PRIVACY POLICY

Last updated: 12 September 2026

1. Introduction

BackTrip & Travel SARL (“BackTrip”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, share, and protect personal information when you:

• visit or use www.backtrip.eu;

• request information or a quotation;

• make a reservation or purchase one of our tours, transfers, excursions, packages, or other travel services;

• contact our Customer Support or Reservations teams;

• communicate with us by email, telephone, WhatsApp, online forms, social media, or other communication channels;

• book one of our services through a travel agency, online travel agency, reseller, partner, or other third-party platform; or

• subscribe to our newsletters or marketing communications.

This Privacy Policy is intended to comply with the EU General Data Protection Regulation (GDPR), applicable French data protection legislation, including the French Data Protection Act (“Loi Informatique et Libertés”), and other applicable privacy laws.

2. Who Is Responsible for Your Personal Data?

For the purposes of applicable data protection legislation, the data controller is:

BackTrip & Travel SARL

Trading name: BackTrip

Registered office: [INSERT REGISTERED OFFICE ADDRESS]

France

Website: www.backtrip.eu

Customer Support & Reservations:

Phone & WhatsApp: +33 6 66 22 87 47

Email: reservation@backtrip.eu

General enquiries:

Email: contact@backtrip.travel

You may contact us using these details if you have any questions about this Privacy Policy or wish to exercise your data protection rights.

3. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of information.

3.1 Identity and Contact Information

This may include:

• first name and last name;

• title;

• billing address;

• country of residence;

• email address;

• telephone and WhatsApp number;

• nationality, where reasonably required for a travel service;

• age or date of birth where necessary for ticketing, age-based pricing, or service eligibility.

3.2 Booking and Travel Information

When you request or make a booking, we may collect information such as:

• tour or service selected;

• travel dates;

• number of passengers;

• names of participants;

• pick-up and drop-off location;

• hotel or accommodation details;

• flight or train information where required for transfers;

• itinerary;

• requested language;

• special requests;

• accessibility requirements;

• dietary requirements;

• passenger age categories;

• booking references;

• travel preferences;

• information necessary to arrange attractions, restaurants, wineries, transportation, guides, accommodation, or other travel services.

Where information concerning health, disability, dietary restrictions linked to health or religion, or another category of sensitive personal data is provided to us, we will process this information only when reasonably necessary to fulfil your request and where permitted by applicable law. Where required, we will ask for your explicit consent.

Please do not provide sensitive personal information unless it is genuinely necessary for us to provide the requested service.

3.3 Payment and Transaction Information

We may process information relating to:

• booking amount;

• currency;

• payment status;

• payment method;

• transaction reference;

• invoice details;

• refunds;

• cancellations;

• chargebacks;

• outstanding payments.

Card payments are generally processed through secure third-party payment service providers.

Where a payment provider processes your payment directly, BackTrip does not normally receive or store your complete payment card number or card security code.

Payment providers process payment information according to their own security and privacy obligations.

3.4 Communications

We may retain communications you have with us, including:

• emails;

• website enquiries;

• quotation requests;

• WhatsApp or SMS messages;

• telephone call information;

• customer service correspondence;

• complaints;

• reviews and feedback;

• requests for changes or cancellations.

This information allows us to manage your booking and provide appropriate customer service.

3.5 Technical and Website Usage Information

When you visit our Website, certain information may be collected automatically, including:

• IP address;

• browser type and version;

• device type;

• operating system;

• approximate geographic location derived from your IP address;

• language preferences;

• pages visited;

• date and time of visits;

• referring website;

• interactions with Website functionality;

• cookies and similar technologies;

• security and fraud-prevention information.

For more information, please see Section 12, Cookies and Tracking Technologies.

3.6 Marketing Preferences

We may record:

• whether you have subscribed to our newsletter;

• your preferred communication method;

• your consent to marketing communications;

• your unsubscribe or objection request;

• information regarding previous travel services that may help us communicate relevant offers to existing customers where permitted by law.

3.7 Information Received from Third Parties

We may receive personal data about you when you book our services through:

• online travel agencies;

• traditional travel agencies;

• tour operators;

• destination management companies;

• concierge services;

• hotels;

• corporate travel organisers;

• resellers;

• affiliates;

• event organisers;

• other commercial partners.

When you make a booking through a third-party provider, that provider may process your information independently under its own privacy policy.

We only use information received from such partners as necessary to manage and provide the booked service, communicate with you, comply with legal obligations, and protect our legitimate business interests.

4. Why We Use Your Personal Data

We may process your personal data for the following purposes.

4.1 Managing Enquiries and Quotations

We use your information to:

• answer your questions;

• prepare personalised quotations;

• recommend appropriate tours or services;

• confirm availability;

• communicate before a booking is completed.

