Last updated: 26 June 2026
Overview
Vagabond Tours Ltd, trading as Vagabond Tours of Ireland (“we”, “our”, “us” or “Vagabond Tours”), respects your privacy and is committed to protecting your personal data. This Website Privacy Notice explains how we collect, use, store, share and protect personal data when you use vagabondtoursofireland.com and any other website or online service operated by us.
This notice is provided in accordance with the General Data Protection Regulation, the Data Protection Act 2018 and applicable Irish data protection and ePrivacy law. It explains what personal data we process, why we process it, the lawful basis for doing so, how long we keep it, who we may share it with and what rights you have.
Using our website does not, by itself, mean that you consent to all processing described in this notice. Where we rely on consent, for example for certain cookies, marketing communications or optional processing, we will ask for your clear permission, and you may withdraw that consent at any time.
Who We Are
Vagabond Tours Ltd is the data controller for the personal data described in this notice. This means that we decide why and how your personal data is processed. You can contact us about data protection matters by email at enquiries@vagabond.ie or by writing to Vagabond Tours Ltd, Unit 52, Newtown Business & Enterprise Park, Newtownmountkennedy, Co. Wicklow, Ireland.
Third-Party Links
Our website may include links to third-party websites, platforms or services. Those third parties are responsible for their own privacy practices. We recommend that you read their privacy notices before providing personal data to them.
Changes to This Notice
We may update this Website Privacy Notice from time to time to reflect changes in our services, legal requirements or data protection practices. The most recent version will apply from the date it is made available on our website.
Information We Collect
Depending on how you interact with us, we may collect and process the following categories of personal data:
- Contact details, such as your name, email address, telephone number, postal address and country of residence.
- Booking and enquiry details, such as tour preferences, travel dates, group information, customer service records and correspondence with us.
- Payment and transaction information, such as billing details, payment confirmations, refund records and booking history. We do not intentionally collect or store full payment card details where payment is handled by a secure third-party payment provider.
- Tour participation information, such as dietary requirements, accessibility needs, emergency contact details, medical or health information that you choose or need to provide, and other information needed to help us deliver a safe and appropriate service.
- Website and device information, such as IP address, browser type, operating system, approximate location, cookie identifiers, pages viewed, time spent on the website and how you interact with our online content.
- Marketing information, such as newsletter subscriptions, communication preferences, consent records, competition entries, survey responses and interactions with marketing emails or advertisements.
- Recruitment information, where you apply for a role with us through the website, such as your CV, application details, employment history, qualifications and related correspondence.
Why We Process Personal Data
- To respond to enquiries and provide information about our tours and services.
- To manage bookings, payments, cancellations, refunds and customer service queries.
- To deliver tours safely and effectively, including making reasonable arrangements where you provide dietary, accessibility, health or emergency contact information.
- To communicate with you before, during and after a tour, including operational updates and service-related messages.
- To send marketing communications where permitted by law and in line with your communication preferences.
- To improve our website, services, customer experience, marketing and business operations.
- To comply with legal, accounting, tax, insurance, health and safety, consumer protection and regulatory obligations.
Where We Collect Personal Data
We collect personal data directly from you when you use our website, ask our chatbot a question, complete an online form, make an enquiry, book a tour, complete a pre-tour survey, sign up for marketing communications, contact us by phone, email or chat, apply for a job, or otherwise communicate with us.
We may also collect personal data automatically through cookies and similar technologies, or receive it from trusted third parties where this is necessary to provide our services, process payments, manage bookings, analyse website performance or comply with legal obligations.
Legal Basis for Processing Personal Data
We only process personal data where we have a lawful basis to do so. The lawful basis will depend on the purpose of the processing:
- Contractual necessity – where processing is needed to respond to booking requests, manage a booking, provide a tour, process payments, handle refunds, or take steps before entering into a contract with you.
- Legal obligation – where we must process information to comply with tax, accounting, consumer protection, health and safety, insurance, regulatory or legal obligations.
- Legitimate interests – where processing is necessary for our legitimate business interests, such as managing customer relationships, improving our services, protecting our business, preventing fraud, maintaining appropriate records and responding to complaints, provided those interests are not overridden by your rights and freedoms.
- Consent – where we ask for your clear permission, for example for certain marketing communications, non-essential cookies, surveys, competitions or optional processing. You may withdraw consent at any time.
- Vital interests – in limited circumstances where processing is necessary to protect someone’s life or safety, for example in an emergency during a tour.
Where we process health, accessibility or other special category data, we will only do so where a lawful basis under Article 6 GDPR and an appropriate condition under Article 9 GDPR apply, such as your explicit consent, the need to protect vital interests in an emergency, or the establishment, exercise or defence of legal claims.
Children‘s Privacy
Our tours and services may involve children or young people travelling with a parent, guardian or responsible adult. Where personal data about a minor is provided to us, it should be provided by, or with the knowledge of, a parent, guardian or responsible adult. We only process such information where necessary to manage a booking, deliver a tour safely, respond to an enquiry, comply with legal obligations or where appropriate consent has been obtained.
How We Protect Your Information
- Secure website and booking systems, including SSL encryption where appropriate.
- Secure third-party payment gateways for online payments.
