Legal
Last updated 7 September 2026.
Before this page goes live: a business address is still to be decided, and the effective date confirmed. Nothing else on this page is outstanding.
Naylor & Co. is the trading name of Jessica Naylor, an independent travel consultant. All bookings are made through Colletts Travel Limited and are arranged under their licence, with Colletts Travel Limited acting as the licence holder.
For the purposes of the UK General Data Protection Regulation and the Data Protection Act 2018, Jessica Naylor is the data controller for personal data collected through naylorandco.com and through direct correspondence with clients and prospective clients.
Information Commissioner's Office registration: C1941810.
Contact: jessica@naylorandco.com.
What personal data the practice collects, how it is used, how long it is kept, who it is shared with, and the rights you have. It covers data collected through this website, by email, by telephone, by WhatsApp, and through any other channel by which you contact the practice.
Only what is needed to design and book travel for you, answer your enquiries, and meet accounting and regulatory obligations.
Access is restricted to Jessica Naylor and, where necessary to deliver a booking, to staff at Colletts Travel and Global Travel Collection under contract terms equivalent to UK GDPR processor obligations.
Your data is never sold, and never shared with third-party marketers or advertisers.
Some suppliers and platforms operate outside the UK and EEA. Where data is shared with parties in countries without a UK adequacy decision, the transfer relies on the appropriate safeguards under UK GDPR, typically the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
Under UK GDPR you may ask for access to the data held about you, ask for it to be corrected, ask for it to be deleted where no legal obligation requires it to be kept, restrict or object to certain processing, receive it in a portable format, and withdraw consent where consent is the basis. You may also complain to the Information Commissioner's Office at ico.org.uk.
To exercise any of these, write to jessica@naylorandco.com. A response follows within one calendar month.
This website sets no cookies. On these public pages there is no analytics, no advertising pixel, no tracking of any kind, and no third-party script. Typefaces are served from this site rather than from an external font service, so visiting these pages does not transmit your details to anyone else.
The enquiry form does not send your details to a third-party form service. When you submit it, they are sent to this site and held by Cloudflare, which hosts it and acts as the practice's processor. They are deleted automatically one year later, unless the enquiry becomes a booking, in which case the records described above apply instead. If you would rather not use the form, the email address on the contact page reaches the same person.
If you have been sent a link to a proposal, that page is not part of the public website. It is not indexed by search engines, and it is reached only by the link you were sent.
Two things on that page are recorded, and only for the person who wrote it. First, that the proposal was opened: the date it was first opened, the date it was last opened, and how many times. Second, if you use the journey decisions form, which options you chose and anything you typed into the note, so they can be read before we speak rather than repeated during the call.
Nothing else is recorded. Not your IP address, not your device or browser, not your location, and not where you arrived from. All of it is available and none of it is kept. These records are held by Cloudflare and deleted automatically after a year.
This policy may be updated. Material changes will be marked at the top of this page and, for clients, sent by email.