Privacy Policy

At Travel Carvers, we are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner.

This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website, use our mobile application, or book travel packages through our platform. Please read this policy carefully to understand our practices regarding your personal data.

We collect information that you voluntarily provide to us when you register on the website, express an interest in obtaining information about our travel packages, or otherwise contact us.

• Personal Information: Name, email address, phone number, billing address, and payment information.
• Traveler Details: Passport information, dietary requirements, and medical conditions (only when necessary for booking specific tours).
• Automatically Collected Data: IP address, browser characteristics, device IDs, operating system, and data about how and when you use our platform.

We process your personal information for a variety of legitimate business purposes, including:

• Booking Fulfillment: To process your travel reservations, issue tickets, and coordinate with local guides and hotels.
• Communication: To send you booking confirmations, itinerary updates, and respond to customer service inquiries.
• Marketing (with consent): To send you promotional emails about new tour packages, exclusive offers, and travel inspiration.
• Service Improvement: To analyze user trends and improve the functionality and user experience of our website.

We use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Cookies help us remember your preferences, keep you logged in, and understand how you interact with our platform so we can optimize your experience.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. However, if you disable or refuse cookies, please note that some parts of our website may become inaccessible or not function properly.

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. This includes using SSL/TLS encryption for data transmission and secure server infrastructure for storage.

However, please also remember that we cannot guarantee that the internet itself is 100% secure. Although we will do our best to protect your personal information, transmission of personal information to and from our website is at your own risk.

To provide our services efficiently, we share certain information with trusted third-party service providers. We only share the minimum data necessary for these services to function:

• Supabase: We use Supabase as our primary backend infrastructure and database provider. Your user credentials, booking history, and profile data are securely stored in Supabase databases, which comply with strict international security standards.
• Mailgun: We use Mailgun to deliver transactional emails relating to your enquiries (such as confirmations and follow-ups about the trips you ask us about). We do not send marketing newsletters. Your email address and name are shared with Mailgun solely for the purpose of delivering these emails.
• Travel Partners: Airlines, hotels, and local tour operators require your details to fulfill your actual travel itinerary.

Depending on your location, you may have specific rights regarding your personal data:

• The right to request access to the data we have collected about you.
• The right to request that we correct any inaccurate or incomplete personal information.
• The right to request the deletion of your personal data ("Right to be Forgotten").
• The right to ask us to stop contacting you at any time by replying to any of our emails or contacting us directly.

Our services are not directed to, and we do not knowingly collect personal information from, children under the age of 13 (or 18 in certain jurisdictions) without verifiable parental consent. If we become aware that we have collected personal information from a minor without such consent, we will take immediate steps to delete that information from our servers.

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.

If you have questions or comments about this policy, or wish to exercise your data rights, you may contact our Data Protection Officer at: