PRIVACY POLICY
Contents
Failure to Provide Personal Data
Payments and Financial Data/Credit Card Information
Security
Personal Data of Other Parties
Analytics and Targeted Advertising
Legal Basis for using Personal Data
HOW WE SHARE YOUR PERSONAL DATA
HOW WE PROTECT YOUR PERSONAL DATA
Information Storage and Processing
REGION SPECIFIC NOTICES AND DISCLOSURES
OUR PRIVACY COMMITMENT
Globus family of brands is committed to using the information that is provided to us in a responsible manner. Your personal information is used to provide travel-related products and services (“Services”) to you, to improve the Services we offer, and to provide you with our latest news and updates.
This Privacy Policy explains the collection, use, protection and sharing of information received from or about you in connection with your use of our Services or your use of or interaction with any of our websites, mobile applications and/or other digital platforms operated by us, or your interaction in person or over the telephone or through electronic communication with us or any of our agents or representatives. We are committed to ensuring the protection of your information and that you fully understand how and why we use your information.
The use of and interaction with our services, websites, mobile applications, digital platforms, and offline and electronic communications indicates your acknowledgement that you understand the terms of this Privacy Policy.
This is the current version of our Privacy Policy updated
on October 1st, 2026.
Changes to the Privacy Policy
We may make changes to this Privacy Policy from time to time, and we will notify you by posting a new Privacy Policy on this page. We reserve the right to make any revised policy effective for Personal Data we already hold about you as well as any information that we receive in the future. Your continued use of the Website and/or services following any changes to the Privacy Policy signifies your acceptance of those changes.
Definitions
“Data Privacy Manager”, “Data Protection Officer”, “Privacy Officer” each means the person responsible for maintaining the standards set forth in this Privacy Policy and to answer any questions a User may have about the processing of their personal data; which is in Canada, India and the US a Data Privacy Manager, the UK, a Data Protection Officer and in New Zealand and Australia a Privacy Officer.
“Disclose” means to release, transfer, disseminate, or otherwise communicate all or any part of any record orally, in writing, or by electronic or any other means to any person or entity.
“User” means an individual who has registered or who has provided personal data with the application.
“Minor” means any individual under 18 years of age, or as defined under the laws of their jurisdiction or residence, including the Children's Online Privacy Protection Act (COPPA) in the US and Article 8 of the GPDR in the EU and UK.
“Personal Data” means any recorded information about a specific individual whose identity may be inferred from the information. This information includes, for example, name, e-mail and postal address, phone number, account and billing information, and other information provided by a user of the application or incidental to providing products and services to you.
“Application” means GoAvalon, GoCosmos, GoGlobus, CosmosGO, AvalonGO, or GlobusGO mobile apps, and any domestic or internationally owned or managed website of the Globus family of brands that may be accessed through it.
“We”, “Us” or “Our” means “Globus family of brands” in the United States, United Kingdom, Australia, New Zealand, Canada, India or other Globus family of brands operating offices globally.
WHO WE ARE
The “Globus family of brands” including “Cosmos”, “Globus” and “Avalon Waterways” operating in the United States, United Kingdom, Australia, New Zealand, Canada, India and other Globus family of brands offices globally. This website is owned, managed and operated by each of the different legal entities comprising the Globus family of brands, as applicable. Each entity holds Personal Data and represents the ‘data controller’ for the purposes of relevant data protection law, as applicable).
United
States - Group Voyagers Inc.
Postal address: 4695 S. Monaco, Suite 200 Denver, CO 80237 USA
Email address: privacy@globusfamily.com
Telephone number: +1-800-276-1241
Canada -
Lontours Canada Ltd,
Postal address: 3280 Bloor St W. Centre Tower, Suite 1140 Toronto, ON M8X 2X3 CAN
Email address: privacy@globusfamily.com
Telephone number: +1-800-276-1241
United
Kingdom - Cosmos Tours Limited,
Company registration number: 01175122
Postal address: Cosmos Tours LTD, Ground Floor, Avalon House, Lower Mortlake Road, Richmond TW9 2JY UK
Email address: privacy@globusfamily.com
Telephone number: ++44 330 0588 237
Australia-
Circuit Travel Private Limited
Postal address: Australia - Level 4, 55 Clarence Street, Sydney NSW 2000, Australia
Email address: privacy@globusfamily.com
Telephone number: +61 2 8259 1100
New Zealand
- International Holidays
Postal address - Level 9, 55 Shortland Street, Auckland City, New Zealand
Email address: privacy@globusfamily.com
Telephone number: + 1300 230 234
India –
Globus Family of Brands India
24, 1st Main Rd, Vyalikaval,
Lower Palace Orchards,
Guttahalli, Bengaluru, Karnataka 560003
Email address: privacy@globusfamily.com
Telephone number: +919739175333
PERSONAL DATA WE COLLECT
When you visit or set up an account on any of our websites, Applications, digital platforms, or when you book a tour or river cruise with us, or request information about us, communicate with us, or interact with us either in person, over the telephone or through electronic communications, or access any of our services directly or through agents or representatives, we collect data about you and your interactions.
