Privacy Policy
Introduction
This Privacy Policy explains how personal information is collected, used, stored, shared and protected when users visit this website, create an account, search for travel services, make a booking, contact support, subscribe to communications, or otherwise use the services available through this website.
The website may provide access to hotels, apartments, flights, tours, transfers, car services and other travel-related products supplied by third-party providers. In order to process requests and reservations, certain personal information must be collected and shared with the relevant service providers, payment processors and technical partners.
By using this website, the user confirms that they have read and understood this Privacy Policy. If the user does not agree with this Privacy Policy, they should not use the website or submit personal information through it.
This Privacy Policy is intended for a travel booking website and should be reviewed by a qualified legal professional before publication, especially if the website operates in jurisdictions with specific privacy laws such as GDPR, UK GDPR, CCPA/CPRA or similar regulations.
Information We Collect
The type of information collected depends on how the user interacts with the website and which travel services are requested or booked.
- Account information: name, username, password, profile preferences, saved travelers, saved addresses and account settings.
- Contact information: email address, phone number, country, city, billing address and other contact details submitted by the user.
- Booking information: destination, dates, number of guests or passengers, room type, flight details, tour details, transfer details, special requests, booking status and reservation history.
- Traveler information: guest or passenger names, age category, nationality, identification details, passport details, travel document details, loyalty numbers or other details required by hotels, airlines, tour operators, transfer providers or authorities.
- Payment information: payment method, transaction details, billing information and fraud prevention data. Full card details may be processed directly by payment providers and may not be stored on this website.
- Communication information: messages, support requests, reviews, feedback, survey responses and records of communications related to bookings or website use.
- Technical information: IP address, device type, browser type, operating system, language settings, pages viewed, referral URLs, session data, approximate location and cookies or similar technologies.
Users are responsible for ensuring that information submitted for themselves or for other travelers is accurate, complete and provided with proper authority from those travelers.
How We Use Personal Information
Personal information is used only where there is a valid reason to do so, including to provide the requested service, manage bookings, improve website performance, protect users and comply with legal obligations.
- To create and manage user accounts, profiles, saved travelers and preferences.
- To search, compare, reserve, confirm, change or cancel hotels, flights, tours, transfers and other travel services.
- To send booking confirmations, service messages, payment notices, cancellation notices, schedule updates and important travel-related alerts.
- To process payments, refunds, deposits, pre-authorizations, invoices, chargebacks and fraud checks.
- To communicate with users about support requests, complaints, disputes, reviews and service updates.
- To personalize search results, recommendations, prices, language, currency, content and user experience.
- To analyze website usage, diagnose technical issues, improve security, develop new features and measure marketing performance.
- To detect, prevent and investigate fraud, abuse, unauthorized access, policy violations, spam, phishing and other harmful activity.
- To comply with tax, accounting, regulatory, law enforcement, immigration, sanctions, aviation, accommodation or other legal requirements.
Legal Bases for Processing
Where applicable privacy laws require a legal basis for processing personal information, processing may rely on one or more of the following grounds:
- Performance of a contract: to provide the booking services requested by the user and manage related reservations.
- Consent: where the user has agreed to receive marketing, accept optional cookies, submit special category information or use optional features.
- Legitimate interests: to improve services, prevent fraud, secure the website, understand user behavior and provide customer support.
- Legal obligation: to comply with applicable laws, regulations, court orders, tax duties, accounting rules or lawful requests from authorities.
- Vital interests or public interest: in limited cases, where processing is necessary for safety, emergency assistance or legally recognized public interest reasons.
Sharing Information with Service Providers
To complete and manage bookings, personal information may be shared with third parties involved in the requested travel service.
- Hotels, property managers, accommodation providers and their channel managers.
- Airlines, global distribution systems, airport service providers and other flight-related suppliers.
- Tour operators, activity providers, guides, attraction operators and local partners.
- Taxi, transfer, chauffeur, car rental and ground transportation providers.
- Payment processors, fraud prevention tools, banks, card networks and refund processors.