Legal basis: taking steps at your request before entering into a contract and, where appropriate, our legitimate interest in responding to customer enquiries.

4.2 Processing and Managing Bookings

We use your information to:

• create and confirm reservations;

• arrange tours, transfers, activities, accommodation, attractions, restaurants, tastings, guides, drivers, or other services;

• communicate meeting points and pick-up times;

• manage booking changes;

• manage cancellations and refunds;

• provide customer support before, during, and after your trip.

Legal basis: performance of a contract or taking steps before entering into a contract.

4.3 Sharing Information With Travel Service Providers

To provide your booking, we may need to transmit limited information to third-party suppliers such as:

• hotels;

• transport companies;

• guides and drivers;

• museums and attractions;

• wineries and Champagne houses;

• restaurants;

• activity providers;

• ticketing providers;

• local partners;

• other tourism suppliers.

Only the information reasonably necessary to deliver the requested service will be shared.

Legal basis: performance of our contract with you.

4.4 Payments, Accounting and Financial Administration

We process information to:

• collect and verify payments;

• issue invoices;

• process refunds;

• manage accounting;

• prevent payment fraud;

• comply with tax and financial regulations.

Legal basis: performance of a contract and compliance with legal obligations.

4.5 Customer Service and Quality Management

We may use communications, reviews, complaints, and booking history to:

• answer customer requests;

• investigate complaints;

• resolve disputes;

• improve our tours and services;

• train our team;

• maintain service quality.

Legal basis: performance of a contract and our legitimate interests in managing and improving our business.

4.6 Security and Fraud Prevention

Information may be processed to:

• protect our Website;

• detect suspicious bookings or payments;

• prevent fraud and abuse;

• maintain IT security;

• investigate security incidents;

• protect BackTrip, our customers, employees, suppliers, and partners.

Legal basis: our legitimate interests and, where applicable, legal obligations.

4.7 Marketing and Promotional Communications

Subject to applicable law, we may use your contact details to send information about:

• BackTrip tours;

• new destinations;

• seasonal experiences;

• special offers;

• private tours;

• travel inspiration;

• promotions;

• company news.

Where your consent is required, we will send marketing communications only after receiving valid consent.

Existing customers may, where permitted by law, receive information concerning similar BackTrip services without separate consent, provided that they were informed of this possibility and have an easy way to object.

You may unsubscribe from marketing communications at any time.

Withdrawing consent will not affect the legality of processing carried out before your withdrawal.

4.8 Compliance With Legal Obligations

We may process or disclose personal data where necessary to:

• comply with tax or accounting requirements;

• respond to lawful requests from authorities;

• comply with court orders;

• comply with consumer protection requirements;

• establish, exercise, or defend legal claims;

• meet regulatory obligations.

Legal basis: compliance with a legal obligation and, where applicable, our legitimate interests.

5. Legal Bases for Processing

Under the GDPR, we process personal data only where we have a valid legal basis.

Depending on the circumstances, this may include:

Performance of a contract: when processing is necessary to provide the tour, transfer, booking, or other service you requested.

Pre-contractual steps: when you request information or a quotation before making a booking.

Legal obligation: where French or European law requires us to retain or process information.

Legitimate interests: where processing is reasonably necessary to operate and protect our business, improve our services, manage customer relationships, prevent fraud, or defend legal claims, provided that your fundamental rights do not override those interests.

Consent: for certain marketing activities, non-essential cookies and trackers, sensitive personal information, or other situations where applicable legislation requires consent.

You may withdraw your consent at any time where processing is based on consent.

6. Sharing Your Personal Information

We do not sell or rent your personal data.

We may share personal information with carefully selected recipients where necessary.

These may include:

Travel and Tourism Suppliers

Including hotels, transportation providers, drivers, guides, restaurants, wineries, Champagne houses, museums, attractions, activity providers, ticket suppliers, and local partners.

Payment Providers

Payment processors and financial institutions involved in processing bookings, payments, refunds, or fraud-prevention checks.

Website and Technology Providers

Providers that help us operate our Website, booking systems, communications, cloud storage, IT infrastructure, email services, customer management systems, analytics, cybersecurity, and related technologies.

Our Website may use services supplied by Wix and its affiliated service providers for hosting, Website functionality, forms, cookies, analytics, or related technologies.

Professional Advisers

Including:

• accountants;

• auditors;

• lawyers;

• insurers;

• financial advisers;

• IT and cybersecurity specialists.

Authorities

We may disclose personal information to courts, law enforcement bodies, tax authorities, consumer protection authorities, supervisory authorities, or other public bodies where legally required.

