websites and online services of specific uk.lowtickets.com Group businesses.

2. Marketing Objectives

• They might get in touch with you for marketing purposes through push notifications, in-app messaging, text messages, emails, phone calls, mail, and other means.
• We use information, such as your browsing and purchase patterns, to customize our marketing and advertising to your preferences.
• Track and evaluate the success of our marketing and promotion efforts.
• Plan promotions with contests, prizes, and gifts.

3. Communication and Customer Service Issues

• You can contact the client (you) via text message, phone call, or email to get the information you need for booking updates, travel booking confirmations, emergencies, or other uses listed in this Privacy Notice section.
• Provide information, consider your informational options, and address your questions.

4. For Security and Compliance

• Promoting security, verifying our clients, preventing and investigating fraudulent and unlawful activities, guarding against legal action and other liabilities, and managing other risks...
• Respect relevant laws (such as those governing the sharing of tax data), protect our rights and interests and those of our users, support ourselves, and respond to questions from law enforcement, courts, governments, public agencies, and other legal authorities, as well as questions that are part of a legal process.
• Follow all applicable laws and guidelines related to immigration, customs, security, anti-terrorism, anti-bribery, and other due diligence requirements.
• Perform market research, data analytics, and surveys. Upkeep, enhancement, investigation, and assessment of our websites, applications, events, materials, and services.
• Calls, discussions, and other interactions with our customer service agents and other representatives, as well as platform communications between or among partners and travelers, may be monitored or recorded by us for quality control, training, dispute resolution, and other purposes outlined in this document.
• Provide us with data that has been anonymized, de-identified, or aggregated, so we can use and share it without limitations when permitted.

You can also give your consent for your data to be shared with other users or third parties, published, or shown in public places on the website. Uploading and submitting User Contributions to other individuals entails full responsibility on your part. No security system is perfect or impenetrable, even if we restrict access to particular pages. Additionally, we have no control over the actions of other website users, even if you decide to share User Contributions with them. Therefore, we cannot and will not guarantee that unauthorized parties will not view your User Contributions.

When you download and visit our websites, technology may automatically collect the following data:

• Usage Information: When you use our website, we might automatically collect logs, location data, traffic statistics, and other communication data. Additionally, we might collect data about the resources you use and access on or through the App.
• Data and Documents Stored: The program may also be able to access metadata and other data associated with other files on your device. Photos, contacts from your address book, videos, and music are a few examples.
• Details of the Device: Among the information we may gather from your mobile device and internet connection are your phone number, IP address, operating system, and kind of browser. We may also get information about your mobile network.

Our solution makes use of technologies for automatic data collection:

When you use our website, we may use automatic data collection tools to gather specific information about your device, browsing preferences, and activities. This contains: Information about how you visit our website, including traffic trends, logs, location, and other communication information, as well as the resources you use and access. Your computer and internet connection details, IP address, operating system, and browser type.

We may combine or merge the data we automatically collect with personal data we collect directly, acquire from third parties, or obtain in other ways. Furthermore, the data may be kept or combined with personal information we obtain independently. It gives us the ability to:

• To grow our website and give users a more personalized experience, we need to look at the audience's sizes and behaviors.
• Your feedback on the website will be stored to help us improve it.
• We will be able to recognize you if you come back to our website.

We could employ the following methods to collect data automatically:

Cookies: A cookie is a little file stored on your computer's hard drive as well as in the memory of your smartphone. By selecting the relevant option on your smartphone or browser, you can opt out of accepting browser cookies. However, if you choose to disable this function, you might no longer be able to access the websites. When you visit our website, our system will automatically transmit cookies to your computer if you haven't set your browser to reject cookies.

Flash Cookies: To gather and store information about your preferences and how you visit, use, and traverse our website, some areas may employ locally saved objects. Flash cookies are not controlled by the same browser settings as browser cookies.

WEB Beacons: Web beacons are tiny digital files that allow businesses to track website statistics and the number of people who have received emails or visited particular websites.

Other tracking techniques and third-party cookies are employed:

There are various third parties that contribute to the Website, including advertisers, ad networks and servers, content and app suppliers, analytics firms, your mobile device manufacturer, and your mobile service provider. These partners play a helpful role by offering services like advertising, payment processing, and ticketing to enhance your experience.

