One of the most important things for us is to protect your personal data. In this order we collect information rightfully, acting with integrity, confidentiality, and with great certainty.
The purpose of this statement is to inform you about the procedures we have approached to protect your personal data successfully.
This policy refers to our website, text messages, emails, and social account.
By using one of our platforms, you hereby agree to our Terms and Conditions.
We do not intend to knowingly collect information from children.
Personal Information we collect and use:
“Personal information” is data that identifies, relates to, describes, can be used to contact, or could reasonably be linked directly or indirectly to you. For purposes of this Policy, there is no meaningful distinction between the terms “personal information” and “personal data.”
We may collect, use and transfer the following types of personal data:
- Identity Data, which includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth, photographs, national insurance number, job title, vehicle registration number(s), age, and gender;
- Contact Data, which includes billing address, delivery address, personal email, and phone numbers;
- Booking data (such as, for each traveler, the traveler’s name, frequent flyer details, passport number, redress control number, country of citizenship, booking reference number, and itinerary, which may include name of airline or carrier, hotel accommodation and/or vessel, port of destination, port of arrival, date and time of departure and/or check-in, date and time of arrival and/or check-out, meal preferences, luggage information, and layover information);
- Financial Data, which includes bank account and payment card details;
- Transaction Data, which includes details about payments and donations from you and details of products and services you have purchased from us and activities you have participated in;
- Technical Data, which includes the data that can be automatically collected from any device used to access the Site or our Services. Such information may include, but is not limited to: your device internet protocol (IP) address, your login data, browser type and version, time zone offset settings and geolocation, CPU, screen resolution, device memory, system languages, installed fonts, draw canvas logic, browser plug-in types and versions, operating system and platform, full ‘Uniform Resource Locators’, clickstream to, through and from the Site (including date and time) and other technology on the devices you use to access the Site;
- Profile Data, which includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses, products you viewed or searched for; page response times; download errors; length of visits to certain pages; page interaction information (such as scrolling, clicks, mouse-overs and methods used to browse away from the page);
- Usage Data, which includes information about how you use the Site, products, and services;
- Marketing and Communications Data, which includes your preferences in receiving marketing from us and Our third parties and your communication preferences; and
- Information that can include search history, IP address, screen resolution, browser used, operating system and settings, access times, and referring URL. If you are using a mobile device, we may also collect data that identifies your device, your settings, and your location;
- Customer support information: when you contact our customer support services we will collect any inquires, complaint, or other information that you may submit to our support team.
- Any other information you provide us.
In fact, we do not collect any category of special information.
Only after you guarantee that all the information about your personal data is truthful and that it is your responsibility to provide us, we assume the responsibility to collect, process, and maintain it safely.
The provision of the above personal data, where requested, is necessary for the adequate performance of the contract between you and us and to allow us to comply with our legal obligations except when we rely on consent as a legitimate basis for processing and or our legitimate interest. Without it, we may not be able to provide you with all the requested services. It is important that all the personal data you give us is correct and accurate. This includes, by way of example only, ensuring that we have your correct contact (including email) details at all times.
In case we have to collect your personal data according to law or under the terms and conditions of a contract with you (customer), and you don’t provide the requested data, we can’t finish the contract that we have or are trying to enter into with you. Therefore, we might need to cancel a service. However, in these types of situations, we will keep you informed.
At this time, the methods we and our third-party service provider use to collect your personal data are:
The personal information you give to us: We collect your personal information directly from you.
For example, you provide us with your personal information when you register or book travel, contact our customer support.
From Other Sources: We may receive your Personal Information from other sources, such as public databases, joint marketing partners, social media platforms (including from people with whom you are friends or otherwise connected), and other third parties, to the extent permitted by applicable law.
Automatic Information: We automatically collect certain information about your computer when you visit our website. For example, we record your IP address, Web browser software (such as Firefox, Safari, or Internet Explorer), and referring website. We also may gather information about your online activity, such as trips or activities viewed and bookings made. We collect this automatic information to customize your user experience and protect against fraud. See also Cookies and other technologies below.
In order to help you find the nearest hotel, train station, airport, or send some important messages to you, our system can use the attributes and settings of your device that allow us to determine physical location.
You can opt-out of this communication at any time by contacting us via phone or email.
We may use your Personal Information for the following purposes:
- To create and maintain the contractual relation established for the provision of the product and/or service requested by you, which includes to complete and fulfill your booking or purchase, including to process your payment, communicate with you regarding your booking or purchase, and provide you with related customer service. Information concerning our provision of the Service and/or to provide you with any clarification or assistance may be sent to you via email, phone, SMS, recorded calls or other similar technologies.
- To authenticate your account credentials and identify you, as necessary to log you in to the Services and ensure the security of your account.
- To communicate with you about your account or use of our Services and/or functionality (e.g.: to send administrative information to you, such as information regarding the Services and changes to our terms, conditions, and policies); respond to your inquiries and fulfill your requests, such as to send you newsletters, or follow up on, your comments and questions; and otherwise provide customer service.
- To record or monitor calls to and from our Customer Support Team for contractual reasons, quality control purposes, analytics, for staff training and/or to protect us in the event of a legal dispute.
- To send you marketing communications, that we believe may be of interest to you, via email, phone, mail, SMS, or other equivalent electronic communication regarding products and services similar to those already purchased by you and offered on our Website.
- to permit you to participate on message boards, chat, profile pages and other services to which you are able to post information and materials (including our Social Media Pages). Please note that any information you post or disclose through these services will become public information, and may be available to visitors to the Website and to the general public.
- To provide services and information to travel partners, such as providing user feedback and usage details.
- For our business purposes, such as data analysis, market research, audits, developing new products, fraud monitoring and prevention, to protect against, investigate, and deter fraudulent, unauthorized, or illegal activity.
- To comply with our policies, procedures and legal obligations, including complying with law enforcement or government authority requests, addressing litigation-related issues, and exercising rights or obligations conferred by law.
- As otherwise consented to by you and as required or permitted by applicable law. If you give your consent to any further use of personal information, you can withdraw that consent at any time by contacting us using the details set out below.
Consistent with the above purposes and as permitted by applicable law, we may communicate with you via electronic messages, including email, text message, or mobile push notification to:
- Send you information relating to our products and Services. This may include booking confirmations and updates, technical notices, updates, security alerts, support, and administrative messages.
- Send you marketing communications. In other situations, we may communicate with you about contests, offers, promotions, rewards, upcoming events, and other news about products and Services offered by us, our group companies, our travel partners, and other business partners.
In case of need to transmit your data to third parties, we will take into account the following:
- only with your consent;
- if this operation is strictly necessary to provide our services;
- in case it is necessary to send to a lawyer the information, to start the procedure for resolving the litigation;
- in case it is necessary to protect the integrity and transparency of our company;
Also, there is a possibility to share information about your personal data with our business partners. Some of these business partners may use your personal information for fraud detection found, for an email address, to detect, prevent, or otherwise address fraud, security, or technical issues. We may also share your information by asking our partner to create an application, questionnaire e.t.c, for the purpose to know the degree of your satisfaction with our services. Some of these business partners may use your personal information for online behavioral advertising purposes, or to offer you services or products that we believe you may be interested in. We may also share your information as otherwise described to you at the time of collection. We may also share anonymous aggregated usage information with partners.
To establish the necessary retention period for personal data, we examine the amount, nature, and vulnerability of the personal data, the motives for which we process your personal information, even if we can fulfill those motives through other methods and the appropriate legal, government tax, accounting or other requirements.
In general, the browser can offer the ability to control cookies. Control modes are different from browser to browser. If you use multiple browsers to access our services, you need to set the cookie disabling options for each browser, computer, or device you use. If your browser blocks cookies, your preferences may be deactivation are not effective. If you block or delete cookies or opt-out of online behavioral advertising, not all the trackings we’ve described in this policy will stop. Some features that our site operates may not be accessible because you are blocking the cookies on the device or browser that you use.
In order to provide better services, we can use Google Analytics to collect demographic and interest data about you.
In case you are using our services in the territory of Europe, we have set out below a description of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate and what is your data subjects’ rights under EEA legislation.
Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out below.
- To register you as a new customer.
Type of data:
- Performance of a contract with you.
- To process and deliver your order including:
- Manage payments, fees, and charges.
- Collect and recover money owed to us.
- Marketing and Communications
- Performance of a contract with you.
- Necessary for our legitimate interests (to recover debts due to us).
- To manage our relationship with you which will include:
- Asking you to leave a review or take a survey.
- Marketing and Communications
- Performance of a contract with you.
- Necessary to comply with a legal obligation.
- Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services).
- To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data).
Type of data:
- Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud, and in the context of a business reorganization or group restructuring exercise).
- Necessary to comply with a legal obligation.
- To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you.
Type of data:
- Marketing and Communications
- Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business, and to inform our marketing strategy).
- To use data analytics to improve our website, products/services, marketing, customer relationships, and experiences.
Type of data:
- Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business, and to inform our marketing strategy).
- To make suggestions and recommendations to you about goods or services that may be of interest to you.
Type of data:
- Marketing and Communications
- Necessary for our legitimate interests (to develop our products/services and grow our business).
- You can ask for access to your personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
- Deletion of your personal data. This gives you the right to solicit us to delete or remove personal data from our system. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below). Note, in some cases when the legislation prohibits us to comply with your request, we will not delete or erase the data, anyway, you will be notified of that.
- You can ask for the correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
- The right to object to the processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which overrides your rights and freedoms.
- Restriction of processing of your personal data. In the following cases:
- Establish the data’s accuracy.
- Suspicions of illegal use of data.
- Hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims.
- Objections to our use of your data, at the same time we will verify whether we have superior legitimate motives of data usage.
- Transfer of your personal data to you or to a third party.
Withdraw consent at any time where we are relying on consent to process your personal data.
In order to use any of the above-mentioned rights, you should contact us, and provide information to identify yourself, so we can be sure you are the entitled person to make the mentioned requests.
Information We Collect
Our Website collects information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (“personal information”). In particular, our website has collected the following categories of personal information from its consumers within the last twelve (12) months:
A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers.
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).
A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
Some personal information included in this category may overlap with other categories.
C. Protected classification characteristics under California or federal law.
Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth, and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
D. Commercial information.
Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
E. Biometric information.
Genetic, physiological, behavioral, and biological characteristics or activity patterns used to extract a template or other identifier or identifying information, such as fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.
F. Internet or other similar network activity.
Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.
G. Geolocation data.
Physical location or movements.
H. Sensory data.
Audio, electronic, visual, thermal, olfactory, or similar information.
I. Professional or employment-related information.
Current or past job history or performance evaluations.
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).
Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.
K. Inferences drawn from other personal information.
Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
L. Equipment information.
Information about your internet connection, the equipment you use to access our Website, and usage details.
Personal information does not include:
- Publicly available information from government records.
- Deidentified or aggregated consumer information.
- Information excluded from the CCPA’s scope, like:
- health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;
- personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.
Our Website obtains the categories of personal information listed above from the following categories of sources:
- Directly from you. For example, from forms you complete or products and services you purchase.
- Indirectly from you. For example, from observing your actions on our Website.
- From third-party business partners such as social media sites, ad networks, and analytics providers.
Use of Personal Information
We may use, or disclose the personal information we collect for one or more of the following business purposes:
- To fulfill or meet the reason you provided the information. For example, if you share your name and contact information to request a price quote or ask a question about our products or services, we will use that personal information to respond to your inquiry. If you provide your personal information to purchase a product or service, we will use that information to process your payment.
- To provide you with support and to respond to your inquiries, including investigating and addressing your concerns and monitoring and improving our responses.
- To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
- As described to you when collecting your personal information or as otherwise set forth in the CCPA.
- We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.
Sharing Personal Information
Our Website may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
We share your personal information with the following categories of third parties:
- Service providers.
- Data aggregators.
Disclosures of Personal Information for a Business Purpose
We engage certain trusted third parties to perform functions and provide services to us, including hosting and maintenance, error monitoring, debugging, performance monitoring, billing, customer relationship, database storage and management, and direct marketing campaigns. We may share your Personal Information with these third parties, but only to the extent necessary to perform these functions and provide such services. We also require these third parties to maintain the privacy and security of the Personal Information they process on our behalf.
In the preceding twelve (12) months, Company has disclosed the following categories of personal information for a business purpose:
Category A: Identifiers.
Category B: California Customer Records personal information categories.
Category D: Commercial information.
Category F: Internet or other similar network activity.
Category G: Geolocation data.
We disclose your personal information for a business purpose to the following categories of third parties:
- Service providers.
- Data aggregators.
In the preceding twelve (12) months, Company has not sold personal information.
Your Rights and Choices:
The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.
Access to Specific Information and Data Portability Rights
You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:
- The categories of personal information we collected about you.
- The categories of sources for the personal information we collected about you.
- Our business or commercial purpose for collecting or selling that personal information.
- The categories of third parties with whom we share that personal information.
- The specific pieces of personal information we collected about you (also called a data portability request).
If we sold or disclosed your personal information for a business purpose, two separate lists disclose:
- sales, identifying the personal information categories that each category of recipient purchased;
- disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.
Deletion Request Rights
You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.
We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:
- Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
- Debug products to identify and repair errors that impair existing intended functionality.
- Exercise free speech, ensure the right of another consumer to exercise their free speech rights or exercise another right provided for by law.
- Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement if you previously provided informed consent.
- Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
- Comply with a legal obligation.
- Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
Exercising Access, Data Portability, and Deletion Rights
To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us.
You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:
- provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative; and
- describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
Response Timing and Format
We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.
If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option.
Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Do Not Sell My Personal Information
Our Company does not sell your personal information to third parties.
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
- Deny your goods or services.
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
- Provide you with a different level or quality of goods or services.
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your personal information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt in consent, which you may revoke at any time.
California Consumer Privacy Act (CCPA)
The below companies may collect personal information when you interact with our digital property, including IP addresses, digital identifiers, information about your web browsing and app usage and how you interact with our properties and ads for a variety of purposes, such as personalization of offers or advertisements, analytics about how you engage with websites or ads and other commercial purposes.
It also needs to be mentioned that our company is not entitled and will never restrict your rights to the protection of personal data.
As a method of precaution, all the changes that will take place on our site will be announced in advance and we will post the date of the last update. Your continued use of our Website following the posting of changes constitutes your acceptance of such changes.
Last Update: December 27, 2020