Privacy Promise

Last reviewed 1 August 2026.

Because we work with groups, we usually hold data about people who did not fill in a form themselves — travellers whose details an organiser supplied. This notice covers both.

What we hold

• Traveller data. Names, dates of birth, contact details, itineraries, and passport or travel document details where the route requires them.
• Assistance and dietary requirements where a traveller or organiser tells us about them, so they can be recorded on the booking. Some of this may be health-related; we hold it only to arrange the travel service requested.
• Organiser data. The contact details of whoever is coordinating the group.
• Payment records. Card number, expiration date and security code are entered in an Authorize.Net-hosted form. We retain the gateway transaction identifier, masked card details, amount, verification result codes and billing data needed for review and reconciliation.
• Correspondence. What you send us and what we send back.
• Technical and campaign data. IP address, device and browser, pages viewed, and campaign parameters such as utm_source or gclid.

Why, and on what basis

• To arrange and ticket the travel — necessary to provide the service requested.
• To support the booking afterwards — our legitimate interest in servicing what we sold.
• To record assistance or dietary needs — on the explicit request of the traveller or their organiser, and shared only with the carriers who must act on it.
• To meet legal and tax obligations.
• To detect fraud — our legitimate interest and our processors’ requirement.
• Analytics and advertising measurement — only with consent given through the cookie banner.

Where it goes

Airlines and inventory partners, so tickets can be issued. Payment processors. Email delivery and hosting providers running our infrastructure. Our internal booking system. Analytics and advertising platforms only where consented. Authorities where required by law. We do not sell personal data.

Some recipients are outside your country. Where data crosses borders we rely on recognised transfer mechanisms and contractual safeguards.

Group organisers, specifically

If you supply us with other people’s details, you confirm you are entitled to do so and that you have told them their details are being passed to a travel agency and to airlines for the purpose of booking. We will deal directly with any traveller who contacts us about their own data, regardless of who supplied it.

How long we keep it

Booking and transaction records for the period required by tax and accounting law — generally seven years from the end of the relevant financial year. Correspondence unrelated to a booking for up to two years. Consent-based analytics data per the platform’s own retention.

How to opt out

These are the actual steps, not just the rights. Group organisers can exercise them on their own data; individual travellers can contact us directly about theirs, whoever supplied it.

• Analytics and advertising cookies. Choose Decline on the cookie banner and neither is loaded. If you already accepted and want to change your mind, clear cookies for localhost:8080 in your browser settings and reload the page — the banner reappears and your new choice applies. You can also block cookies entirely in your browser; the site still works.
• Marketing contact. Reply to any message from us asking to be removed, or email [email protected] with “opt out” in the subject. We action it within five business days.
• Quote follow-up. Tell your planner, or email us, and we stop chasing that enquiry.
• Everything else. To access, correct, delete, restrict or object to processing, or to receive a portable copy, email [email protected]. We respond within the period the applicable law allows.

Opting out of marketing does not stop service messages about a booking already made — itineraries, ticket numbers and schedule changes. Those are part of the service bought, and we cannot suppress them while a booking is live.

We do not sell or share personal information as those terms are defined under US state privacy laws, so there is no sale to opt out of.

Your rights

Depending on where you live, you may request access to your data, correction, deletion, restriction, portability, or object to processing, and you may withdraw consent at any time. Write to [email protected]. You may also complain to your local data protection authority.

Cookies

Necessary cookies are set on load; analytics and advertising cookies only after you accept them. See the cookie notice.

Security

Traffic is encrypted in transit, access to booking records is limited to staff who need it, and card data is handled by PCI-compliant processors. Where the law requires notification of a breach, we will notify.

Children

The site is not intended for children. We hold a child’s details only as a traveller on a booking made by an adult, and only what the airline requires.

Contact

[email protected], or write to MSK Tour Groups, 8101 N Church Road, Kansas City, MO 64158.