Privacy Policy

1. Who is identified on this website

The company details supplied for this website identify European Tour Operators, 149 Tottenham Court Road, London. The supplied VAT ID is GB 562157936, the registration date is 2017-09-21, the director is Mathis White, the supplied telephone number is +16137014271, and the supplied email address is [email protected].

Caelvora is the customer-facing brand used by this website. References to the website, the brand or the service pages are intended to describe the online presentation and inquiry process and do not add a separate legal entity or replace the supplied company particulars.

This policy is limited to the information practices that can reasonably be described from the supplied website package. If the live operator later introduces additional systems, providers, marketing tools, payment functionality or booking technology, the policy should be reviewed so that it accurately reflects those practices.

2. Information you choose to provide

The inquiry forms ask for a name, email address, telephone number, preferred voyage, preferred contact time and an optional message. A visitor may use the message field to provide group size, preferred date range, dining notes, transfer notes or other details relevant to the requested service. Visitors should avoid including information that is not necessary for the inquiry.

The standard website form does not request payment card information, passport details, government identification numbers or other sensitive identity information. It is intended to collect only the details needed to understand and respond to a travel-service inquiry.

If a visitor voluntarily includes information about another person, the visitor should ensure that the information is relevant to the inquiry and that they are authorized to provide it. The message field should not be used to transmit confidential documentation or unrelated personal records.

3. How information reaches the confirmation page

The website inquiry form uses a standard GET submission to open the confirmation page. This means the values submitted through the form can appear as URL parameters in the browser address bar. The confirmation page uses the name and email parameters to personalize the acknowledgement shown to the visitor.

Because URL parameters can be visible in browser history, visitors should not place sensitive information in form fields or the optional message field. The live operator should review the chosen form-handling method before deployment if a different level of confidentiality is required for the production service.

4. Purposes for collection

Information submitted through the form is collected for the purpose stated at the point of collection: receiving the inquiry, understanding the requested voyage or service, contacting the person about that request, preparing relevant service information and maintaining a record of the communication where reasonably necessary.

The information may also be used to clarify dates, guest numbers, route preferences, dining requests, transfer needs or other planning details that the visitor has chosen to raise. The inquiry information should not be used for an unrelated purpose without an appropriate legal basis or additional notice where required.

Canadian private-sector privacy principles emphasize identifying purposes and limiting collection to information that is reasonably needed for those purposes. The website form is therefore intentionally focused on contact and trip-planning information instead of broader profile data.

5. Consent and visitor choices

The form includes a required consent statement explaining that submitted information may be used to respond to the inquiry as described in this policy. By completing and submitting the form, the visitor actively provides the information for that purpose.

Consent should remain meaningful and connected to the purposes a visitor would reasonably expect from an inquiry. This website does not use a pre-selected marketing consent and does not present submission of the inquiry as agreement to receive unrelated promotional communications.

Where applicable, consent can be withdrawn for future uses, subject to information that may need to be retained for legitimate operational, contractual or legal reasons. A withdrawal request does not necessarily require deletion of information that must lawfully be kept.

6. Data minimization and accuracy

Visitors are encouraged to provide information that is accurate enough to allow a meaningful response. If a contact detail is incorrect, the inquiry may not be capable of being answered. Information should be limited to what is relevant to the requested journey or service.

The organization operating the live site should avoid collecting additional personal information merely because it might be useful later. If new form fields are introduced, their purpose should be considered before they are added and the privacy notice should be updated when the new information materially changes the handling described here.

7. Use and disclosure

Personal information should be used for the purpose for which it was collected, or for another purpose permitted by applicable law. Inquiry information may be handled by people or service providers who need access in order to respond to the request or support the website and communications process.

The specific operational providers are not listed because none were supplied as part of the website brief. This policy therefore does not identify a hosting provider, customer relationship platform, email provider, analytics provider or other processor that has not been confirmed.

Personal information is not presented on this website as being sold to third parties. If the operational model changes to include new uses or providers that materially affect personal information, the privacy information should be updated before or when those practices are introduced.

8. Service providers and access on a need-to-know basis

A live website commonly depends on technical or administrative service providers. Where providers process personal information on behalf of the operator, access should be limited to what is reasonably required for the assigned function and governed by appropriate contractual or organizational safeguards.

This page does not claim that a particular provider is used. It states the principle that any provider introduced by the live operator should be assessed for the information it receives, the purpose of the access, the location of processing and the safeguards that apply.

9. Retention

Personal information should be retained only for as long as reasonably necessary for the purposes identified at collection, for legitimate record-keeping, or as required by applicable law. The appropriate period can depend on whether an inquiry proceeds, whether a service relationship is formed, and whether records must be maintained for operational or legal reasons.

