Privacy Policy

1Who this applies to

This policy applies to employees, contractors, managers, administrators and other authorised users who sign in to RTG Pulse with an account provided by Rainbow Tourism Group Limited ("RTG"). It also covers the information about other people that those users record in the platform.

Other RTG services have their own notices. This policy is about what happens inside RTG Pulse.

2Information we collect

• Account details: your name, work email, phone number, job title, role, department and business unit, and a profile photo or signature if you add one.
• Business records you enter while you work, including notes, comments, approvals and decisions.
• Information about customers, suppliers and other third parties that you record for RTG’s business, such as names and contact details.
• Files and documents that you upload or generate.
• Technical and audit information: sign-in times, IP address, browser and device details, the pages you use and the changes you make.

3How we use information

• Confirm who you are and give you the access your role allows.
• Run RTG’s operations: record work, build reports, route approvals and send you notifications.
• Keep the platform secure: detect misuse, prevent unauthorised access, investigate problems and make the service more reliable.
• Meet RTG policy, legal, regulatory and audit requirements.

4Cookies and sign-in data

RTG Pulse uses session cookies and similar authentication data to keep you signed in and to protect your account. Your browser may also store small amounts of data on your device to remember your preferences. We do not use these for advertising.

5Automated assistance

If you use automated assistance features, your questions and the information needed to answer them are processed by service providers working for RTG, and we aim to share only what is needed. Answers can contain mistakes, so check important information against its source.

6Sharing and disclosure

• Information is shared only with administrators, managers and staff who need it to do their work.
• We use service providers that help run the platform. They may handle information only to provide those services to RTG.
• We may disclose information when the law, a court order or a valid request from a regulator or auditor requires it.
• We do not sell personal information.

7Retention and security

• Information is kept for as long as needed for RTG’s operations, legal obligations and record-keeping.
• Access is limited to authorised accounts, and sign-in is required. Activity is logged so changes can be traced and reviewed.
• We use administrative and technical safeguards intended to protect information from unauthorised access, loss or misuse.
• No system can be made completely secure. If you notice something that looks wrong, report it straight away.

8Your choices and rights

• You can ask to see, correct or delete personal information about you, subject to RTG policy and legal requirements.
• If you think information in RTG Pulse is wrong, tell your manager or system administrator so it can be reviewed and fixed.
• If your employment or contract ends, or your access is withdrawn, your account may be disabled. Records may be kept where policy or law requires it.
• Other people whose information is held by RTG should contact RTG through their usual RTG contact.

9Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.

10Contact

If you have questions about this policy or need help with your information, speak to your line manager or your RTG system administrator. If RTG has a formal privacy or data-protection contact, use that contact for requests about access, correction or deletion.