We may collect the following different kinds of Personal Data about you either directly from you or from our business partners or third parties and in accordance with applicable law:
· Identity Data includes first name, maiden name, last name, and marital status, title, date of birth, place of birth, gender, residency, visa and passport information.
· Contact Data includes billing address, email address and land and mobile telephone numbers, home address, emergency contact information.
· Financial and Transaction Data includes payment card details, bank information and details about payments to and from you and other details of services you have purchased from us.
· Employment Data includes information that you may provide on a job application to us.
· Business Information includes business details such as name of entity, contact person, titles, address, telephone numbers and email addresses
· Special Categories of Personal Data (or sensitive Personal Data) may include any relevant information about your health, medical conditions and/or disabilities, religious beliefs, dietary or other requirements (if applicable).
· Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our websites and includes information about how you use our website and services.
· Communications Data includes details regarding your interactions with us and our call centers, including email communications and recordings of your calls.
·
Photographic and Videographic Data includes
closed circuit television cameras in public areas of our ships and destinations
and photographers taking photographs for guests and for other purposes.
·
Preference Data includes information
about your interests, preferences, feedback and survey responses.
· Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
·
Location Data in Applications that
collect location data to display real-time risk alerts and personalized
assistance notification features. This option may be managed in the device
settings and the Application settings.
· Automated technologies or interaction. As you interact with our websites, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this Personal Data by using cookies, server logs and other similar technologies. We may also receive Technical Data about you if you visit other websites employing our cookies. Please refer to our analytics and targeted advertising section below for further details. By using the website, Applications, or other digital platforms with your setting adjusted to accept cookies, you consent to our use of cookies and other automated technologies
· Third parties or publicly available sources. We may receive Personal Data about you from various third parties and other sources, including publicly available sources and third-party analytics providers, as set out below:
o Technical, Profile and Usage Data, for example from analytics providers, advertising networks and/or search information providers
o Contact, Financial and Transaction Data from providers of technical, payment and delivery services
o Identity and Contact Data from marketing data validation service companies
o Identity and Contact Data from our social media accounts that you participate in.
Failure to Provide Personal Data
Where we need to collect Personal Data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with a trip and related services). In this case, we may have to cancel the services you have booked with us (and our standard cancellation terms will apply) but we will notify you if this is the case at the time.
Minors
We do not sell or market our Services to Minors. Minors are not eligible to register with, use or purchase Services via the website. We do not knowingly collect Personal Data from any Minor and will not deliberately use such information. If a Minor has shared Personal Data without permission from a parent or guardian consent, we will take reasonable steps to delete all such information once we become aware of it.
However, in some cases, we may need to collect Personal Data of Minors in connection with providing Services, and in all cases the Personal Data will be collected subject to the parent or guardian’s express consent. The parent or guardian may revoke consent at any time, and we will take reasonable steps to delete all Personal Data collected about the Minor. A parent or guardian can also request to review their Minor’s Personal Data, prohibit further collection of their Minor’s Personal Data, and delete, or instruct the deletion of the Minor’s Personal Data.
Social Media Platforms
When you interact with our account on or through a social media platform or on interactive websites such as blogs and forums, we collect the Personal Data that you make available to us on that page or account, including your user ID and/or username, and any information you have made public in connection with that social media platform. We comply with the privacy policies of the applicable social media platform and only collect and store such Personal Data that we are permitted to collect and store.
Our website includes social media widgets, pixel tracking and other tools that collect information about your visit and actions on web pages when visiting on our website, and they set a cookie to make sure their features function properly. Social media features and tools may be hosted by a third party or hosted directly on our website. Your interactions with those features are governed by the privacy policies of the companies that provide them.