This static website package does not implement a database or set a numerical retention period. The organization operating the live site should adopt a retention schedule appropriate to its actual systems and delete or anonymize information when it is no longer required.

Where an inquiry does not proceed, the operator should still consider whether continued retention is necessary. A practical retention process should distinguish active service records from older inquiry data and should avoid keeping personal information indefinitely without a defined reason.

10. Security safeguards

Reasonable administrative, technical and physical safeguards should be used in a manner appropriate to the sensitivity of the information. Relevant safeguards can include access controls, secure hosting, software updates, secure transmission, staff access limitations, backup practices and incident-response procedures.

No internet transmission or storage system can be described as risk-free. Visitors should therefore submit only the information needed to evaluate and respond to the voyage inquiry and should not place payment credentials or identity documents in the general message field.

The live operator should periodically review the safeguards applied to the actual hosting environment, form processing and communications systems because those systems are outside the static HTML package delivered with this website.

11. Security incidents and breach handling

Canadian federal privacy rules include requirements relating to certain breaches of security safeguards involving personal information. The duties that apply depend on the circumstances, including the nature of the information and the risk created by the incident.

If the live operator becomes aware of unauthorized access, loss or disclosure affecting inquiry information, the incident should be assessed promptly, documented as required and handled in accordance with the legal obligations that apply to the organization and the affected information.

12. Access, correction and privacy questions

Canadian privacy principles provide individuals with rights to request access to personal information held about them and to challenge its accuracy, subject to applicable exceptions. A person may also raise questions about how information is handled and request corrections where appropriate.

Privacy questions may be sent to [email protected] or raised using telephone +16137014271. The company address supplied for this website is 149 Tottenham Court Road, London.

A request should contain enough information to allow the relevant records to be identified without requiring the person to disclose unnecessary additional data. Identity verification may be appropriate before access or correction is provided, depending on the nature of the request and the records involved.

13. Cross-border handling

The company address supplied for this website is in London while the service content is directed to Canada. Personal information may therefore be subject to legal requirements in more than one jurisdiction depending on where it is processed, stored or accessed.

Canadian federal privacy law can apply to personal information crossing provincial or national borders in the course of commercial activities. The live operator should assess cross-border service-provider arrangements and provide appropriate transparency when information is processed outside the visitor's province or country.

This policy does not state that information is stored in a particular country because no hosting or storage location was supplied. Any production deployment should be checked so the published policy reflects the actual technical arrangement.

14. Provincial privacy laws

Canada has federal privacy requirements as well as private-sector privacy laws in certain provinces. Which law applies can depend on the organization, the location of the activity, the nature of the information and whether information crosses provincial or national borders.

This policy is intended to provide a clear baseline description of the website inquiry process rather than to replace a legal assessment of a particular transaction or operational setup. The live operator should review the rules that apply to its actual commercial activity.

15. Cookies and technical data

The current website script is designed for navigation, gallery behaviour, form assistance and visual effects. It does not intentionally create advertising or analytics cookies. More detail is provided in the Cookie Policy.

A live hosting environment can create standard technical records such as request logs depending on its configuration. Those server practices are not defined by this static website package and should be reflected in this policy if they are retained or used in a way that involves personal information.

16. Automated decisions and profiling

The supplied website code does not include an automated decision system that accepts or rejects an inquiry, determines eligibility, calculates an individualized price or profiles visitors for behavioural advertising. The inquiry form simply collects the information entered by the visitor and proceeds to a confirmation page.

If automated scoring, personalization or profiling is added in the future, the privacy documentation should be updated to explain the role of that technology and any choices or rights that apply.

17. Commercial electronic messages

An inquiry response is connected to the request made by the visitor. If separate promotional emails or text messages are introduced, the live operator should assess the consent, identification and unsubscribe requirements that apply under Canada's Anti-Spam Legislation and any other applicable rules before sending them.

This website form does not contain a pre-selected consent for ongoing promotional messages. A separate and appropriately documented consent mechanism should be used if such communications are added later.

18. Links and external services

The legal pages and navigation in this project use relative links within the site. If external services, embedded maps, social-media tools or third-party booking systems are introduced later, those services can have their own information-handling practices.

The operator should review those integrations before publication and update this policy where the external service receives personal information or materially changes the visitor's privacy experience.

19. Changes to this policy

This policy may be updated when the website, forms, service providers or legal requirements change. The date at the top of the page should be updated when material changes are made.

Visitors should review the current version when submitting a new inquiry. Changes to this general website policy do not by themselves alter any separate privacy commitments that may form part of a confirmed service arrangement.