Some of these third parties might use cookies, either on their own or alongside web beacons and other tracking technologies, to gather information about you when you visit our website. They may use the information they collect to connect it with personal details they already have about you, or they might gather insights into your online activities over time across different websites and online services, including personal information. This information may help them show you ads that are more relevant or provide material based on your interests, depending on your preferences.

While we strive to provide a seamless experience, we don't have control over how these detection devices are utilized or how these third parties operate. If you have questions about ads or other personalized content, we recommend reaching out to the relevant provider directly. Also, you can refer to the guidelines in "Choices about How We Use and Disclose Your Information" below to learn how to opt out of receiving targeted advertising from various sources.

How We Utilize Your Data?

• We give a summary of our website and its contents.
• To fulfill your travel bookings and purchases, to update you on your bookings and purchases, and to deliver any information, goods, or services you ask for.
• It is necessary to carry out our obligations and safeguard our rights under any contracts we may have with you, including handling payments, invoices, and debt collection, regardless of any additional objectives you may have specified.
• To keep you informed about any updates or additions we make to our website, app, or any goods or services we provide or deliver to you via it.
• To allow you to engage with the interactive features of our website or application.
• To sell our goods and services, and to send you marketing and advertising materials that we create and believe you might find interesting.
• We may use any description appropriate to convey the information you give us.
• For any other reason, with your permission.

We may show advertisements to our advertisers' target audiences based on the information we have gathered about you. Even though we never reveal your personal information for these purposes without your consent, if you click on or interact with an advertisement, the advertiser may assume that you meet its target requirements.

Your Personal Information Will Be Disclosed

Sharing information that is aggregated about our users or that does not belong to any one person is unrestricted. Any information you provide, including personal information, may be shared as described in this privacy statement.

• Our commercial operations, including processing payments, sending flight service notices, compliance, analytics, fraud prevention, and customizing our advertising to your preferences and interests, are made possible by our whole affiliate and business network.
• Only the information necessary for them to finish your travel arrangements may be shared with agents, service providers, and other outside parties that assist us in operating our business.
• To fulfill your travel requirements, we typically need to process personal data through a third party, such as entry visa or passport corporations, hotels, rental car agencies, and airlines.
• If, as a going concern or in connection with a bankruptcy, liquidation, or similar proceeding, uk.lowtickets.com were to go through a merger, divestiture restructuring, reorganization, dissolution, or other sale or transfer of some or all of its assets, the acquiring company or another successor would be the recipient of the personal information of our website's users.
• Remember that they will make an effort to sell you their products and services to meet your objectives.
• When you provide us with your information, we may use it for other purposes that you will be informed about.

With your permission, we may additionally disclose your personal information in order to comply with our legal obligations:

To respond to any request from the government or regulatory bodies, as well as any court order, subpoena, legal demand, or legal procedure. To manage, enforce, or fulfill our Terms of Service and other agreements, as well as for billing and collection purposes.

If, in good faith, we believe that disclosing the information is necessary to protect the law, prevent or investigate fraud, safeguard your safety, our clients' rights, property, or safety, or any combination of these, to reduce credit risk and prevent fraud. This requires sharing information with other businesses and organizations.

Consumer Choices and Rights

You have multiple options for exercising your right to data protection. For instance, you can click the unsubscribe link in our emails or contact our customer support team to opt out of promotional information. See our Privacy Notice to find out more about your options and rights regarding data protection. By adhering to our Cookie Statement, you can also regulate how we utilize non-essential cookies. These are your main rights:

• You can contact us or visit your account at any time to view and inquire about the particular deletion or change of your personal data.
• You can unsubscribe by clicking the UNSUBSCRIBE LINK in your email.
• If you want to UNSUBSCRIBE from or opt out of marketing emails, please be aware that we may still send you a necessary transactional or account-related message that you cannot unsubscribe from.
• At any time, you can update or modify your communications.
• If you would like to withdraw your consent to the processing of your personal information, please contact us at any time using the information below.
• The legality of any processing carried out before your consent will be unaffected if we remove your consent, if we treat your personal information on a legal basis other than consent.

Use of Information by Country

It's essential to note that some nations or regions make it straightforward for their citizens to exercise certain rights related to personal data. Although the extra rights differ from nation to nation, the following are some examples:

• Ask for a copy of your personal data.
• Find out why your data is being handled.
• Delete your personal information.
• Manage the processing and usage of your data.
• You have the right to object to the sharing or disclosure of your data.
• Request that your personal information not be sold.
• Learn more about our automated decision-making process and the outcomes.
• Requesting a manual decision-making process is a better option because fully automated decision-making, including profiling, has serious legal ramifications.
• Challenge a choice that was made only by a computer.