Payments and Financial Data/Credit Card Information Security
Globus family of brands is compliant with the Payment Card Industry (PCI) Data Security Standard. We use industry accepted security protections including encryption to protect cardholder data.
We use third-party payment processors for payment processing and with respect to information you provide directly to the third-party payment processors, their use of your personal information is governed by their privacy policies.
Aggregated Data
We routinely collect, use and share aggregated data such as statistical or demographic data for multiple purposes. Aggregated data may be derived from your Personal Data but is not considered Personal Data as it does not directly or indirectly reveal an individual's identity. For example, we may aggregate usage data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect aggregated data with your Personal Data so that it can directly or indirectly identify you, we treat the combined data as Personal Data which will be used in accordance with this Privacy Policy.
Personal Data of Other Parties
When you book a trip with us, we will need to ask for Personal Data (including Identity Data, Contact Data and Special Categories of Personal Data) of the people you are travelling with and also Personal Data (including Identity Data and Contact Data) for your emergency contact. We need this information to comply with our obligations in providing the trip you've booked. The Personal Data of those other parties will be used in accordance with this Privacy Policy.
Travel Agents and Resellers
If you have booked through a travel agent or reseller, they may have separately asked for your permission for them to contact you or send you marketing information. Please refer to the travel agent or resellers’ own privacy policy to understand how they process your Personal Data. If you believe a travel agent or reseller is using your data in a way you have not consented to, you should contact them directly.
Analytics and Targeted Advertising-Cookies
We, as well as third-party vendors acting on our behalf, may use cookies, tracking pixels, and scripting techniques to anonymously collect information about our services and how they are used by our visitors so we can better meet the needs of our customers and improve our services.
Data about your activities online may be collected for use in providing advertising tailored to your individual interests. We may [LT1] [CS2] work with third parties such as network advertisers and ad exchanges to serve advertisements across the internet and may use third party analytics providers to evaluate and provide us and/or third parties with information about the use of these ads on third party websites and viewing of advertisements and viewing of our content.
We use these technologies to analyze ad impressions, your use of ad services, and interactions with these ad impressions and ad services to better tailor your experience with our web services.
The information collected may also include information about your visits to our website, including the pages you have viewed and what content you have seen. These tracking technologies may be set to, among other things: (a) help deliver advertisements to you that you might be interested in; (b) prevent you from seeing the same advertisements too many times; and (c) understand the effectiveness of the advertisements that have been delivered to you.
You may choose which cookies to accept or reject, however if you choose to reject certain cookies it may affect your experience on the website.
Your browser may accept cookies by default. You may configure your browser to refuse some or all cookies or to notify you before accepting cookies. In addition, you can also disable optional cookies on our website by selecting the privacy consent widget at the bottom of the screen. Information about the type of cookies used may be accessed from the privacy consent widget.
For additional information on cookies and how we use them, please contact the Data Privacy Manager at privacy@globusfamily.com for more information. For security purposes, our systems may collect information such as domain names, internet protocol addresses, the types of web browsers, and other information about visitors to the website.
Third Party Links
Our websites, applications, and social media sites may include links to other websites or applications whose privacy practices may differ from our practices. If you submit your personal information to any of those other websites or applications, your information is governed by their privacy policies. We are not responsible for the privacy practices or the content of any websites or applications to which our websites, applications, and social media sites provide links. We encourage you to carefully read the privacy policy of any website or application you visit.
HOW WE USE YOUR PERSONAL DATA
We will use your Personal Data primarily to provide services to you and to improve our ability to provide the services, including but not limited to the following ways:
· to provide you with the products and services you request, view, or purchase;
· to communicate with you about your account or transactions with us and to send you information about our products and services, or request feedback, or to update you on changes to our policies
· to send you offers and promotions about our products and services
· to operate, optimize and improve our websites and mobile applications, products and services
· to detect, investigate and prevent activities that may violate our policies or be fraudulent or illegal
Legal Basis for using Personal Data
· Consent – where you have given us consent for a specific purpose or for a specific category such as for sensitive personal data
· Contract -where it is necessary for a contract we are about to enter or have entered with you
· Legal Obligation - where we need to comply with a legal or regulatory obligation
· Legitimate Interest - where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests
We may process your Personal Data on more than one legal basis depending on the specific purpose for which we are using your Personal Data. We will use your Personal Data for the purposes for which we collected it, unless we reasonably determine that we need to use it for another reason that is compatible with the original purposes(s) and/or as required or permitted by law. If we need to use your Personal Data for an unrelated purpose, we will notify you and explain the legal basis which allows us to do so.