Business Transactions

If BackTrip undergoes a merger, acquisition, restructuring, sale of assets, financing transaction, or similar corporate event, personal information may be disclosed to relevant advisers and potential transaction parties subject to appropriate confidentiality and data protection safeguards.

7. International Transfers of Personal Data

BackTrip is established in France and primarily processes personal data within the European Economic Area (“EEA”).

However, some service providers, technology platforms, travel suppliers, or partners may be located outside the EEA.

For example, an international travel arrangement or a technology provider may require personal information to be transferred to another country.

Where personal data is transferred outside the EEA, we take appropriate measures required by applicable data protection law.

Depending on the circumstances, these measures may include:

• transferring data to a country recognised by the European Commission as providing an adequate level of protection;

• using European Commission-approved Standard Contractual Clauses;

• relying on another legally recognised transfer mechanism; or

• obtaining your consent where appropriate and legally permitted.

8. Data Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to comply with legal, accounting, tax, contractual, and dispute-resolution requirements.

As a general guideline:

Enquiries and Prospective Customers

Information relating to enquiries that do not result in a booking may generally be retained for up to three years from your last meaningful contact with us, unless a shorter period is appropriate or a longer period is necessary for legal purposes.

Customer and Booking Information

Booking information is retained for the duration necessary to provide the service and manage our relationship with you.

Certain information may subsequently be archived for the period required to establish, exercise, or defend legal claims or to comply with statutory requirements.

Accounting and Invoicing

Invoices, accounting documents, and related information may generally be retained for ten years where required by French accounting law.

Marketing Information

Information used for marketing purposes may generally be retained:

• during the customer relationship and for up to three years after the end of that relationship, where permitted; or

• for prospects, for up to three years from collection or the last meaningful contact from the prospect.

You may opt out of marketing at any time.

Objection and Unsubscribe Information

We may retain limited information necessary to record that you have opted out or objected to marketing so that we can respect your preference in the future.

At the end of an applicable retention period, personal data will be securely deleted, anonymised, or placed into restricted archival storage where continued retention is legally required.

9. Your Data Protection Rights

Subject to the conditions and limitations established by applicable law, you have the following rights.

Right of Access

You may request confirmation that we process your personal data and obtain a copy of the information we hold about you.

Right to Rectification

You may ask us to correct information that is inaccurate or incomplete.

Right to Erasure

You may request deletion of your personal information in circumstances provided by law.

The right to deletion is not absolute. We may need to retain certain information to comply with legal obligations or establish, exercise, or defend legal claims.

Right to Restriction of Processing

You may request that we temporarily or permanently restrict certain processing activities where the conditions established by the GDPR are satisfied.

Right to Data Portability

Where processing is based on consent or a contract and carried out by automated means, you may have the right to receive personal information you provided to us in a structured, commonly used, machine-readable format and, where technically feasible, transmit it to another controller.

Right to Object

You may object to processing based on our legitimate interests on grounds relating to your particular situation.

You have an absolute right to object to processing of your personal information for direct marketing purposes.

Right to Withdraw Consent

Where we rely on your consent, you may withdraw it at any time.

Withdrawal does not affect processing lawfully carried out before consent was withdrawn.

Rights Concerning Automated Decisions

Unless specifically explained to you at the relevant time, BackTrip does not make decisions that produce legal or similarly significant effects on you based solely on automated processing.

10. Exercising Your Rights

To exercise your privacy rights, please contact:

BackTrip & Travel SARL

Email: contact@backtrip.travel

You may also contact our Customer Support team at:

reservation@backtrip.eu

+33 6 66 22 87 47

Please clearly describe your request and the right you wish to exercise.

We may request reasonable additional information to verify your identity before processing the request. This is designed to prevent unauthorised disclosure or deletion of personal information.

We will normally respond without undue delay and within one month, as required by the GDPR. This period may be extended where permitted by law for particularly complex or numerous requests.

11. Right to Lodge a Complaint

If you believe that your personal information has been processed unlawfully or that your data protection rights have not been respected, you have the right to lodge a complaint with a competent supervisory authority.

As BackTrip is established in France, you may contact the:

Commission Nationale de l'Informatique et des Libertés (CNIL)

You may also have the right to contact the data protection authority in the EU or EEA country where you live, work, or where you believe an infringement has occurred.

We encourage you to contact us first so that we have an opportunity to investigate and resolve your concern.

12. Cookies and Tracking Technologies

Our Website may use cookies and similar technologies to operate correctly, remember preferences, analyse Website usage, improve functionality, maintain security, and, with your permission where required, support marketing and advertising activities.

Cookies may include:

Strictly Necessary Cookies

These cookies are necessary for the Website to operate and may include functions relating to:

• Website security;

• session management;

• shopping or booking functionality;

• cookie preferences;

• load balancing;

• essential Website functionality.

