Privacy Policy

Introduction

Crystavia is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, and safeguard your information when you use our website and services.

We collect only the information necessary to provide our winter tourism services and communicate with you effectively. Your data is never sold to third parties.

Data Collection

We collect the following types of personal data:

• Contact Information: name, email address, phone number
• Usage Data: IP address, browser type, pages visited
• Communication Data: messages sent through contact forms
• Cookie Data: preferences and session information
• Travel Preferences: destination interests, travel dates, group size

How We Use Your Data

Your personal data is used for:

• Responding to enquiries and providing programme information
• Processing bookings and managing travel arrangements
• Sending programme updates and relevant travel information
• Improving our website functionality and user experience
• Complying with legal and regulatory requirements
• Analyzing website usage to enhance our services

Legal Basis

We process your data based on:

• Consent: for marketing communications and cookies
• Contract: to provide requested services
• Legitimate Interest: for business operations and improvements
• Legal Obligation: for tax and regulatory compliance

Data Protection Measures

We implement comprehensive security measures:

• Encrypted data transmission and storage
• Secure server infrastructure with regular updates
• Access controls limiting data access to authorized personnel
• Regular security audits and monitoring
• Staff training on data protection practices
• Breach notification procedures within 72 hours

Your Rights

Under data protection law, you have the right to:

• Request access to your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to data processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with supervisory authorities

To exercise these rights, contact us at [email protected]

Data Retention

We retain your data for:

• Contact form submissions: 3 years
• Service records: 5 years
• Financial records: 7 years (legal requirement)
• Marketing data: until consent withdrawn

Third-Party Services

We may use services from third parties that set their own cookies:

• Google Analytics - Website traffic analysis
• Payment processors - Secure payment handling
• Email service providers - Communication management
• Hosting services - Website infrastructure

International Data Transfers

Your data may be transferred to and processed in countries outside of Singapore. We ensure appropriate safeguards are in place through:

• Standard contractual clauses
• Adequacy decisions
• Privacy Shield certification (where applicable)

Contact Us

For questions about our privacy policy:

Email: [email protected]

Phone: +65 6413 7928

Address: 152 Beach Road, #30-01 Gateway East, Singapore 189721