Privacy Policy

Effective Date: 1 January 2026

At Vagabond, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website vagabond.com or book our travel services. It applies to all visitors, users, and others who access our services.

We respect your privacy and are committed to protecting it through our compliance with this policy and the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller

The data controller responsible for your personal data is:

Vagabond
7 South Mall
Cork, T12 K8D9
Ireland

Email: [email protected]
Telephone: +353 51 450 6491

2. Information We Collect

We collect several types of information for various purposes to provide and improve our service to you.

• Personal Data: While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personal data may include, but is not limited to: first and last name, email address, phone number, home address, passport details, dietary requirements, and payment information.
• Usage Data: We automatically collect technical data when you visit our website. This data may include your IP address, browser type, operating system, referring website, pages viewed, and the time spent on those pages.
• Cookies and Tracking Technologies: We use cookies and similar tracking technologies to track the activity on our Service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

3. How We Use Your Information

We use the information we collect in various ways, including to:

• Provide, maintain, and improve our services, including tour bookings and customer support.
• Process transactions and send you related information, including confirmations and invoices.
• Send you technical notices, updates, security alerts, and support and administrative messages.
• Respond to your comments, questions, and customer service requests.
• Personalize your experience and deliver content and product offerings relevant to your interests.
• Monitor and analyze trends, usage, and activities in connection with our Service.
• Detect, prevent, and address technical issues and fraudulent activity.

4. Legal Bases for Processing

We process your personal data lawfully under the GDPR on the following grounds:

• Contract: To perform our obligations under any contract we have with you, such as booking a tour.
• Legitimate Interests: For the purposes of direct marketing (where you have not opted out) and fraud prevention.
• Legal Obligation: To comply with our legal obligations, such as keeping financial records for tax purposes.
• Consent: When you have given us clear consent to process your personal data for a specific purpose, such as sending our newsletter.

5. Disclosure of Your Information

We may share your personal information in the following situations:

• With Service Providers: We may share your information with trusted third-party service providers who perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, and customer support.
• With Travel Partners: We may share your booking details with accommodations, transport providers, and activity partners necessary to fulfill your travel itinerary.
• For Legal Reasons: We may disclose information where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, potential threats to the physical safety of any person, or violations of our Terms and Conditions.
• Business Transfers: In the event of a merger, sale, or transfer of assets, your data may be transferred to the new owner.

6. Data Security

We implement a variety of security measures to maintain the safety of your personal information. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

7. Data Retention

We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable tax laws), resolve disputes, and enforce our legal agreements and policies.

8. Your Privacy Rights under GDPR

If you are located in the EEA, you have specific data protection rights. Vagabond aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your personal data. In particular, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request that we correct inaccurate or incomplete data.
• Erasure: Request that we erase your personal data (the "right to be forgotten").
• Restriction: Request that we restrict the processing of your personal data.
• Object to Processing: Object to our processing of your personal data.
• Data Portability: Request that we transfer your data to another organization, or directly to you, under certain conditions.
• Withdraw Consent: Withdraw consent at any time where we are relying on consent to process your personal data.

Please note that we may ask you to verify your identity before responding to such requests.

9. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. If you are located outside Ireland and choose to provide information to us, please note that we transfer the data, including Personal Data, to Ireland and process it there.

10. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personally identifiable information from children under 18. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us.