1. Who We Are

MSA Corporate Travel Management is a travel solutions provider based in the UK, specialising in bespoke corporate travel management services including business travel, group logistics, executive services, and leisure travel add-ons.

2. Information We Collect

We may collect the following types of personal data:

• Contact detail (name, email address, phone number, job title)
• Travel preferences and itinerary details
• Payment and billing information
• Company details (for corporate accounts)
• Website usage data (IP address, browser type, pages visited)
• Communications(emails, enquiries, feedback)

We collect this information when you:

• Make a travel enquiry or booking
• Sign up for our newsletter or updates
• Contact us via our website, phone, or email
• Interact with our website (through cookies and analytics tools)

3. How We Use Your Information

We process personal data to:

• Fulfil your travel bookings and manage itineraries
• Communicate with you regarding your travel plans or enquiries
• Improve our services and personalise your travel experience
• Send relevant updates, offers, or newsletters (you can unsubscribe at any time)
• Comply with legal and financial record-keeping obligations

4. Legal Basis for Processing

Under UK data protection laws (including UK GDPR), we rely on the following legal bases:

• Contractual necessity: To provide travel services you request.
• Consent: For marketing communications or cookies (where applicable)
• Legitimate interests: To improve our service and maintain business operations
• Legal obligations: To meet legal or regulatory requirements

5. How We Share Your Data

We only share your data when necessary to provide services, including with:

• Airlines, hotels, and travel providers
• Payment processors and financial institutions
• IT service providers and website hosts
• Legal or regulatory authorities (as required)

We never sell your personal data to third parties.

6. International Transfers

Where necessary, we may transfer your data outside the UK or EEA (for example, to international travel providers). In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent protections.

7. How We Protect Your Data

We implement suitable technical and organisational security measures to protect personal data, including:

• Secure servers and encrypted databases
• Restricted staff access
• Regular software and data access reviews

8. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy, including legal or regulatory obligations. Typically, travel booking records are retained for up to 6 years in line with accounting and auditing standards.

9. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to processing or request restriction
• Withdraw consent (where applicable)
• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, please contact us at: privacy@msatravel.co.uk

10. Third-Party Links

Our website may include links to third-party websites. We are not responsible for their privacy practices and recommend reviewing their privacy policies separately.

11. Cookies Policy

Our website uses cookies and similar tracking technologies to improve your experience and analyse website usage. You can control cookie settings via your browser or opt out of analytics cookies when visiting our site.

For more information, please see our Cookie Policy.