Privacy Policy

Introduction

Welcome to Hop On Hop Off Tickets (“we,” “our,” or “us”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website hoponhopofftickets.com (the “Website”) or use our services.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Website or use our services.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the “Last Updated” date of this Privacy Policy. Any changes or modifications will be effective immediately upon posting the updated Privacy Policy on the Website. You are encouraged to periodically review this Privacy Policy to stay informed of updates.

Information We Collect

We collect information that you provide directly to us, information we obtain automatically when you use our Website, and information from third-party sources. The types of data we may collect include:

Personal Data

Personal Data is information that identifies you as an individual or relates to an identifiable individual. We collect the following types of Personal Data:

Contact Information: Name, email address, postal address, phone number
Account Information: Username, password, account preferences
Payment Information: Credit card details, billing address, bank account information (note that payment information is processed by our secure payment processors and we do not store complete credit card information on our servers)
Booking Information: Travel dates, tour selections, passenger information (including names and ages), special requests
Identity Verification Information: In some cases, we may collect government-issued identification for fraud prevention and legal compliance purposes
Communication Information: When you contact our customer service team, we record and monitor conversations for training, quality control, and to process your requests efficiently
User-Generated Content: Reviews, ratings, feedback, survey responses

Usage Data

We automatically collect certain information when you visit, use, or navigate our Website. This information does not reveal your specific identity but may include:

Device Information: Device type, operating system, browser type and version
Usage Information: Pages visited, time spent on pages, click-through paths, search queries
Location Information: General location based on IP address
Log Data: IP addresses, browser type, internet service provider, referring/exit pages, date/time stamps, clickstream data
Cookies and Similar Technologies: Information collected through cookies, web beacons, and other tracking technologies (see our Cookie Policy for more information)

Information from Third-Party Sources

We may receive information about you from other sources, including:

Business Partners: Tour operators, travel agencies, and other business partners who provide services related to your bookings
Social Media: If you connect your social media account to our services or interact with us on social media
Public Databases: Publicly available sources and data suppliers that help us supplement our records

How We Use Your Information

We use the information we collect for various purposes, including:

Providing and Improving Our Services

Processing and confirming your bookings
Managing your account and providing customer support
Sending transactional messages related to your bookings
Personalizing your experience on our Website
Developing new features and services
Troubleshooting technical issues
Conducting data analysis and testing

Marketing and Communication

Sending promotional communications about new tours, special offers, and other information we think may interest you
Conducting surveys and collecting feedback
Managing contests, sweepstakes, or other promotional activities
Measuring the effectiveness of our marketing campaigns

Legal and Security Purposes

Complying with legal obligations
Responding to legal requests and preventing harm
Detecting and preventing fraud, unauthorized activities, and security incidents
Enforcing our terms, conditions, and policies
Establishing, exercising, or defending legal claims

Legal Basis for Processing (for EEA, UK, and Similar Jurisdictions)

If you are located in the European Economic Area (EEA), United Kingdom, or similar jurisdictions, we collect and process your personal information based on one or more of the following legal grounds:

Performance of a Contract: Processing is necessary to fulfill our contractual obligations to you, such as providing the services you have requested.
Legitimate Interests: Processing is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Our legitimate interests include providing, improving, and promoting our services; protecting against fraud and unauthorized transactions; and ensuring the security of our Website and services.
Consent: We process certain data based on your explicit consent, which you can withdraw at any time.
Legal Obligation: Processing is necessary to comply with our legal obligations under applicable laws.

We may share your information with the following categories of recipients:

Service Providers

We share information with third-party vendors, consultants, and other service providers who perform services on our behalf, including:

Payment processors
Cloud storage providers
Email service providers
Customer support services
Analytics providers
Marketing and advertising partners
Fraud prevention services

Tour Operators and Travel Partners

We share necessary booking information with the tour operators and travel partners who fulfill your bookings. This information typically includes passenger names, booking reference numbers, and any special requests related to your tour.

Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of company assets, your information may be transferred as part of that transaction.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

We may share your information with third parties when you have given us your consent to do so.

International Data Transfers

We are a global company and may transfer your personal information to countries other than the one in which you reside. If we transfer personal data originating from the EEA, UK, or Switzerland to countries that have not been found to provide adequate protection, we employ additional safeguards such as standard contractual clauses approved by the relevant authorities.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

The length of time we have an ongoing relationship with you
Whether there is a legal obligation to which we are subject
Whether retention is advisable in light of our legal position (such as for statutes of limitations, litigation, or regulatory investigations)

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information. These may include:

For All Users

Access: You can request access to your personal information that we hold.
Correction: You can request that we correct inaccurate or incomplete information.
Opt-out of Marketing: You can opt-out of marketing communications at any time by clicking the “unsubscribe” link in our emails or contacting us.

For EEA, UK, and Similar Jurisdictions

If you are located in the EEA, UK, or similar jurisdictions, you may have these additional rights:

Erasure: You can request deletion of your personal information in certain circumstances.
Restriction: You can request that we restrict processing of your personal information.
Data Portability: You can request a copy of your personal information in a structured, machine-readable format.
Objection: You can object to our processing of your personal information.
Withdraw Consent: You can withdraw consent where we process your information based on consent.
Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority.

For California Residents

Under the California Consumer Privacy Act (CCPA), California residents have specific rights regarding their personal information:

Right to Know: You can request information about the personal information we’ve collected about you and how we’ve used and disclosed it.
Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
Right to Opt-Out of Sale: We do not sell personal information as defined by the CCPA.

To exercise your rights, please contact us using the information provided in the “Contact Us” section below.

Data Security

We have implemented appropriate technical and organizational measures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, so we cannot guarantee absolute security.

Our security measures include:

Encryption of sensitive information
Regular security assessments and penetration testing
Access controls and authentication requirements
Employee training on data protection
Incident response procedures

Children’s Privacy

Our Website and services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us.

Third-Party Websites

Our Website may contain links to third-party websites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We use cookies and similar tracking technologies to track activity on our Website and hold certain information. For detailed information about the cookies we use and your choices regarding cookies, please see our Cookie Policy.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

By email: privacy@hoponhopofftickets.com
By mail: Data Protection Officer, Hop On Hop Off Tickets, 123 Explorer Avenue, London, EC1A 1BB, United Kingdom
By phone: +44 20 1234 5678

For data subjects in the EU, please note that our EU representative can be contacted at: eu-representative@hoponhopofftickets.com.

Definitions

Personal Data: Any information relating to an identified or identifiable natural person.
Processing: Any operation performed on personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.
Data Controller: The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Data Processor: A natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.
Cookies: Small pieces of data stored on a user’s device containing information about the user’s preferences, login information, and browsing history.

This Privacy Policy was last updated on June 5, 2025.