Transfer of Data Internationally

Your personal information may be accessed, processed, or transferred to countries other than the one you are presently in. Regarding data protection, the laws in these nations could differ from those in your own. To complete your transaction and for the reasons specified in this Privacy Statement, we may transfer your personal information across international boundaries.

Note that our platform's servers are situated in the United States, while third-party service providers operate in other countries.

Additionally, we may disclose your personal information to parties based in countries other than your current residence. By this Privacy Notice and applicable data protection regulations, we have taken the necessary precautions to ensure that any access, processing, or transfer of your data is secure. No matter where your data is accessed, processed, or transmitted, these protections provide it with a level of security that is at least as high as the comparable local laws in your nation. We will fulfill our responsibilities for cross-border data transfer by adhering to the data protection laws, rules, and guidelines established by the relevant authorities.

It may include completing tasks such as security evaluations and/or certifications, as well as signing contracts with foreign recipients per the standard contract set by the relevant authorities.

A few of the measures we have are listed below.

Framework for EU-US Data Privacy

The EU-U.S. Data Privacy Framework (EU-U.S. DPF), the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) (referred to as "the DPF Frameworks"), and the UK Extension to the EU-U.S. DPF have all certified uk.lowtickets.com' wholly-owned U.S. affiliates. Along with liability for personal data from Switzerland, the UK, and the EU, we also promise to adhere to the DPF Framework Principles of Notice, Accountability for Onward Transfers, Data Integrity and Purpose Limitation, Choice, Security, Enforcement, Access, and Recourse. The DPF Framework compliance of these low-cost affiliates is under the purview of the Federal Trade Commission.

In addition, if any of our DPF Framework certifications are no longer valid protection for a relevant transfer, we investigate intra-group Standard Contractual Clauses that apply to the transfer of EU personal data to the United States.

When it comes to unresolved complaints regarding how we handle personal data that we receive based on the DPF Frameworks, uk.lowtickets.com U.S. affiliates promise to cooperate and follow the recommendations of the panel established by the UK Information Commissioner's Office (ICO), the Gibraltar Regulatory Authority (GRA), the EU data protection authorities (DPAs), and the Swiss Federal Data Protection and Information Commissioner (FDPIC). In some instances, binding arbitration can resolve DPF Frameworks compliance issues that none of the other DPF Frameworks procedures can handle.

Engagement with Cross-Border Privacy Regulations

The Global Cross-Border Privacy Rules System is adhered to by uk.lowtickets.com's privacy rules, which are described in this Privacy Statement. By using this paradigm, enterprises can ensure that personal data shared among participating economies is secure. Please refer to the comprehensive description provided below for additional details about the Global Community-Based Participatory Research (CBPR) system.

Minors

We are unable to ascertain the age of users, and our website and mobile application are not meant for use by minors due to existing data protection regulations. If a minor has provided us with personal information without their knowledge, their parents or guardians should contact us (see the "Contact Us" section below). If we discover that personal data was collected from a minor without their parents' or legal guardians' consent, we will terminate their account.

We may need to collect the personal information of minors in a few unusual circumstances, such as when booking a reservation, purchasing additional travel-related services, or in other exceptional cases (like family-friendly features). We take great care to protect the personal information of minors and strictly adhere to the principles of legality, necessity, clear purpose, openness, transparency, and security when processing it.

If you would like to have the personal information of a minor removed or updated, or if you, as the minor's parent or legal guardian, have any questions or concerns about how we protect minors' personal information, please use the Contact Us option below to get in touch with us.

Maintaining Records

We will retain your personal information in accordance with all applicable laws for as long as necessary to achieve the objectives specified in this Privacy Statement, unless the law requires or permits a longer retention period. Your personal information will be de-identified, aggregated, or anonymized if it is used for analysis or trend analysis over a prolonged period.

When we delete your personal information, we follow industry-standard protocols to ensure that it cannot be recovered or accessed. Backup copies of your personal data may be stored to prevent unauthorized loss or destruction of your data. This personal information will not be accessible until it is restored, and any unnecessary information will be deleted.

The following standards serve as the foundation for our retention terms:

The duration of our collaboration with you, any current accounts you may have with businesses in the uk.lowtickets.com Group, and any recent bookings or other platform usage, whether we have any legal requirements regarding your personal data, such as keeping records of your transactions with us.

