Privacy Policy

Last updated: 07/02/2026

Mythos Luxury Travel (“Mythos”, “we”, “us”, “our”) is committed to protecting your privacy and handling your personal data in a transparent, lawful, and secure manner. This Privacy Policy outlines how we collect, use, store, and protect your personal information when you visit our website or engage our services. By accessing our site, you agree to the practices described in this policy. We may update this Privacy Policy periodically to reflect changes in our practices or relevant regulations. We encourage you to review this section regularly to stay informed about how we are protecting your information.

 
1. Data Controller

The data controller responsible for your personal data is:

Mythos Luxury Travel EOOD
Email: [email protected]

 
2. Personal Data We Collect

We may collect personal information that you provide to us directly, e.g. your name, email address, phone number, and any other details necessary to tailor our luxury travel services to your needs, such as the following categories of personal data:

a. Identification & Contact Information
Full name
Email address
Telephone number
Billing details
Nationality (where relevant for travel services)
b. Travel-Related Information
Travel preferences
Dates of travel
Accommodation and experience preferences
Special requests (e.g. dietary, accessibility needs)
Passport details (only when strictly necessary for booking purposes)
c. Technical Data
IP address
Browser type and version
Device information
Website usage data via cookies
 
3. How We Use Your Personal Data

We process personal data only when lawful to do so and for the following purposes:

To design, coordinate, and manage tailor-made travel itineraries
To communicate with you regarding inquiries, proposals, bookings, and support
To liaise with third-party travel suppliers on your behalf
To comply with legal, regulatory, and accounting obligations
To improve our services and website functionality
We may also use your data for marketing purposes, such as sending you updates and exclusive offers, with your consent

We do not use your data for automated decision-making or profiling.

 
4. Legal Basis for Processing

We process your personal data under one or more of the following legal bases:

Performance of a contract (travel planning and concierge services)
Legitimate interest (service improvement, client communication)
Legal obligation (accounting, compliance, regulatory requirements)
Consent, where explicitly required (e.g. marketing communications)
 
5. Data Sharing & Third Parties

We may share personal data only when necessary and strictly for service delivery with:

Hotels, transportation providers, guides, and experience suppliers
Payment service providers
IT and booking platform providers
Professional advisors (legal, accounting, compliance)
All third parties are required to comply with applicable data protection laws and confidentiality obligations.

We do not sell, trade, or otherwise transfer your personal information to external parties without your consent, except where necessary to provide our services or as required by law. Occasionally, we may share data with trusted partners who assist us in operating our website and conducting our business, subject to confidentiality agreements.

 
6. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

Adequacy decisions
Standard contractual clauses
GDPR-compliant data processing agreements
 
7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal and accounting obligations.

Retention periods may vary depending on the nature of the data and applicable laws.

 
8. Data Security

We implement appropriate technical and organizational measures and prioritize the protection of your personal information, including:

Secure storage systems
Access controls
Encryption where applicable
Confidentiality obligations for staff and partners.

 While we strive to ensure the security of your data, please be aware that no system or method of transmission over the Internet or electronic storage is 100% secure. 

 
9. Your Rights Under GDPR

You have the right to:

Access your personal data
Request correction or updates
Request deletion (“right to be forgotten”)
Restrict or object to processing
Request data portability
Withdraw consent at any time (where applicable)
Lodge a complaint with a supervisory authority
Requests can be submitted to [email protected].

 
10. Cookies

Our website may use cookies to enhance functionality and user experience.

You may control or disable cookies through your browser settings. For more information, please refer to our Cookie Policy (if applicable).

 
11. Marketing Communication

We will only send marketing communications if:

You have explicitly consented, or
You are an existing client and the communication relates to similar services
You may opt out at any time by contacting us or using the unsubscribe link.

 
12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or business practices. Updates will be published on this page.

 
13. Contact

For any questions regarding this Privacy Policy or your personal data, please contact:

Email: [email protected]