- Technology providers, hosting providers, analytics providers, communication tools, customer support systems and security vendors.
- Government authorities, regulators, law enforcement agencies, courts or professional advisers where required or permitted by law.
Third-party travel providers may process personal information under their own privacy policies. Users should review the privacy information of the relevant provider when making a booking.
Cookies and Similar Technologies
This website may use cookies, pixels, local storage, SDKs and similar technologies to operate the website, remember user preferences, keep users signed in, measure performance, improve security and personalize content.
- Essential cookies: required for website operation, login, booking flow, payment security and fraud prevention.
- Preference cookies: used to remember language, currency, region, search filters and other settings.
- Analytics cookies: used to understand how users interact with the website and improve performance.
- Marketing cookies: used to measure campaigns, show relevant offers and limit repeated advertising where permitted by law.
Users may manage cookies through browser settings or available cookie preference tools. Blocking certain cookies may affect website functionality, account access or the ability to complete a booking.
Marketing Communications
Where permitted by law, users may receive promotional emails, special offers, travel inspiration, loyalty updates, surveys or similar communications. Users can unsubscribe from marketing communications at any time by using the unsubscribe option in the message or by changing account preferences where available.
Even after unsubscribing from marketing, users may still receive non-marketing messages related to bookings, payments, account security, legal notices, customer support or important service updates.
International Transfers
Because travel services may involve providers located in different countries, personal information may be transferred to, stored in or accessed from countries other than the user’s country of residence. These countries may have different data protection laws.
Where required by applicable law, appropriate safeguards may be used for international transfers, such as contractual protections, data processing agreements, adequacy mechanisms or other legally recognized transfer tools.
Data Retention
Personal information is kept only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
- Account information may be retained while the account remains active.
- Booking and transaction records may be retained for accounting, tax, fraud prevention, dispute resolution and legal compliance.
- Support communications may be retained to manage ongoing requests, improve service quality and protect legal rights.
- Technical logs may be retained for a limited period for security, troubleshooting and analytics purposes.
Security
Reasonable technical and organizational measures are used to protect personal information against unauthorized access, loss, misuse, alteration or disclosure. These measures may include encryption, access controls, secure hosting, monitoring, backups, authentication controls and fraud detection tools.
No website, payment system or transmission method is completely secure. Users should protect their account credentials, use strong passwords, avoid sharing sensitive information through unsecured channels and report suspected unauthorized account activity promptly.
User Rights
Depending on the user’s location and applicable law, users may have certain rights regarding their personal information.
- The right to access personal information held about them.
- The right to correct inaccurate or incomplete personal information.
- The right to request deletion of personal information in certain circumstances.
- The right to object to or restrict certain processing activities.
- The right to withdraw consent where processing is based on consent.
- The right to request portability of certain personal information.
- The right to opt out of certain marketing, analytics or targeted advertising activities where required by law.
- The right to lodge a complaint with a competent data protection authority where applicable.
Before fulfilling a rights request, reasonable steps may be taken to verify the user’s identity and authority to make the request. Some requests may be limited by legal obligations, fraud prevention needs, pending disputes, booking requirements or legitimate business reasons.
Children’s Privacy
This website is not intended for children to use independently. Bookings for minors should be made by a parent, guardian or authorized adult. Personal information relating to children may be processed when necessary to complete a family booking, passenger record, accommodation request, tour reservation, transfer arrangement or legal travel requirement.
If personal information about a child has been submitted without proper authority, a request may be made to delete or correct that information, subject to applicable legal and booking requirements.
Third-Party Links and Services
The website may contain links to third-party websites, maps, payment pages, travel providers, insurance providers, review platforms, social media pages or other external services. This Privacy Policy does not apply to third-party websites or services that are not controlled by this website.
Users should review the privacy policies of third-party services before submitting personal information to them.
Updates to This Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes in services, technology, legal requirements or business practices. The updated version will be posted on this page and will become effective when published, unless otherwise stated.
Users are encouraged to review this page periodically. Continued use of the website after changes are posted means the user has read and understood the updated Privacy Policy.