Security

We are committed to implementing the necessary security measures to protect the data we collect, and we want you to feel confident using our platform and any related products and services. We take reasonable steps to establish adequate organizational, technological, and physical safeguards to secure the personal data that we collect and process, although no organization can guarantee complete security.

To ensure we gather, keep, and exchange personal data responsibly following its level of sensitivity or confidentiality, our cybersecurity team implements technical security controls and procedures. We continuously implement and upgrade our security procedures to prevent unauthorized access, loss, alteration, and destruction of your personal information. We have the same exacting standards for our data-handling partners.

In line with industry best practices, we have implemented an information security protection system and routinely conduct assessments and certifications, such as PCI-DSS certification. Additionally, in accordance with our information classification and processing criteria, we have implemented suitable security measures for the entire data collection, storage, processing, usage, transfer, and sharing lifecycle. To further secure systems and services, we have implemented a range of managerial and technical safeguards, including access controls, multi-factor authentication, VPNs, SSL-encrypted transmission, and verification procedures.

We can control and authorize personnel who might have access to your information, and we regularly train employees on information security. You shall be informed in line with applicable data protection rules and regulations in the event of a personal data security incident that could impact your rights and interests. As mandated by applicable laws and regulations, we will also notify the relevant regulatory organizations about the issue at hand.

Connect with Us

If you would like more information about how we handle your personal data, or if you have any questions or issues about how we use it, please contact us using the Privacy Section. This area also allows you to exercise your right to view, amend, or request the removal of your personal information.

The website or app you're using has uk.lowtickets.com as its primary data controller, while they may also collaborate with other parties. Click here for additional details about our representative and the data controller(s) or joint controllers (where applicable) for the personal data we handle.

Statement Updates

For reasons including increased clarity or adjustments to modifications in our services, business practices, or relevant laws and regulations, we reserve the right to revise this Statement at any time. Unless there are urgent security, legal, or tax issues that require immediate action, we will provide you with a reasonable heads-up if we make substantial changes that affect your rights or responsibilities. To find out when this Statement was last updated, look at the "last modified" date at the top.

Please contact us here if you would like further details on past upgrades.

Information Security

We take the security of your personal data very seriously. Our industry-standard security protocols prevent your personal information from being lost, stolen, accessed by unauthorized parties, altered, used, or disclosed. Our secure servers are protected by a firewall and house all of the data you have given us. We will use SSL technology to encrypt all financial transactions.

The Internet remains a relatively safe means of sending information. They have taken every precaution to protect it using security measures, but they cannot guarantee the security of any personal information you provide via the Internet. You are solely responsible for any personal information you send. Regarding the security or privacy settings of the Website, we cannot be held accountable for any instances of unauthorized use or access. If we discover or become aware that your personal information has been compromised, we shall send you an email at the current address you provided to us as soon as is reasonably possible given the circumstances or as otherwise required by applicable law. We reserve the right, however, to postpone notification for as long as necessary to assess the extent of the breach, restore the integrity of our system, and cooperate with law enforcement.

Managing your data

By using our website, you consent to the transmission, storage, access, and processing of your data in the United States and other countries. The laws governing data protection in these nations may differ from those in your own country and be less stringent. You agree to the possibility that we may disclose your information to third parties in these nations. Our Privacy Statement covers all of this.

Modifications to Our Privacy Statement

Our privacy and data protection policies may need to be adjusted in response to changes in applicable laws, adjustments to our services, and other circumstances. Therefore, the firm has the right to change this privacy statement at any time. The most recent update to the Privacy Policy will be highlighted at the top of the page.

We will update this page whenever we make changes to our privacy statement. Additionally, you must maintain your email address current, valid, and deliverable, even though we work hard to update our website and privacy policy.

For the most recent information, please check "Changes to Our Privacy Policy" since our policy is subject to change at any time. Any changes we make to this policy are presumed to be accepted by you if you continue to use the website. It is recommended that you review the policy regularly for any updates.

We may change the Privacy Policy at any time for a number of reasons, including

• Improving it to increase its transparency or accessibility,
• Respecting the laws, rules, and tax obligations,
• Modernizing our operations or services, and/or

Resolving security issues: Unless we need to make changes immediately to meet security, regulatory, or tax requirements, we will provide you with adequate notice if we plan to make significant changes that affect your rights or responsibilities. Check the "last updated" date at the top to see when this Privacy Statement was last updated.