- Access controls (e.g., MFA) so that personal data is available only to those who need it for their role.
- Staff awareness and training on data protection responsibilities.
- Appropriate retention, backup and deletion practices.
Cookies & Tracking
We use cookies and similar technologies to operate our website, remember your preferences, understand how visitors use our website, improve our services and support advertising or remarketing activity. Some cookies are strictly necessary for the website to function. Non-essential cookies, including analytics, advertising and remarketing cookies, will only be used where required consent has been obtained.
- Strictly necessary cookies help the website work properly and do not usually require consent.
- Analytics cookies help us understand website performance and visitor behaviour.
- Advertising and remarketing cookies may be used to measure advertising effectiveness and show more relevant content.
- You can manage or withdraw cookie consent using our cookie banner or cookie settings tool, and you can also control cookies through your browser settings.
- Tools used may include Google Analytics, Google Ads, Meta advertising tools, CRM systems and online forms.
Marketing & Remarketing
We may send marketing communications about our tours, offers, news or related services where you have consented to receive them, where the law otherwise permits us to do so, or where we are relying on a permitted customer relationship marketing basis. We will respect your communication preferences and any consent choices you make.
You can opt out of marketing at any time by using the unsubscribe option in our emails or by contacting us. You can manage advertising and remarketing cookies through our cookie settings.
Who We Share Personal Data With
We do not sell your personal data. We may share personal data where necessary with trusted third parties, including:
- Payment processors, booking systems, customer relationship management systems and website service providers.
- IT, cloud hosting, email, analytics, advertising and marketing service providers.
- Transport, accommodation, activity or other operational partners where needed to deliver a tour or respond to a service request.
- Professional advisers, auditors, insurers and legal representatives.
- Emergency services, regulators, public authorities, courts or law enforcement bodies where required or permitted by law.
- A purchaser, successor or business partner in connection with a business transfer, restructuring or similar transaction, where appropriate safeguards are applied.
Where a third-party processes personal data on our behalf, we require appropriate contractual safeguards so that personal data is processed only in line with our instructions and applicable data protection law.
Cross-Border Transfers
Some of our service providers or technology platforms may process personal data outside the European Economic Area, including in the United States, the United Kingdom, or other countries. Where this happens, we will ensure that an appropriate transfer mechanism is in place, such as an adequacy decision, Standard Contractual Clauses, the EU-US Data Privacy Framework where applicable, or another lawful safeguard.
You may contact us for further information about the safeguards used for international transfers.
Retention
We keep personal data only for as long as necessary for the purposes for which it was collected, including to provide services, manage bookings, comply with legal and accounting obligations, resolve disputes, maintain appropriate business records and protect our legal interests. Retention periods vary depending on the type of information and the reason it is held.
- Enquiry records are kept for as long as needed to respond to the enquiry and for a reasonable period afterwards for customer service and business record purposes.
- Booking, payment, refund and accounting records are retained for the period required for tax, accounting, contractual and legal purposes.
- Health, dietary, accessibility and emergency contact information is retained only for as long as needed to support the relevant tour, manage any incident, or meet legal or insurance obligations.
- Marketing records are kept until you unsubscribe, withdraw consent, object to marketing, or the information is no longer required for the purpose for which it was collected.
- Cookie and analytics data is retained in accordance with our Cookie Data Retention Schedule and the settings of the relevant technology provider.
- Recruitment records are retained for a limited period after the recruitment process unless a longer period is required or permitted by law, or you agree that we may keep your details for future opportunities.
Your Rights
Subject to applicable conditions and exemptions, you may have the right to:
- Request access to personal data we hold about you.
- Ask us to correct inaccurate or incomplete personal data.
- Request deletion of personal data where the law allows.
- Restrict or object to certain processing activities.
- Request portability of certain personal data in a structured, commonly used and machine-readable format.
- Withdraw consent where processing is based on consent.
- Make a complaint to the Data Protection Commission if you are unhappy with how your personal data has been handled.
To exercise your rights, email enquiries@vagabond.ie or write to: Communications, Vagabond Tours Ltd, Unit 52, Newtown Business & Enterprise Park, Newtownmountkennedy, County Wicklow, Ireland. We may need to verify your identity before responding. We will usually respond within one month, subject to any permitted extension under GDPR.
Data Breach Notification
If a personal data breach occurs, we will assess the risk and take appropriate steps in accordance with GDPR. Where required, we will notify the Irish Data Protection Commission without undue delay and, where feasible, within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to affected individuals, we will notify those individuals without undue delay.
Automated Decision-Making and Profiling
We do not use automated decision-making that produces legal or similarly significant effects for website users. We may use limited profiling or segmentation for marketing, analytics or remarketing purposes, such as understanding interests or measuring advertising performance, where permitted by law and subject to your cookie and marketing choices.
Contact Us
Address: Vagabond Tours Ltd, Unit 52, Newtown Business & Enterprise Park, Newtownmountkennedy, County Wicklow, Ireland.
Email: enquiries@vagabond.ie
Telephone:
Ireland: +353 (0) 1 563 4358
From USA (Toll Free): 833 230 0288
From Canada (Toll Free): 833 681 6903