Privacy Policy
Last updated: 30 September 2026
PB Holidays (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit or use pbholidays.com, make a booking, submit an enquiry, or interact with our services.
PB Holidays operates in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable data protection legislation in Cyprus.
By using our website or providing your personal information to us, you acknowledge the practices described in this Privacy Policy.
1. Who We Are
PB Holidays / Paphian Blue
Website: pbholidays.com
We provide travel-related services including excursions, cruises, activities, tours, transfers and other tourism experiences in Cyprus.
For questions regarding this Privacy Policy or your personal data, please contact us through the contact details provided on our website.
2. What Personal Data We Collect
Depending on how you interact with our website and services, we may collect the following information:
Information you provide to us
When you make a booking, submit an enquiry or contact us, we may collect:
- Full name
- Email address
- Telephone/mobile number
- Country of residence
- Booking and travel information
- Number of participants
- Preferred dates and times
- Accommodation or pickup information
- Special requests or requirements
- Information included in messages or enquiries
- Billing and payment-related information
Where necessary for providing a particular service, we may also collect information relating to accessibility, dietary requirements or other special arrangements that you voluntarily provide.
Information collected automatically
When you visit our website, certain technical information may be collected automatically, including:
- IP address
- Browser type and version
- Device type
- Operating system
- Language preferences
- Pages visited
- Date and time of visits
- Referring website
- Approximate geographic location
- Website interaction and usage information
This information is generally used to maintain, secure and improve our website and services.
3. How We Use Your Personal Data
We may use your personal information for the following purposes:
- To process and manage bookings
- To provide excursions, tours, cruises, activities and other requested services
- To communicate with you about your booking
- To respond to enquiries and requests
- To process payments and refunds
- To arrange transportation, excursions or other services
- To communicate important information relating to your booking
- To provide customer support
- To improve our website, products and services
- To understand how visitors use our website
- To prevent fraud, abuse and security incidents
- To comply with legal and regulatory obligations
- To send marketing communications where you have provided the necessary consent or where otherwise permitted by law
We will only use your personal data for purposes that are compatible with the purposes for which it was originally collected.
4. Legal Basis for Processing
Under the GDPR, we process personal data on one or more of the following legal bases:
Performance of a contract
We may process your information when it is necessary to arrange or provide a service you have requested, such as processing an excursion or activity booking.
Legal obligations
We may process information where necessary to comply with applicable legal, accounting, tax or regulatory requirements.
Legitimate interests
We may process information where necessary for our legitimate business interests, provided that these interests do not override your fundamental rights and freedoms.
This may include website security, fraud prevention, service improvement and certain business communications.
Consent
Where required, we will ask for your consent before processing your personal data, such as for certain marketing communications or non-essential cookies.
You may withdraw your consent at any time.
5. Booking and Payment Information
When you make a booking through PB Holidays, we may need to share relevant information with third-party suppliers or service providers involved in fulfilling your booking.
For example, this may include:
- Tour and excursion operators
- Cruise operators
- Transportation providers
- Activity providers
- Hotels or accommodation providers
- Payment service providers
- Booking and reservation platforms
We only provide information that is reasonably necessary to arrange the requested service.
Payment card details may be processed directly by our payment service provider. Where applicable, PB Holidays does not store complete payment card information on its own servers.
6. Third-Party Service Providers
We may use trusted third-party companies to provide services necessary for operating our website and business.
These may include providers for:
- Website hosting
- Booking systems
- Payment processing
- Email delivery
- Customer communication
- Website analytics
- Advertising
- Cookie management
- Security and fraud prevention
- Website functionality
These providers may process personal information on our behalf or independently where they act as separate data controllers.
We take reasonable steps to ensure that third-party providers process personal data appropriately and securely.
7. Cookies
Our website may use cookies and similar technologies.
Cookies are small text files stored on your device that help websites function correctly and remember certain information.
