Privacy Policy
Effective
Who We Are
PRM Global Ltd (“PRM Tourism”, “we”, “us”, “our”) is registered in England and Wales under company number 08213137. Our registered office is at 1 Kings Avenue, Winchmore Hill, London, N21 3NA.
For all data-protection queries, contact us at hello@prmtourism.com.
We are the data controller for personal data collected through this website.
What Personal Data We Collect
When you submit our contact form, we collect the following information you provide voluntarily:
- Name — to address you correctly
- Email address — to respond to your enquiry
- Organisation — to understand who you represent
- Role / job title — to contextualise your enquiry
- Country — to understand the geographic scope of your interest
- Enquiry type — to route your message appropriately
- Message — the substance of your enquiry
We do not collect payment data, government-issued identifiers, or special-category personal data through this website.
Server and security logs: Our hosting provider, Vercel, automatically records technical log data including IP addresses, browser type, referring URLs, and timestamps as part of normal web-server operation. This data is used to maintain security, diagnose faults, and ensure the reliable delivery of our website.
Why We Collect It and Our Lawful Basis
| Purpose | Lawful basis under UK GDPR |
|---|---|
| Responding to your contact form enquiry | Legitimate interests (Article 6(1)(f)) — it is in our mutual interest to communicate with people who proactively contact us |
| Progressing a potential business engagement or ongoing client relationship | Pre-contractual or contractual necessity (Article 6(1)(b)) — processing is necessary to take steps at your request prior to entering a contract, or to perform a contract to which you are a party |
| Maintaining website security and availability | Legitimate interests (Article 6(1)(f)) — we have a legitimate interest in keeping our website secure and operational |
We have assessed that our use of legitimate interests does not override your privacy rights, given the limited and expected nature of the data processing involved in responding to an unsolicited business enquiry.
Who We Share Your Data With
We do not sell or rent your personal data. We share it only with the following data processors — organisations we have engaged to perform specific technical functions on our behalf, under contractual obligations to process your data only as we instruct:
- Formspree (Webholistic LLC) — our contact-form processing service. When you submit the contact form, your data is transmitted to Formspree, which forwards it to our email inbox. Formspree’s privacy policy is available at https://formspree.io/legal/privacy-policy/.
- Vercel Inc. — our website hosting provider. Vercel processes server-log data including IP addresses as part of delivering and securing our website. Vercel’s privacy policy is available at https://vercel.com/legal/privacy-policy.
- Google LLC — provider of Google Analytics 4 (GA4). When you accept analytics cookies via the consent banner, GA4 collects information about your interactions with the Site (pages viewed, referrer, approximate location, device type) and assigns a pseudonymous identifier to distinguish your sessions. If you reject the banner, GA4 runs in cookieless mode under Google’s Consent Mode v2: aggregated, modelled signals may still be transmitted, but no cookies or persistent identifiers are placed on your device. Google’s privacy policy is available at https://policies.google.com/privacy. For the specific cookies involved, see our Cookie Policy.
We use Vercel Analytics and Speed Insights to monitor website performance. These tools operate without cookies and without storing persistent identifiers — visitor signals are hashed daily and are not individually identifiable, so no consent is required for them under PECR. We additionally use Google Analytics 4, which does set cookies when permitted and is therefore consent-gated through the cookie banner shown on your first visit.
International Transfers
Formspree, Vercel, and Google are all US-based companies, which means your personal data may be transferred to and processed in the United States of America.
We rely on the UK–US Data Bridge (a UK adequacy decision in force from 17 October 2023) where applicable, and on the use of International Data Transfer Agreements (IDTAs) — the UK equivalent of EU standard contractual clauses — to ensure that any such transfers are subject to appropriate safeguards. Please refer to each processor’s privacy policy for the specific mechanisms they rely upon.
How Long We Keep Your Data
Contact form submissions and related correspondence are retained for 24 months from the date of receipt, unless the enquiry develops into a business engagement. Where a client relationship results, we retain relevant data in accordance with the terms of that engagement and applicable legal obligations (including our statutory accounting and tax record-keeping duties, typically six years from the end of the relevant financial year).
After the applicable retention period, personal data is securely deleted or anonymised.
Your Rights Under UK GDPR
As a UK data subject, you have the following rights:
- Right of access — to request a copy of the personal data we hold about you.
- Right to rectification — to have inaccurate or incomplete data corrected.
- Right to erasure (“right to be forgotten”) — to request deletion of your data where there is no compelling reason for us to continue processing it.
- Right to restriction of processing — to request that we limit how we use your data in certain circumstances.
- Right to data portability — to receive your data in a structured, commonly used, machine-readable format and transmit it to another controller, where processing is based on consent or contract and carried out by automated means.
- Right to object — to object to processing based on legitimate interests or for direct marketing purposes.
- Rights related to automated decision-making and profiling — we do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
- Right to withdraw consent — where we rely on consent as a lawful basis, you may withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.
How to Exercise Your Rights
To exercise any of the above rights, contact us at hello@prmtourism.com. We will respond within one calendar month. We may need to verify your identity before processing your request.
There is no charge for making a request, unless it is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to act.
Complaints
If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
- Website: https://ico.org.uk/make-a-complaint/
- Telephone: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We would, however, welcome the opportunity to address your concerns directly before you approach the ICO. Please contact us at hello@prmtourism.com in the first instance.
Children
This website is not directed at children under the age of 18, and we do not knowingly collect personal data from children. If you believe we have inadvertently received data from a child, please contact us immediately at hello@prmtourism.com so we can delete it.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the effective date below. We encourage you to review this page periodically.
Effective date: 25 May 2026