Privacy Policy

This policy explains what personal information Sarah Tours ("we", "us", "our") collects when you browse this website, make a booking, or get in touch with us, and what we do with it. It applies to sarahtours.com and to bookings made directly with us.

1. Information We Collect

We collect information in a few different ways, depending on how you use the site:

• Browsing: standard technical information such as your IP address, browser type, and pages visited, collected automatically as part of how the website runs.
• Contact form & newsletter: your name, email address, phone number, and the content of your message, when you write to us or subscribe to updates.
• Bookings: for every traveler on a booking, we collect the name, date of birth, gender, nationality, email, and phone number needed to arrange the tour and, where relevant, to meet documentation requirements set by accommodation providers or local authorities.
• Customer account: if you create an account, your name, email address, and password (stored securely, never in plain text), so you can view your bookings and saved tours.

2. How We Use It

We use your information to:

• Process and manage your booking, and communicate with you about it before, during, and after your trip;
• Respond to questions sent through our contact form;
• Send you the newsletter, if you've subscribed — you can unsubscribe at any time via the link in any email we send;
• Maintain your customer account and the tours you've saved;
• Keep the website secure and working properly, including basic spam and fraud prevention on our contact form.

We don't use your information for automated decision-making that produces legal or similarly significant effects, and we don't sell your personal information to third parties.

3. Payment Information

When you pay by card, your card details are entered directly into a secure payment page hosted by our payment processor, Stripe, and never pass through or get stored on our own servers. Stripe's use of your information is governed by Stripe's own privacy policy.

4. Cookies & Local Storage

We use a small number of strictly necessary cookies to keep the website functioning — for example, to keep you signed in to your customer account and to protect forms against cross-site request forgery. These can't be switched off, as the site won't work correctly without them.

Your saved tours (wishlist) are stored in your browser's local storage rather than a cookie, so they stay on the device you're using and aren't sent back to our servers until you sign in.

We may also use analytics tools such as Google Analytics, Google Tag Manager, or the Meta (Facebook) Pixel to understand how visitors use the site and to measure the performance of our marketing. Where these are active, they may set their own cookies — you can control or block these at any time through your browser settings.

5. Who We Share It With

We share personal information only where it's needed to run our business and deliver your trip:

• Stripe, to process card payments;
• Local guides, accommodation providers, and transport partners, limited to the traveler details they need to host or transport you;
• Our email and hosting providers, who process data on our behalf to run this website and send booking-related emails;
• Authorities, where we're legally required to disclose information.

6. How Long We Keep It

We keep booking records for as long as needed to fulfil your trip, handle any post-trip queries, and meet our accounting and legal obligations. Contact form messages and newsletter subscriptions are kept only as long as they remain relevant, and are removed on request as described below.

7. Your Rights

You can ask us to:

• Tell you what personal information we hold about you;
• Correct information that's inaccurate or out of date;
• Delete your information, where we're not required to keep it for a legal or accounting reason;
• Stop sending you marketing emails.

To make any of these requests, email us at discover@sarahtours.com. We'll respond as promptly as we can.

8. Security

We use reasonable technical measures — including encrypted connections (HTTPS), hashed passwords, and access controls on our systems — to protect your information. No website can guarantee perfect security, but we take this seriously and act quickly to address any issue we become aware of.

9. Children's Privacy

This website is not directed at children, and we don't knowingly collect personal information from anyone under 16 other than as part of traveler details supplied by a parent or guardian making a family booking.

10. Links to Other Sites

Our website and blog may link to third-party sites — for example, destination resources or social media. We aren't responsible for the privacy practices of sites we don't operate, so it's worth checking their own policy before sharing information with them.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or in the law. We'll update the "last updated" date at the top of this page whenever we do.

12. Contact Us

Questions about this policy or how we handle your information? Email discover@sarahtours.com or reach us through our contact page.