Affiliate Privacy Notice

1. Who is the controller?

Gidran TIS Limited (“Gidran”, “we”, “us”) is the controller for personal information processed for the Gidran Affiliate Programme. Gidran TIS Limited is registered in England and Wales under company number 15228452. You can contact us at info@gidrantravelinstyle.com.

2. Law that applies

We process personal information in accordance with applicable UK data-protection law, including the UK GDPR and the Data Protection Act 2018, as amended from time to time.

3. Information we collect

Depending on your relationship with us, we may collect your name, business/brand name, email address, telephone number, country, website and social profiles, audience or business information, promotional channels, application answers, Affiliate ID/code, account/login information, communications, payment and accounting information, and records needed to administer your account.

4. Referral and performance information

We may record referral-link visits, Affiliate codes, timestamps, attribution information, booking references, journey dates/status, eligible booking values, commission calculations, payout status and fraud/security indicators. The Affiliate dashboard is designed not to disclose passenger names, passenger email addresses or passenger telephone numbers.

5. Purposes and lawful bases

We use Affiliate information to assess applications and enter/administer the Affiliate relationship (contract or steps before a contract); operate referral attribution, secure the Programme and prevent misuse (legitimate interests); calculate and pay commission (contract and legitimate interests); keep tax, accounting and legal records (legal obligation); and communicate necessary Programme information (contract or legitimate interests). Where we rely on legitimate interests, our interests include operating a secure and commercially sustainable referral programme, measuring performance and preventing fraud.

6. If you do not provide information

Some information is required to assess your application, create an Affiliate account, attribute commission or make payment. If you do not provide required information, we may be unable to accept or continue your participation.

7. Who we share information with

Where necessary, information may be shared with hosting and IT providers, communications providers, payment/accounting providers, professional advisers, fraud/security providers and public authorities where required by law. We require service providers handling personal information for us to use it only for authorised purposes and with appropriate safeguards.

8. International transfers

Some service providers may process information outside the UK. Where UK data-protection law requires safeguards for an international transfer, we use an applicable adequacy arrangement or appropriate contractual/other safeguards. You may contact us for further information about safeguards relevant to your data.

9. Retention

Unsuccessful application information is retained only for as long as reasonably needed for application administration, dispute prevention and re-application/fraud controls. Active Affiliate account and performance records are retained while the relationship continues. Financial, commission and transaction records may be retained for the period required by applicable tax, accounting and legal obligations. We may keep limited records longer where reasonably necessary to establish, exercise or defend legal claims.

10. Security

We use reasonable technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse or alteration. Access is limited according to operational need.

11. Your data-protection rights

Depending on the circumstances, you may have rights to access your personal information, correct inaccurate information, request erasure, restrict processing, object to processing, and receive certain information in a portable format. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing. Rights are not absolute and may be subject to legal exemptions.

Your right to object: where we rely on legitimate interests, you have the right to object to processing based on your particular situation. You also have an absolute right to object to direct marketing.

12. Complaints

Please contact us first if you have a privacy concern. You also have the right to complain to the UK Information Commissioner's Office (ICO), the UK's data-protection supervisory authority.

13. Automated decisions

We may use automated rules to support referral attribution, eligibility checks and fraud indicators, but we do not intend to make solely automated decisions about Affiliate applicants that produce legal or similarly significant effects without appropriate safeguards.

14. Referral tracking and cookies

Our Affiliate links may use first-party referral technology to remember an Affiliate referral and attribute an eligible booking. Please read the Affiliate Tracking & Cookie Notice for details.

15. Other Gidran privacy information

This notice supplements Gidran's general Privacy Policy. Passenger personal information continues to be handled under the privacy information applicable to Gidran's passenger services.

16. Changes and contact

We may update this notice when the Programme, technology or law changes. The latest version will be published on this page. Privacy questions and rights requests can be sent to info@gidrantravelinstyle.com.