We may use cookies for purposes including:
Essential cookies
These cookies are necessary for the operation of the website, including booking functionality, security and basic website features.
Analytics cookies
These help us understand how visitors use our website, such as which pages are visited and how users navigate the site.
Marketing cookies
Where applicable and subject to your consent, marketing cookies may be used to help us measure advertising campaigns and provide more relevant advertising.
You can manage your cookie preferences through our cookie consent mechanism or your browser settings.
Disabling certain cookies may affect some website functionality.
8. Google Analytics and Similar Services
We may use analytics services such as Google Analytics to understand website traffic and visitor behaviour.
These services may collect information such as:
- Pages viewed
- Approximate location
- Device information
- Browser information
- Website interactions
- Referral information
Where required by applicable law, analytics cookies will only be activated after obtaining your consent.
For more information about Google’s privacy practices, please refer to Google’s own privacy documentation.
9. Marketing Communications
If you have opted in to receive marketing communications from us, we may use your email address or other contact details to send information about:
- Excursions
- Cruises
- Activities
- Tours
- Special offers
- Seasonal promotions
- New services
- Travel-related information
You can unsubscribe from marketing communications at any time by using the unsubscribe link included in our emails or by contacting us.
We will not use your personal data for direct marketing where your consent is required unless we have obtained that consent.
10. Sharing Your Personal Data
We do not sell or rent your personal information.
We may share personal data with third parties when necessary to provide our services or comply with legal obligations.
These may include:
- Service providers and suppliers
- Payment processors
- Technology providers
- Website and booking system providers
- Professional advisers
- Government authorities or law enforcement agencies where legally required
We only share information that is reasonably necessary for the relevant purpose.
11. International Data Transfers
Some of our service providers may process personal data outside Cyprus or the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable GDPR requirements.
This may include using European Commission-approved Standard Contractual Clauses or relying on an applicable adequacy decision or other lawful transfer mechanism.
12. How Long We Keep Your Information
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.
The retention period may depend on:
- The nature of the booking or service
- Legal and accounting requirements
- Our contractual obligations
- The resolution of disputes
- Legitimate business requirements
- Marketing consent
When personal data is no longer required, we will take reasonable steps to securely delete or anonymise it.
13. Data Security
We take reasonable technical and organisational measures to protect personal data against:
- Unauthorised access
- Accidental loss
- Destruction
- Alteration
- Disclosure
- Misuse
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
14. Your Rights Under the GDPR
Subject to applicable legal conditions, you have rights regarding your personal data, including the right to:
- Access your personal data
- Correct inaccurate or incomplete information
- Request deletion of your personal data
- Restrict processing of your personal data
- Object to certain processing
- Request data portability
- Withdraw consent where processing is based on consent
- Object to direct marketing
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your personal data has been processed unlawfully.
In Cyprus, the relevant supervisory authority is the:
Office of the Commissioner for Personal Data Protection
You can find information about the authority and how to make a complaint through the official Cyprus data protection authority website.
15. Children’s Privacy
Our website and services are not specifically directed at children.
We do not knowingly collect personal information from children without appropriate consent where such consent is legally required.
If you believe that a child has provided us with personal information improperly, please contact us so that we can take appropriate action.
16. Links to Other Websites
Our website may contain links to websites operated by third parties.
We are not responsible for the privacy practices, security or content of external websites.
We recommend reviewing the privacy policy of any third-party website before providing personal information.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or data protection practices.
The latest version will always be published on this page.
The date shown at the beginning of this Privacy Policy indicates when it was most recently updated.
18. Contact Us
If you have questions about this Privacy Policy, want to exercise your data protection rights, or have concerns about how your personal data is being handled, please contact us.
PB Holidays / Paphian Blue
Website: pbholidays.com
Data Protection Requests
When contacting us about your personal data, please provide enough information for us to identify you and understand your request.
We may need to verify your identity before providing access to or making changes to personal information.
We will respond to valid requests within the timeframe required by applicable data protection law.