Privacy Policy

Tourism Authority ("we," "our," or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website tourismauthority.com, use our services, or interact with us in any way.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our site. By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

Tourism Authority is a full-service strategic and creative partner to tourism boards, regional governments, and destination marketing organizations (DMOs). We are the data controller responsible for your personal information collected through this website and our services.

Our primary point of contact for all privacy-related matters is listed in Section 14 of this policy.

We collect information you provide directly to us, information collected automatically when you use our services, and information from third-party sources.

Information You Provide to Us

• Contact information — name, email address, phone number, and organization when you fill in our contact, inquiry, or consultation forms.
• Newsletter subscriptions — name and email address when you sign up to receive our insights and communications.
• Account information — if you create an account on our platform, we collect login credentials and profile details.
• Communication records — any messages, feedback, or correspondence you send us directly.
• Business information — organizational name, role, and destination details provided in the context of a business or partnership inquiry.

Information Collected Automatically

• Usage data — pages visited, time spent, links clicked, and navigation paths across our website.
• Device & browser data — IP address, browser type and version, operating system, and device identifiers.
• Cookies and tracking technologies — see Section 7 for full details on our cookie practices.
• Referral source — the website or search query that referred you to us.

Information from Third Parties

• Analytics providers — aggregated data from services such as Google Analytics to help us understand how visitors use our site.
• Social media platforms — if you interact with us via social media, we may receive information consistent with your settings on those platforms.
• Business partners — information shared in the context of joint projects or referrals, subject to the third party's own privacy obligations.

We use the information we collect for the following purposes:

We will never use your information for purposes incompatible with those stated here without first obtaining your consent.

Where applicable under the General Data Protection Regulation (GDPR) or similar privacy frameworks, we rely on the following legal bases to process your personal data:

• Contractual necessity — processing required to deliver services you've requested or to manage our business relationship with you.
• Legitimate interests — processing necessary for our legitimate business interests, where these interests are not overridden by your rights.
• Consent — processing based on your explicit opt-in, such as newsletter subscriptions or marketing communications. You may withdraw consent at any time.
• Legal obligation — processing required to comply with applicable laws and regulations.

Tourism Authority does not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:

• Service providers — trusted third-party vendors who assist us in operating our website and delivering services, bound by contractual data processing agreements.
• Professional advisors — lawyers, accountants, and auditors where necessary for compliance or legal proceedings.
• Legal requirements — when required by law, court order, or governmental authority.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred subject to equivalent privacy protections.
• With your consent — in any other circumstances where you have explicitly authorized the disclosure.

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies are small files stored on your device that help us recognize you and remember your preferences.

You can control or delete cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of our website.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, or as required by applicable law:

• Contact and inquiry data — retained for up to 3 years from last interaction, or for the duration of any active business relationship.
• Newsletter subscriber data — retained until you unsubscribe or request deletion.
• Analytics data — aggregated and anonymized data retained for up to 26 months.
• Legal and financial records — retained for the period required under applicable regulations (typically 7 years).

When personal data is no longer required, we securely delete or anonymize it in accordance with our internal data disposal procedures.

Depending on your location, you may have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data, subject to certain legal exceptions.
• Right to restriction — request that we limit how we process your data in certain circumstances.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent — withdraw any previously given consent at any time without affecting prior processing.
• Right to lodge a complaint — file a complaint with your local supervisory authority if you believe we are not handling your data lawfully.

To exercise any of these rights, please contact us at tag@tourismauthority.com. We will respond within 30 days of receiving your request.

Tourism Authority operates internationally, and your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws than those in your jurisdiction.

When we transfer personal data internationally, we take appropriate safeguards including Standard Contractual Clauses (SCCs), adequacy decisions, and binding corporate rules where applicable, to ensure your data remains protected in accordance with this policy.

Our website may contain links to third-party websites, plugins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices.

We encourage you to read the privacy policy of every website you visit when leaving ours.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include:

• HTTPS encryption across all website pages and data transmissions.
• Access controls limiting data access to authorized personnel only.
• Regular security assessments and vulnerability reviews.
• Data processor agreements with all third-party service providers.

No method of transmission over the internet is 100% secure. In the event of a data breach that may affect your rights, we will notify you as required by applicable law.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page, post a notice on our website, and where required notify you directly via email.

We encourage you to review this policy periodically to stay informed about how we are protecting your information.

If you have questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please reach out:

• Email: tag@tourismauthority.com
• Website: tourismauthority.com/contact-us/
• Subject line: "Privacy Request – [Your Name]" to ensure prompt handling.

We are committed to addressing all privacy-related inquiries within 30 days of receipt.