We may use your Personal Data in combination with other information that we have received, gathered, acquired or stored from other sources, including information that we receive offline, and information received from third parties. We may also use the information you have provided and that we collect about you, such as the destinations you prefer to travel to, where you live and your age, to tailor communications we send you. We do this to ensure you receive information about travel services that are [LT3] [CS4] tailored to your preferences and interests.
Tailored Communications
You may receive marketing communications from us if you have requested information from us, or booked a service from us, or booked a service with us through a third party, unless you have opted out of such communications. You may also receive marketing communications from other members of the Globus family of brands.
If you do not want to receive marketing communications from us, you can unsubscribe from direct mail and email communications by sending an email to unsubscribe_marketing@globusfamily.com
You may also opt-out of receiving email marketing communications from us via any email sent by selecting the unsubscribe link at the bottom of the email communication.
Artificial Intelligence (AI)
Globus family of brands uses artificial intelligence systems for routine automation of tasks. Globus family of brands does not perform high risk processing and does not use AI for automated decision making. Globus family of brands is committed to the ethical use of artificial intelligence technology in all cases. Globus family of brands will provide notification when you are interacting with an AI system and delivery of content developed using generative AI will be identified as such.
HOW WE SHARE YOUR PERSONAL DATA
We do not share your Personal Data with third parties, except as described below:
· Third Party Service Providers: We may disclose your Personal Data to third party service providers who use the information to perform services on our behalf. We require all third parties to respect the security of your Personal Data and to treat it in accordance with the law. We do not allow our third-party service providers to use your Personal Data for their own purposes and only permit them to process your Personal Data for specified purposes and in accordance with our instructions.
· Legal Necessity: We may use or disclose your Personal Data as we deem necessary or appropriate under applicable laws, to respond to requests from public, governmental and regulatory authorities, to comply with court orders, litigation proceedings and other legal processes, and to obtain legal remedies or limit our damages; and to protect our rights, safety and property as well as the rights, safety and property of our employees, our guests, and others.
· Perform Obligations: We may use or disclose your Personal Data so that we can meet our obligations to you, such as to send you a brochure you requested, to send you a trip quote, or to provide the trip you've booked. We will also disclose your Personal Data to our travel suppliers as needed in order for them to meet your requests, facilitate your travel, , and to ensure that they can contact you if you need assistance. Some of these suppliers will be outside the United States, United Kingdom, Australia, New Zealand, Canada, India and European Economic Area (EEA). We require our suppliers to meet the same data protection standards we have.
In addition to the above, we may also share your Personal Data with the following third parties in the following circumstances:
· With third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your Personal Data in the same way as set out in this Privacy Policy;
· To enforce or apply the Terms and Conditions or to investigate potential breaches; and/or
· To protect the rights, property or safety of Globus family of brands, our guests or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.
International Data Transfers
We are a global business and as
such we may need to share your Personal Data with other members of the Globus
Family of Brands and third-party service providers and suppliers for the
purposes outlined in this Privacy Policy. This means that we may transfer your
Personal Data outside the jurisdiction in which the Personal Data was
collected. We ensure that there are appropriate data protection clauses that
provide adequate safeguards as required under applicable law in the relevant
data transfer agreements and your Personal Data is protected in accordance with
strict standards of data security and protection in all jurisdictions.
HOW WE PROTECT YOUR PERSONAL DATA
Globus family of brands has security measures in place that are intended to prevent your Personal Data from being lost, altered, disclosed, used, or accessed in an unauthorized manner. We limit access to Personal Data to employees, agents, and third-party service providers who have a need to know the information, and we maintain physical, electronic and procedural safeguards to protect your Personal Data
Information transmitted across public networks such as the internet cannot be made completely secure, therefore we cannot guarantee the security of information submitted on the website, Applications or digital platforms. We have put in place procedures to address any Personal Data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Information Storage and Processing
Personal Data collected on our website, or received by us from you or third parties, may be stored and processed in the US or any other country where we or our service providers maintain facilities.
Information collected may be located outside the country from which you accessed the website, and in a country that does not have the same privacy laws as your country of residence. The Personal Data you provide to us may be transmitted abroad for the purpose described in this Privacy Policy, but we will collect, process and use Personal Data only in accordance with this Privacy Policy.
