EXCLUSIVE HOLLAND TOURS
Your privacy
Exclusive Holland Tours privacy notice Updated 25 September 2026 1. Who we are Exclusive Holland Tours is responsible for personal data processed for our website, private tours, airport transfers and chauffeur services. Chamber of Commerce number: 98288938. For privacy questions or requests, contact welcome@exclusivehollandtours.nl or +31 20 250 4999. 2. The information we use For an enquiry or booking, we use your name, email address, phone number and chosen journey details: service, date and time, pickup address, destination, vehicle, passenger count, luggage, any flight and return details, extras and notes. We also keep prices, the applicable booking terms, payment and refund status, correspondence and changes. Signing in involves your email address and session information. You or someone booking on your behalf may provide these details. Please inform other travellers if you share their personal information. Details needed to plan the journey, contact you and arrange payment are required for your booking. Optional notes are not required. Do not enter passport, payment-card or medical information in them. Contact us if you need particular assistance. 3. Why we use information We use booking and contact information to answer your enquiry, perform the contract and handle payments, changes and service messages. Legal record-keeping obligations are the basis for keeping necessary financial records. We have a legitimate interest in security, preventing abuse, handling disputes, limited usage statistics and requesting feedback about a completed journey. We weigh these interests against your privacy. You may object to processing on this basis. Prices and availability are calculated automatically from your journey, vehicle and selected extras. We do not personalise prices using an advertising profile. Contact us if a result seems wrong. Booking does not subscribe you to a newsletter. 4. Who receives information Staff, the driver and technical providers involved in your booking or maintaining the system receive access for their work. Supabase supports our database and sign-in system. Vercel hosts the website. Resend sends booking emails. These emails may contain journey details and a personal booking link. Keep that link private. Mollie processes online payments on its own payment page and is independently responsible for its processing of payment data. We receive payment references and statuses, not your full card details. Mollie receives information including the amount, booking reference, technical payment references and the return link to your booking. See https://www.mollie.com/legal/privacy. Google Places helps find and verify addresses. While you search, your search text, language and a temporary search identifier are sent to Google through our server. When you select a place, we also use its place ID, address and location information to identify the journey and fare area. We do not request your device's GPS location. Transfers need recognised addresses for direct online booking; otherwise contact us for a quote. See https://policies.google.com/privacy. External images may load directly from an image provider. That provider then receives technical information needed to deliver the image, such as your IP address. If you open a WhatsApp, phone or email link, the terms of the service you choose also apply. Providers may process information outside the European Economic Area, including in the United States. Their applicable privacy and data-processing terms describe protections and any transfer mechanisms. You can ask us which arrangements apply to your information and how to obtain a copy. 5. Cookies, browser storage and statistics We use sign-in cookies and browser storage for signing in, saved favourites and resuming a booking. Sign-in cookies can remain in your browser for up to 400 days and may be renewed during use. This is separate from the validity of a sign-in session. Signing out clears the active sign-in cookies. Favourites remain until you remove them or clear browser storage. Booking drafts and any unresolved checkout attempt are stored in your browser session storage; browser session restoration can preserve them. Clear browser data when finished on a shared device. We count visits and steps such as requesting a price and starting checkout. New daily measurements contain no name, email address, visitor ID or campaign label linked to a booking. They are pruned to approximately 90 days when new events are recorded. Older statistics, bookings and payment attempts already started may still contain a previously recorded campaign label. This website does not use a Google Analytics or Meta advertising pixel. 6. Retention and security We determine retention needs by considering fulfilment and administration of the booking, outstanding payments, complaints, legal claims and statutory record-keeping duties. Dutch basic tax records generally have a seven-year retention requirement. This does not mean all flight details or free-text notes are needed for seven years. Full bookings are not currently deleted automatically when a journey ends. You can ask which information is still needed and request deletion where there is no remaining lawful reason to keep it. We process technical request information and usage limits for security. Our rate limiter stores a hash of the identifier it uses; hosting and sign-in providers may also process technical logs. We restrict access to bookings and use secure connections and access controls. No system can guarantee absolute security. 7. Reviews and your rights Leaving a review is optional. After checking that it relates to a completed booking, your first name, rating, title and review may be published with any reply from us. Do not include other people's private information. You can request removal of a published review or your information; legal exceptions may apply. You may request access, correction, deletion, restriction and, where applicable, portability of your data. You can object to processing based on a legitimate interest. Where processing relies on consent, you can withdraw it. We handle requests under the GDPR, normally within one month, and may ask only for information necessary to verify your identity. Contact welcome@exclusivehollandtours.nl. You can also complain to the Dutch Data Protection Authority at https://autoriteitpersoonsgegevens.nl. Updates to this notice will be published on this page.
A question about your information?
Exclusive Holland Tours