These cookies generally do not require consent where they are strictly necessary to provide a service requested by you.

Analytics Cookies

Analytics technologies help us understand how visitors interact with our Website and allow us to improve navigation, performance, and content.

Where these cookies do not qualify for an applicable consent exemption, they will only be activated after you provide consent.

Functional Cookies

These may remember preferences such as language, location, or Website settings.

Advertising and Marketing Cookies

Where used, these technologies may help measure advertising performance or personalise marketing.

Cookies and trackers requiring consent will not be activated before you have made your choice through our cookie management system.

You can accept, refuse, or modify your preferences through the Website's cookie banner or cookie settings.

Refusing optional cookies should not prevent access to the basic functionality of the Website, although certain optional features may operate differently.

13. Email, SMS, WhatsApp and Telephone Communications

We may use email, telephone, SMS, or WhatsApp to communicate with you where necessary to:

• manage your booking;

• confirm reservations;

• communicate pick-up details;

• send operational information;

• notify you about changes;

• provide customer support;

• respond to enquiries.

These are service-related or transactional communications and are separate from promotional marketing.

Marketing messages will be sent only in accordance with applicable law.

You can unsubscribe from promotional electronic communications using the unsubscribe method provided in the relevant message or by contacting us directly.

Where prior consent is legally required for promotional telephone calls, we will seek that consent before using your telephone number for such purposes.

14. Photographs, Videos and Testimonials

During certain tours or activities, photographs or videos may occasionally be taken.

Where an individual is identifiable and the content is intended for promotional, advertising, social media, or Website purposes, we will respect applicable privacy and image-right requirements.

Where consent is required, we will seek appropriate permission before publishing identifiable promotional material.

You may inform your guide or contact BackTrip if you do not wish to appear in promotional photographs or videos.

Consent for promotional use may be withdrawn subject to applicable legal limitations and the practical possibility of removing content already distributed.

15. Personal Data Concerning Children

Our travel services may be used by families and children; however, bookings must generally be made by an adult who has legal capacity to enter into the booking agreement.

Where an adult provides personal information relating to a child or another traveller, the person making the booking confirms that they are authorised to provide that information and, where required, to act on that traveller's behalf.

We ask customers not to provide more information about children than is reasonably necessary for the booked service.

16. Information About Other Travellers

If you make a booking on behalf of another person, you may provide us with information about that traveller.

By doing so, you confirm that:

• you are authorised to provide their personal information to us;

• the information is accurate;

• you have informed them that their information may be processed by BackTrip to provide the booked services; and

• where required, you have obtained any necessary permission.

Please share this Privacy Policy with other travellers included in your booking.

17. Data Security

We implement appropriate technical and organisational measures designed to protect personal information against:

• accidental loss;

• unauthorised access;

• misuse;

• alteration;

• unauthorised disclosure;

• destruction.

Access to personal information is limited to employees, representatives, contractors, and service providers who reasonably need it to perform their duties.

Where appropriate, we also use contractual, organisational, authentication, access-control, encryption, backup, and security-monitoring measures.

However, no method of transmitting or storing information over the Internet can provide absolute security. Although we take reasonable precautions, we cannot guarantee that security incidents will never occur.

18. Third-Party Websites and Services

Our Website may contain links to websites or services operated by third parties, including tourism attractions, social media platforms, payment providers, travel partners, or other businesses.

Clicking a third-party link may allow that organisation to collect or process information about you.

BackTrip does not control the privacy practices of independent third parties and is not responsible for their privacy policies.

We recommend reviewing the privacy policy of any external service you use.

19. Social Media

BackTrip may maintain profiles on social networks and social media platforms.

If you communicate with us, follow us, comment, send a message, or otherwise interact with BackTrip through these services, both BackTrip and the relevant social media platform may process information about your interaction.

The platform's own privacy policy applies independently to its processing of your personal information.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes to our services;

• new technologies;

• changes to suppliers or Website functionality;

• changes in applicable law;

• recommendations from regulatory authorities;

• improvements to our privacy practices.

When material changes are made, we will update the “Last updated” date displayed at the top of this Policy and may provide additional notice where appropriate.

We encourage you to review this page periodically.

21. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the way BackTrip processes your personal data, please contact us:

BackTrip & Travel SARL

BackTrip Team

Registered office: [INSERT REGISTERED OFFICE ADDRESS]

France

Customer Support & Reservations

Phone & WhatsApp: +33 6 66 22 87 47

Email: reservation@backtrip.eu

General Contact

Email: contact@backtrip.travel

Website: www.backtrip.eu

© 2026 BackTrip & Travel SARL. All rights reserved.