Privacy Policy
Effective date: 2025. Civic Median Commons (“Aurora Trails”, “we”, “us”).
1) Who we are
Civic Median Commons is a boutique travel company crafting trips worldwide.
- Legal name: Civic Median Commons
- Reg. No.: 63760980
- Address: 63 Teagan Flat North Yvonne, M50 3TU, UK
- Telephone: +44 6048 125834
- Email: [email protected]
For GDPR, we act as Data Controller for data described here.
2) Data we collect
- Inquiry and booking data: name, contact details, passenger information, preferences, dietary or accessibility notes you choose to provide.
- Communications: emails, messages and call notes to service your request.
- Technical data: IP address, device/browser, pages viewed, timestamps, referral sources.
- Cookies and similar technologies: see Cookies section below.
- Payment data: processed by our payment providers; we receive limited records (amount, status, last four digits) and do not store full card numbers.
3) Sources
- Directly from you via our forms, email, phone.
- Automatically via our website and analytics tools.
- From partners when needed to operate a booking (e.g., airlines or local suppliers), in compliance with law.
4) Children
We do not knowingly collect personal data from children under 16 without parental consent. If you believe a child provided data without consent, contact us and we will delete it.
5) Why we use your data and legal bases
- To respond to inquiries, design itineraries and manage bookings (contract necessity).
- To send service communications (contract necessity / legitimate interests).
- To run our website, prevent fraud, and keep services secure (legitimate interests).
- Analytics and performance measurement (consent where required).
- Marketing messages about our services (consent; you can opt out anytime).
- Legal compliance, disputes and enforcement (legal obligation / legitimate interests).
6) Sharing and international transfers
We share limited data with:
- Operational partners (hotels, guides, transport, activity providers) to fulfill your trip.
- Technology providers (hosting, email, analytics, payment processors) under data protection agreements.
- Authorities where required by law.
Some recipients may be outside the UK/EEA. When we transfer personal data internationally, we use lawful transfer mechanisms such as adequacy decisions or Standard Contractual Clauses and apply additional safeguards where appropriate.
7) Retention
We keep personal data only as long as needed:
- Inquiry data: up to 24 months.
- Booking records: up to 7 years (tax/insurance obligations).
- Marketing data: until you unsubscribe or withdraw consent.
- Cookies: see durations below.
8) Security
We implement administrative, technical and physical safeguards (access controls, encryption in transit, staff training). No method is 100% secure; we continually improve our controls.
9) Cookies and similar technologies
Our site uses cookies to operate, analyze and personalize your experience. You can make a choice using the cookie banner on this site.
Categories we use
- Essential: required for site functionality (e.g., remembering consent). These cannot be switched off.
- Analytics: Google Analytics (G-AAAAAAA) to understand usage and improve content.
- Marketing: Facebook Pixel (1234567890) to measure campaign performance.
You can withdraw or change consent at any time using the Manage cookies link below.
Browser controls: you can also block or delete cookies via your browser settings. Blocking some cookies may impact site functionality.
10) Your rights
Subject to applicable law (including GDPR/UK GDPR), you may have the right to:
- Access your personal data and obtain a copy.
- Rectify inaccurate or incomplete data.
- Erase data (“right to be forgotten”).
- Restrict or object to processing, including profiling based on legitimate interests or direct marketing.
- Data portability.
- Withdraw consent at any time (where processing is based on consent).
- Lodge a complaint with your local authority. In the UK: Information Commissioner’s Office (ico.org.uk).
To exercise rights, email [email protected]. We may verify your identity before responding.
11) Third‑party links
Our site may link to third‑party websites. Their privacy practices are governed by their own policies.
12) Changes
We may update this policy from time to time. The “Effective date” above reflects the latest version. Significant changes will be communicated on this page.
13) Contact
Data protection contact: [email protected]
Address: 63 Teagan Flat North Yvonne, M50 3TU, UK
Phone: +44 6048 125834