This policy explains which personal data DS Smart Travel collects on this website, what we use it for and what your rights are. It describes how the site actually works, not future intentions.
We serve people in Brazil and in the United Kingdom, so we apply the Brazilian General Data Protection Law (LGPD) and the UK GDPR, as applicable.
Who is responsible
DS Smart Travel is responsible for the processing described here. For anything relating to personal data, including exercising the rights listed below, write to contact@dssmarttravel.com.
What we collect
If you fill in the planning form, we collect what you tell us:
- Name, email and phone or WhatsApp, so we can get in touch.
- Trip details: origin, destination, dates or date flexibility, number of adults and children.
- The children's ages on the travel date, when there are children in the group.
- Trip priorities, budget range and details of any option you have already found.
- Answers to the questions specific to the type of trip you chose, such as hotel, transfer, checked baggage or flexible fare.
We never ask for identity documents, home address or payment details anywhere on this website.
Children's data
Children's ages are provided by the responsible adult filling in the form, and are used only to research fares, seating and airline requirements, which vary by age. We do not collect data directly from children and no part of this site is aimed at them.
Specific needs
The form has a free-text field where you can tell us about any situation we should consider. This field is optional. If you choose to mention a health condition, reduced mobility or a need for assistance, that is sensitive data under the LGPD and special category data under the UK GDPR. In that case it is processed for the sole purpose of arranging the trip around what you need, and only with your explicit consent, given when you submit the form.
If you would rather not put that in writing, leave the field blank and talk to us directly.
What we use it for
We use your data to understand your needs, research travel options, explain the differences between them and reply to you. We do not use your data for advertising, we do not build behavioural profiles and we do not make automated decisions about you.
Our lawful basis
We process your data on the basis of your consent, given when you tick the box before submitting the form, and on our legitimate interest in replying to contact you initiated. For sensitive data, where present, the basis is specific, explicit consent.
Who we share it with
We do not sell your data and we do not pass it to third parties for marketing.
To arrange a trip we need to check availability and, once you decide to book, pass on the details required to suppliers such as airlines, hotels, car hire companies and insurers. This happens only to the extent needed for the booking you approve, and each supplier handles the data under its own policy.
The website is hosted by Vercel, which processes technical access logs, including IP address, in order to serve the pages and keep the service running.
International transfers
Because we serve both countries and hosting is international, your data may be processed outside Brazil or outside the United Kingdom. Where that happens, we apply the safeguards required by the LGPD and the UK GDPR to maintain the same level of protection.
WhatsApp
The WhatsApp buttons on this site open a conversation in the app only when you click them. No data of yours is sent to WhatsApp before that. The message that appears ready to send is standard text written by us — except in the urgent travel shortcut, where the deadline you typed is included to speed things up. Once you are chatting there, WhatsApp's own terms and policy also apply.
How long we keep it
We keep your data for as long as we are assisting you and for as long as we must to meet legal and tax obligations relating to trips booked. After that we delete or anonymise it. If you ask us to delete it sooner, we will, except for anything the law requires us to keep.
Your rights
At any time you may:
- Confirm whether we process your data and request access to it.
- Correct data that is incomplete, inaccurate or out of date.
- Request deletion of data processed on the basis of consent.
- Withdraw your consent, which does not affect processing carried out before withdrawal.
- Request portability of your data to another provider.
- Object to processing and request that its use be restricted.
- Ask who we have shared your data with.
To exercise any of these, write to contact@dssmarttravel.com. We reply within the period set by the applicable law.
If you feel we have not resolved the matter, you may complain to the competent authority: the ANPD in Brazil, or the Information Commissioner's Office (ICO) in the United Kingdom.
Security
We apply technical and organisational measures to protect the data we receive. Internal access is restricted and protected by individual authentication.
Changes
We may update this policy to reflect changes to the service or to the law. The version published on this page is always the one in force.