Data Retention
We retain your Personal Data only for as long as is necessary to achieve the purpose of collection as set out in this Privacy Policy and in accordance with our data retention policies, unless a longer retention period is required by applicable law. After the expiration of the retention periods, we will delete, destroy or de-identify your Personal Data. If you opt out from receiving marketing communications from us, we will delete your Personal Data from our mailing lists. However, we may store your email address in a do-not-contact list to ensure that you will not receive any further marketing communication.
REGION SPECIFIC NOTICES AND DISCLOSURES
United States
We do not sell your Personal Data. This includes our partners and vendors. You may choose to opt-out of the sharing of your Personal Data with third parties for marketing purposes at any time by submitting a request in writing to the Data Privacy Manager at privacy@globusfamily.com. Please note that this opt-out does not prohibit disclosure made for non-marketing purposes.
Canada
We do not sell your Personal Data. This includes our partners and vendors. You may choose to opt-out of the sharing of your Personal Data with third parties for marketing purposes at any time by submitting a request in writing the Data Privacy Manager at privacy@globusfamily.com.
United Kingdom
You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you emailing us at: privacy@globusfamily.com
Where you opt out of receiving these marketing messages, this will not apply to Personal Data provided to, or collected by, us as a result of the purchase or provision of any services.
We have appointed a data protection officer (DPO) who is responsible for overseeing questions in relation to this Privacy Policy. If you have any questions about this Privacy Policy, please contact the Data Protection Officer at the following address.
United Kingdom Data Protection Officer
Fourth Floor
Gateway House
28 The Quadrant
Richmond Surrey TW9 1DN, United Kingdom
privacy@globusfamily.com
Australia
You may choose to opt-out of the sharing of your Personal Data to carry out direct marketing of the products, services and promotional activity. To opt out, a written request is to be sent to the Privacy Officer at privacy@globusfamily.com. We will respond to all inquiries in a timely manner in compliance with applicable law.
New Zealand
You may choose to opt-out of the sharing of your Personal Data to carry out direct marketing of the products, services and promotional activity. To opt out, a written request is to be sent to the Privacy Officer at privacy@globusfamily.com. We will respond to all inquiries in a timely manner in compliance with applicable law.
India
We do not sell your Personal Data. This includes our partners and vendors. You may choose to opt-out of the sharing of your Personal Data with third parties for marketing purposes at any time by submitting a request in writing to the Data Privacy Manager at privacy@globusfamily.com.
YOUR LEGAL RIGHTS
Depending on applicable privacy laws, you may have certain rights with respect to your Personal Data including one or more of the following:
· Right to request access to your Personal Data
· Right to update or correct your Personal Data
· Right to be informed about the collection and use of your personal data
· Right to make a complaint to the data controller
· Right to lodge a complaint with a supervisory authority
· Right to request your Personal Data be deleted, subject to legal exceptions
· Right to request a list of the specific third parties to which we have disclosed Personal Data
· Right to opt out of targeted advertising and/or the sale or sharing of Personal Data
· Right to object to processing of your Personal Data
· Right to request that we restrict the use of Personal Data
· Right to request transfer your Personal Data
· Right to withdraw Consent
· Right of grievance redressal
· Right to nominate another individual to exercise your rights on your behalf
· Right to request a pseudonym, if practical and not legally prohibited
To exercise any of these rights, or if you have any questions, please contact us either by mail at the addresses in the Who We Are section above, or by emailing the Data Privacy Manager, Data Protection Officer, or Privacy Officer, as applicable, at privacy@globusfamily.com.
No fee is usually required
You will not have to pay a fee to access your Personal Data (or to exercise any of the other rights set out above). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
What we may need from you
We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
Time limit to respond
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
CONTACT US
If you have questions or concerns regarding our privacy practices, you can contact us at privacy@globusfamily.com. If you have any complaints, we will investigate and attempt to resolve complaints regarding violations of its published Privacy Policy directly with the complainant. In the event that the complaint cannot be resolved internally, the complainant shall submit the matter to binding arbitration before the American Arbitration Association in Denver, Colorado. In the United States, you may also contact your state’s consumer protection or privacy authority and you may contact the applicable privacy regulatory authority in each of Canada (Office of the Privacy Commissioner of Canada or the regional offices in Alberta, British Columbia or Quebec), United Kingdom (Information Commissioner’s Office), Australia (Privacy Commissioner, under the OAIC), New Zealand (Privacy Commissioner) and India (Data Protection Board).