GDPR Compliance

Last updated: August 4, 2026

Our Commitment to GDPR

noble-tale is committed to complying with the General Data Protection Regulation (GDPR) and protecting the privacy rights of individuals within the European Economic Area and the United Kingdom.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: You provide explicit consent when submitting enquiry forms
  • Contractual necessity: Processing is necessary to fulfil travel service contracts
  • Legitimate interests: We process data to improve our services and communicate effectively
  • Legal obligation: We retain certain data to comply with legal requirements

Your Rights Under GDPR

Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data.

Right to Rectification

You may request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances, including when data is no longer necessary for the purposes it was collected.

Right to Restriction of Processing

You may request that we limit how we use your data in specific situations.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

Data Protection Officer

For questions regarding data protection or to exercise your GDPR rights, contact us at:

Email: [email protected]
Address: 42 Deansgate, Manchester, M3 2BA, United Kingdom

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in our Privacy Policy or as required by law. Retention periods vary based on:

  • The nature of the data collected
  • The purpose for which it was collected
  • Legal and regulatory requirements

International Data Transfers

If we transfer your data outside the UK or EEA, we ensure appropriate safeguards are in place through:

  • Standard contractual clauses approved by regulatory authorities
  • Transfers to countries with adequate data protection levels
  • Your explicit consent where required

Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority.

Updates to This Information

We may update our GDPR compliance practices. Any changes will be reflected on this page with an updated revision date.