1. Who we are and scope

This Policy applies to personal data we obtain through the Travynex website, enquiry forms, email, customer-service communications and while arranging travel services and bookings.

Independent suppliers such as airlines, hotels, transport providers and payment processors may apply their own privacy policies. We encourage you to review those policies when their services form part of your booking.

2. Personal data we may collect

Depending on the request, this may include:

• Identity and contact data: name, phone number, email address, nationality and country of residence where relevant.
• Travel and booking data: destination, dates, travel preferences, passenger names, dates of birth, loyalty details, and passport or travel-document details when necessary to fulfil a confirmed booking.
• Special service information: dietary, accessibility or limited health-related information that you voluntarily provide where needed for a requested travel service.
• Transaction data: booking value, invoices and payment/refund status. We do not intend to retain full payment-card details where payment is processed by an authorised third-party payment provider.
• Communications: messages, requests, complaints, feedback and other information you send us.
• Technical data: IP address, device/browser information and usage information that may be generated by the website or by measurement tools enabled in the future.

Please do not send sensitive information or identity documents unless we request them and they are necessary for a specific service.

3. How we use your data

• To respond to enquiries and prepare travel proposals and itineraries.
• To make and manage bookings, amendments, cancellations and refunds.
• To communicate with airlines, hotels, transport providers, guides, DMCs and other travel suppliers on your behalf.
• To manage corporate accounts, business travel and private groups.
• To issue invoices, maintain records, manage disputes and prevent fraud or misuse.
• To improve our services, website and customer experience.
• To send marketing communications where we have an appropriate legal basis or required consent, with an option to unsubscribe.
• To comply with legal, regulatory and binding official requirements.

4. Legal bases for processing

We process personal data where it is necessary to take steps at your request or perform a travel contract, comply with legal obligations, pursue legitimate interests that are not overridden by your rights, or where you have provided consent when consent is required. More sensitive categories of data are processed only to the extent needed for the service and where an appropriate legal basis exists.

5. Who we may share data with

We share only what is reasonably necessary to provide the service or operate our business, which may include:

• Airlines, hotels and resorts, reservation systems, DMCs, transfer providers, drivers, guides, activity operators and airport-service providers.
• Payment providers, banks and fraud-prevention service providers.
• Hosting, email, CRM, technical support and analytics providers when used.
• Professional advisers, regulators and public authorities where required by law.

We do not sell your personal data to advertisers or data brokers.

6. International data transfers

Travel arrangements may require personal data to be shared with suppliers located in other countries. When international transfers occur, we take reasonable and appropriate steps to handle the data in line with applicable data-protection requirements, taking into account the booking, destination and supplier involved.

7. Data retention

We retain personal data for as long as reasonably necessary to provide services, manage accounts and records, satisfy legal obligations, and resolve claims or disputes. Retention periods vary by record type and legal or supplier requirement. When there is no longer a legitimate need to retain data, we delete or appropriately anonymise it.

8. Data security

We use reasonable organisational and technical measures designed to protect personal data against unauthorised access, loss, misuse or unlawful disclosure. No electronic transmission or storage method is completely risk-free, so absolute security cannot be guaranteed.

9. Your data-protection rights

Subject to applicable law, you may have rights to request access to, correction or updating of your data; request deletion in certain circumstances; restrict or object to certain processing; obtain or transfer data where applicable; and withdraw consent at any time where processing relies on consent.

To submit a request, email hello@travynex.ae with the subject Privacy Request. We may need to verify your identity before acting on a request.

10. Cookies and local storage

The website may use essential browser storage, such as remembering your language preference. If we introduce non-essential analytics or marketing cookies in the future, we will update the relevant notice and provide consent or management choices where required by law.

11. Children and minors

The website and direct booking enquiries are intended for adults. We may process a child’s or minor’s personal data as part of a family booking when it is provided by a parent or guardian and is necessary for the booking or travel requirements. We do not ask children to provide personal data to us directly.

12. Third-party links and services

Our website may link to supplier websites or other external services relevant to a booking. We do not control the privacy practices of those parties, and your use of their services is governed by their own policies and terms.

13. Changes to this Policy

We may update this Policy to reflect changes in our services, technologies or legal requirements. The updated version will be posted on this page and the “Last updated” date will be revised.

14. Privacy contact