Privacy
Policy
Privacy Policy
Effective Date
3rd August 2025
About Us
Alfendo Limited
Company Number: 00460932
Registered Address: 2233 Coventry Road, Sheldon, Birmingham, B26 3NL, United Kingdom
Trading Name: Club JTA
Contact Email: privacy@clubjta.co.uk
Alfendo Ltd is the data controller responsible for handling your personal data when you use the Club JTA platform. This policy explains how we collect, use, store, and share your information, and your rights under UK data protection laws.
What Data We Collect
We collect personal data when you register, interact with the platform, or engage with marketing communications. This may include:
– Identity and Contact Data: name, email address, phone number, agency/employer details
– Employment Data: job title, ABTA number, agency name
– Booking Data: supplier, destination, booking reference, travel dates
– Usage Data: login activity, rewards claimed, training progress
– Marketing Preferences: opt-in status, engagement metrics
– Technical Data: IP address, browser type, device type, cookies
How We Use Your Data
We process your personal data to:
– Operate and manage your Club JTA account
– Verify and log your bookings for reward purposes
– Deliver relevant training content and partner updates
– Administer loyalty schemes, events, and competitions
– Send promotional communications (with your consent)
– Analyse user behaviour to improve our services
– Fulfil legal or regulatory obligations
Legal Bases for Processing
We rely on the following legal grounds under the UK GDPR:
– Consent – for marketing communications and promotional activity
– Contract – to fulfil our agreement with you through your use of Club JTA
– Legitimate Interests – to improve our service, maintain platform security, and support commercial engagement
– Legal Obligation – for audit, tax, or regulatory compliance
Who We Share Your Data With
We only share your data with trusted third parties where necessary for the operation of Club JTA. These include:
| Provider | Purpose | Location |
|---|---|---|
| HubSpot | CRM, communications, analytics | EU/US (DPF/SCC) |
| Microsoft | Cloud infrastructure and storage | UK/EU |
| Analytics, email infrastructure | EU/US (DPF/SCC) |
These partners act as data processors under strict contractual agreements and only process your data in accordance with our instructions.
International Transfers
Where data is transferred outside the UK (e.g., to the US), we ensure adequate protection through:
– Standard Contractual Clauses (SCCs) approved by the UK Government
– UK Data Bridge to the EU
– Data Privacy Framework (DPF) participation by applicable US companies
Data Retention
We retain your personal data for the following durations:
– User account data – up to 7 years after your last activity
– Booking data – 7 years for audit/compliance
– Marketing consent/opt-out status – retained indefinitely in suppression files
– Support communications – up to 2 years after resolution
Your Rights
You have rights under the UK GDPR, including:
– Access – obtain a copy of your data
– Correction – fix incorrect or outdated data
– Erasure – request deletion where applicable
– Restriction – limit how your data is used
– Objection – object to certain types of processing
– Portability – request your data in a usable format
– Withdraw Consent – withdraw at any time for marketing
– Complaint – file a complaint with the ICO
Information Commissioner’s Office (ICO):
Website: https://ico.org.uk
Tel: +44 (0)303 123 1113
Data Security
We implement appropriate technical and organisational measures to protect your data, including:
– Secure cloud hosting
– Encryption in transit and at rest
– Role-based access controls
– Staff confidentiality and data handling training
Cookies
We use cookies to:
– Improve website functionality
– Track user preferences
– Monitor usage analytics
You can manage cookie preferences via your browser or our consent banner.
Policy Updates
We may revise this policy from time to time. Updates will be published on our website and, where appropriate, notified to you by email.
Contact Us
If you have any questions, concerns, or wish to exercise your rights, contact:
Data Protection Officer
Alfendo Limited (Club JTA)
2233 Coventry Road, Sheldon, Birmingham, B26 3NL
Email: privacy@clubjta.co.uk