Privacy Policy

• Data controller: Zain Travel LLC, identification code 402158972, Georgia, Tbilisi, Didube district, Uznadze str. N 111, building N2, apt. N11.
• Privacy contact: info@zain4travel.com or WhatsApp +995 511 149 000. Start your message with "Privacy" so it reaches the responsible person directly.

Data you give us:

• When requesting a quote or booking: name, phone number, email, country of residence, travel dates and arrival/departure airports, number of travelers and children's ages, hotel, room and tour preferences, budget, and any special requests you mention.
• When a booking is confirmed: passport copies or details and dates of birth when a hotel, insurer, carrier or visa procedure requires them, and any health or dietary information you choose to share so we can organize the trip.
• When paying: the amount, order number, email and booking description. Your card details never reach us: they are entered directly on the Flitt payment page, and we keep only the transaction notice and the last four digits of the card as sent by the gateway.
• When submitting a review: name, email, country, rating and comment. The name, country and comment are published after our review; your email is never published.
• When contacting us on WhatsApp, Telegram or email: the content of the messages and your number or handle.

Data collected automatically when you browse:

• IP address, browser and device type, language, requested pages and their time, in the hosting provider's server logs and in our abuse-protection counters (rate limiting). These records are kept for short periods and for security only.
• Aggregated, non-personal statistics: views per offer, clicks on the WhatsApp button and PDF downloads. They are not linked to your identity.
• Essential cookies always, and measurement tools (Google Analytics, Meta Pixel, TikTok Pixel) only if you accept them in the cookie banner. They show us which pages and offers interest visitors and measure our ads; you can decline or change your choice at any time from the "Cookie settings" link in the footer (see section 9).

We never sell or rent your data. We share it only to the extent necessary with:

• Travel suppliers at your destination: hotels and apartments, transport companies and drivers, guides, tour and activity operators, and insurers. Each receives only the data for its own booking (usually names, dates, number of people and a contact number).
• Payment processing: the Flitt gateway (Georgia) for card and wallet payments, and TBC Bank for bank transfers. Each has its own privacy policy.
• Technology providers hosting our systems: Vercel (website hosting and server logs), MongoDB Atlas (database) and EmailJS (delivery of "Design your trip" requests to our mailbox). They work on our behalf under contracts that oblige them to protect the data and not use it for their own purposes.
• Messaging platforms you choose to use: when you tap the WhatsApp or Telegram button you move to that app, and its policy (Meta or Telegram) applies to what you send there.
• External resources loaded on our pages: map tiles from CARTO and OpenStreetMap on the interactive map page, and some images from Unsplash and news sources. When they load, these providers see your IP address and browser type, as on any site showing their content.
• Authorities when the law requires it, or to protect our rights or the safety of travelers.

• To deliver your trip, booking data is sent to suppliers in the destination country (such as Azerbaijan, Malaysia or Thailand). This is necessary to perform our contract with you.
• Our technology providers may host data on servers in the European Union or the United States. We choose providers that follow recognized protection standards and rely on appropriate contractual safeguards.

At any time and free of charge you may:

• Access the data we hold about you and receive a copy.
• Rectify inaccurate or incomplete data.
• Erase your data when it is no longer needed or you withdraw consent, subject to what the law requires us to keep.
• Restrict or object to processing where the law allows, and object to marketing messages at any time.
• Receive your data in a common machine-readable format (portability).
• Withdraw consent without affecting processing carried out before the withdrawal.
• Lodge a complaint with the Personal Data Protection Service of Georgia (personaldata.ge) or the competent authority in your country of residence.

• Everything you enter on the website travels over an encrypted connection (HTTPS), and the database is hosted by a provider offering encryption and backups.
• Access to the admin panel is limited to our team with a password and temporary sessions; login attempts are logged and repeated attempts are blocked.
• We store no payment card data and limit the number of requests one device can send, to reduce abuse.
• We take regular backups. Still, no system is 100% secure; if a breach affecting your data occurs we will notify you and the authorities as the law requires.

Essential (no consent needed):

Measurement and marketing (only after you tap "Accept all"):

• If you choose "Essential only", the measurement tools are never loaded. You can change your choice at any time from the "Cookie settings" link in the footer.
• The Flitt payment page uses its own cookies under its own policy.
• You can also delete or block cookies in your browser settings; the website keeps working and will ask for your language again.

Our services are aimed at adults. We collect children's data only from their guardian and only as needed for the booking (names, ages and dates of birth); it is deleted together with the booking data.

• Every review is checked before publication and is published with the name you entered, your country and the date. You may ask us to change your name or remove the review at any time.
• Trip photos and videos are published only with the consent of the people shown, and you may ask us to remove any photo you appear in.

We may update this policy when our services or the law change and will publish the new version here with its update date. For material changes we inform customers with active bookings. Questions: info@zain4travel.com.