What personal data we collect, why we need it, and how it is protected.
Version 2026-09-01 · effective 2026-09-01
To prepare a travel document we must collect the identity details the authority requires: your name, date of birth, nationality, passport details, contact details and the travel information for your trip.
Personal data is encrypted at rest using AES-256-GCM. Access is restricted by role, and staff who can view your passport details are a small, named group. Every time encrypted personal data is read in our admin console, that read is written to an immutable audit trail with the account, time and reason.
We never store full card numbers. Payments are handled by our gateway partners, and we store only the outcome, the amount and a gateway reference.
We share your details only with the authority you asked us to file with, and with the payment gateway that processes your payment. We do not sell personal data.
We keep application records for as long as needed to support you and to meet our accounting and legal obligations, then delete or anonymise them. You can ask us to delete your account data earlier where the law allows.
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Contact us through the support page and we will respond within the time the law requires.
Last reviewed 2026-10-12. If anything here is unclear, contact support@thehorizonluxe.com and we will put it right.