Privacy Policy

Last updated: 5 July 2026

1. Who is responsible for your data

Cassiora Travels is the data controller for the personal information you give us. Contact us on 0333 004 7171 or at bookings@cassiora.com about anything in this policy.

2. What we collect

• Contact details — your name, email address and phone number.
• Passenger details — names, dates of birth and any special assistance needs for everyone on the booking, so the airline can ticket the flight.
• Booking details — your search, chosen flight, booking reference and change history.
• Call information — if you speak to Alex by phone, the call may be processed to understand your request and arrange your booking.
• Payment — card payments are handled by our payment provider. We receive confirmation that payment succeeded and the amount, but we do not see or store your full card number.

3. Why we use it and our legal basis

• To arrange, confirm and manage your flight booking — this is necessary to perform our contract with you.
• To send you booking confirmations, receipts and travel documents by email and, where you agree, by WhatsApp — necessary for the service you asked for.
• To pass special assistance requests to the airline — with your consent, as this can include health-related information.
• To keep records and meet legal and accounting obligations — legal obligation and our legitimate interest in running the service.
• We only send marketing if you opt in, and you can unsubscribe at any time.

4. Who we share it with

We share only what is needed, with providers that help us deliver the booking:

• Duffel — searches fares and issues the booking with the airline.
• The airline — receives passenger details to ticket and operate your flight.
• Stripe (via Duffel Payments) — processes your card payment securely.
• Brevo — sends your confirmation and receipt emails.
• Twilio — sends WhatsApp booking messages, where you have agreed to receive them.
• Retell — powers the Alex phone assistant.
• Google — we keep booking records in Google Sheets to run our service.

We do not sell your personal data to anyone.

5. How long we keep it

We keep booking records for as long as needed to provide the service and to meet legal, tax and accounting requirements, after which they are deleted or anonymised.

6. Your rights

Under UK data protection law you can ask us to give you a copy of your data, correct it, delete it, or restrict how we use it, and you can object to certain uses. To exercise any of these, email bookings@cassiora.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

7. Security

We use reputable providers and secure connections to protect your information. Card details are handled by our PCI-compliant payment provider and are never stored on our own systems.

8. Changes to this policy

We may update this policy from time to time. The "last updated" date above shows when it last changed.