How we collect, use, and protect your information
Zagros Travel & Services Ltd is a travel agency based at 724 High Road Leytonstone, London E11 3AJ. We provide visa application assistance, vehicle insurance, travel tickets, and a range of related services to individuals, families, and businesses.
We are committed to protecting the privacy of everyone who uses our website or engages with our services. This policy explains what personal data we collect, why we collect it, how it is used, and what rights you have over it.
If you have any questions about this policy or how we handle your data, you can reach us at info@zagrostravel.co.uk.
We collect personal information in two ways - directly from you when you use our services, and automatically when you browse our website.
Information you provide to us may include:
Information collected automatically when you visit our website includes:
We collect only what is necessary to provide the service you have requested. You are under no obligation to provide optional information, though some fields are required to process your application.
The information we collect is used exclusively to operate and improve our services. Specifically, we use your data to:
We do not use your personal data for profiling, automated decision-making, or any form of targeted advertising. We will never contact you for marketing purposes without first obtaining your explicit consent.
We process your personal data on the following legal grounds under UK GDPR:
We do not sell, rent, or trade your personal data under any circumstances. We share information only where necessary to deliver our services, and only with trusted third-party providers who are bound by appropriate data processing agreements.
These providers may assist with services such as website hosting and infrastructure, secure file storage, email delivery, and basic website analytics. Each provider is permitted to use your data only for the specific purpose for which it was shared.
We may also disclose personal data if required to do so by law, regulation, or a lawful request from a public authority, or where disclosure is necessary to protect the safety or legal rights of our business or customers.
Your data is not transferred outside the United Kingdom or European Economic Area except where appropriate safeguards are in place.
We retain your personal data only for as long as is necessary for the purposes outlined in this policy.
Application form submissions are kept for up to 12 months from the date of submission. This allows us to follow up on your application and respond to any queries. After this period, records are removed unless a longer retention period is required by law.
Uploaded documents and files are stored securely for the duration of your application process. You may request removal of your uploaded files at any time by contacting us.
Anonymised technical data such as website visit logs is retained on a rolling basis and older records are removed automatically.
Under UK GDPR, you have a number of rights in relation to your personal data. You may exercise these rights at any time by contacting us.
To exercise any of these rights, please email us at info@zagrostravel.co.uk with a brief description of your request. We will respond within 30 days. We may ask you to verify your identity before acting on a request.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been handled unlawfully.
Our website does not use advertising cookies, tracking pixels, or any third-party analytics cookies that follow you across the web.
A strictly necessary session cookie is used solely for our internal staff portal to maintain a secure login session. This cookie is not present for regular visitors to the public website and expires when you close your browser.
We do not require your consent for this cookie as it falls within the strictly necessary category under UK PECR.
We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, accidental loss, alteration, or disclosure.
All data transmitted between your browser and our website is encrypted using HTTPS. Sensitive data such as uploaded documents is stored in secure, access-controlled environments.
While we take all reasonable precautions, no method of transmission or storage over the internet is completely secure. If you have reason to believe your data has been compromised, please contact us immediately at info@zagrostravel.co.uk.
Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us and we will take prompt steps to delete it.
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we handle data. When we make changes, we will update the date shown at the bottom of this page.
We encourage you to review this policy periodically. Continued use of our website or services after any changes have been made constitutes your acceptance of the revised policy. If the changes are significant, we will make reasonable efforts to notify you directly.
Last updated: April 2026