OBLU XPERIENCE Ailafushi - All Inclusive

Effective Date: 06/05/2026

Costara is a trading name of USAirtours Holidays (UK) Ltd.

This Privacy Policy explains how Costara, USAirtours Holidays (UK) Ltd, and associated trading companies collect, use, store, and protect your personal information when you use our services, website, or contact us.

Who We Are

Your personal information will be held by USAirtours Holidays (UK) Ltd and its trading brands, including:

• Costara
• TravelPlanners
• Tailor Made Cruise Holidays

Registered Office:

Saxon House

27 Duke Street

Chelmsford

Essex

CM1 1HT

Email: dp@costaratravel.com

Our Privacy Promise

We promise:

• To keep your personal information safe and secure
• Not to sell your personal information to third parties
• To be clear about how we use your information
• To give you control over your marketing preferences

How The Law Protects You

We process your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are allowed to use your personal information only where we have a lawful basis to do so, including:

• To fulfil a contract with you
• To comply with a legal obligation
• Where it is in our legitimate interests
• Where you have given consent

Legitimate interests include operating and improving our business, communicating with customers, fraud prevention, and providing relevant offers and services.

What Personal Information We Collect

We may collect and process the following categories of personal information:

Contact Information

• Name
• Address
• Email address
• Telephone number

Booking and Contract Information

• Travel booking details
• Passenger information
• Products and services purchased
• Preferences and special requests

Financial Information

• Payment information
• Billing details
• Bank details where required
• Transaction history

Identification Documents

• Passport details
• Driving licence details
• Utility bills where required for verification

Special Category Data

Where necessary for your travel arrangements, we may collect:

• Health or medical information
• Accessibility requirements
• Dietary requirements

Family and Relationship Information

• Information relating to travelling companions or family members included within bookings

Marketing Preferences

• Your communication and consent preferences

How We Collect Your Information

We may collect personal information when you:

• Make a booking or enquiry
• Contact us by phone, email, live chat, or social media
• Use our website
• Complete forms on our website
• Subscribe to newsletters or marketing communications
• Participate in surveys, competitions, or promotions
• Provide feedback or reviews

We may also receive information from trusted third-party suppliers and partners involved in providing your travel arrangements.

How We Use Your Information

We use your personal information to:

• Manage and fulfil your bookings
• Provide customer support
• Process payments
• Communicate important travel information
• Respond to enquiries and complaints
• Improve our products and services
• Prevent fraud and financial crime
• Meet legal and regulatory obligations
• Send marketing communications where permitted

Marketing Communications

We may contact you by email, phone, SMS, or post about products, services, promotions, and offers we believe may interest you.

We rely on either:

• Your consent, or
• Our legitimate interests as a travel company to market relevant travel services to existing customers

You can unsubscribe from marketing communications at any time by:

• Clicking the unsubscribe link in our emails
• Contacting us directly at dp@costaratravel.com

We will still contact you regarding active bookings or important service communications.

Who We Share Your Information With

We may share your information with:

• Airlines, hotels, cruise lines, transfer providers, and other travel suppliers necessary to fulfil your booking
• Payment processors and fraud prevention providers
• Technology and IT service providers
• Insurance companies where required
• Regulatory authorities, law enforcement, or government bodies where legally required
• Trusted review and customer feedback platforms

Some suppliers may be located outside the United Kingdom or European Economic Area. Where this occurs, we will ensure appropriate safeguards are in place to protect your information.

International Transfers

As part of arranging international travel, your personal information may be transferred outside the UK. This may include countries whose data protection laws differ from those in the UK.

Where we transfer data internationally, we take appropriate steps to ensure your information remains protected in line with UK data protection laws.

Cookies and Website Tracking

Our website may use cookies and similar technologies to:

• Improve website performance
• Analyse website usage
• Personalise content and advertisements
• Remember your preferences

You can manage your cookie preferences through your browser settings.

How Long We Keep Your Information

We generally retain personal information for up to six years after your last interaction with us.

Telephone recordings are typically retained for up to 12 months.

We may retain information for longer where necessary:

• To comply with legal or regulatory obligations
• To resolve disputes or complaints
• For fraud prevention purposes
• Where technical limitations prevent deletion

Your Rights

Under UK data protection law, you have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Restrict or object to processing
• Withdraw consent
• Request transfer of your data
• Lodge a complaint with the Information Commissioner’s Office (ICO)

Data Subject Access Requests

To request a copy of the personal information we hold about you, please contact:

Data Protection Officer

USAirtours Holidays (UK) Ltd

Saxon House

27 Duke Street

Chelmsford

Essex

CM1 1HT

Email: dp@costaratravel.com

We may ask for proof of identity before processing your request.

Withdrawing Consent

You may withdraw your consent at any time by contacting us at:

dp@costaratravel.com

Complaints

If you are unhappy with how we handle your personal information, you have the right to complain to the UK supervisory authority:

Information Commissioner’s Office

You can visit the ICO website for further information regarding your rights and how to make a complaint.

Changes To This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, technology, or our services. Any updates will be published on our website with a revised effective date.