Privacy Policy

1. Introduction

Welcome to Traviofy ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at traviofy.com and use our tour booking and concierge services.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access our website or use our services.

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Fill out a contact or inquiry form on our website
• Communicate with us via WhatsApp, email, or phone
• Make a booking or payment through our platform
• Subscribe to our newsletter or blog updates
• Participate in surveys or promotions

This information may include:

• Identity Data: Full name, date of birth, nationality, passport details (when required for booking)
• Contact Data: Email address, phone number, WhatsApp number, mailing address
• Financial Data: Payment card details, billing address (processed securely via Stripe)
• Travel Preferences: Destination preferences, travel dates, dietary requirements, accommodation preferences, group size
• Communication Data: Messages sent via WhatsApp, email correspondence, inquiry form submissions

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information, including:

• IP address and approximate geographic location
• Browser type and version, operating system
• Pages visited, time spent on pages, referring URLs
• Device type (desktop, mobile, tablet)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide our services: Processing tour bookings, arranging travel itineraries, communicating with tour operators on your behalf, and managing your reservations
• To process payments: Securely processing transactions through our payment provider, Stripe, and sending booking confirmations and invoices
• To communicate with you: Responding to your inquiries via WhatsApp or email, sending booking confirmations, itinerary updates, and travel reminders
• To improve our services: Analyzing usage patterns, optimizing our website, personalizing your experience, and developing new tour packages
• To send marketing communications: With your consent, sending newsletters, blog updates, promotional offers, and information about new tour packages
• To comply with legal obligations: Fulfilling legal requirements, responding to legal requests, and protecting our rights

4. Payment Processing & Stripe

All payment transactions are processed through Stripe, a PCI DSS Level 1 certified payment processor. When you make a payment:

• Your payment card details are sent directly to Stripe and are never stored on our servers
• Stripe processes your payment securely and provides us with a transaction confirmation
• An invoice is automatically generated and sent to your email address
• We retain transaction records (amount, date, booking reference) for accounting and legal purposes

For more information about how Stripe handles your data, please visit Stripe's Privacy Policy.

5. WhatsApp Communications

Our primary communication channel is WhatsApp. When you contact us via WhatsApp:

• Messages are end-to-end encrypted by WhatsApp
• We may retain conversation history for customer service purposes
• Your phone number is stored in our contact management system
• We will not share your WhatsApp number with third parties for marketing purposes
• You can opt out of WhatsApp communications at any time by messaging us "STOP"

6. Information Sharing & Disclosure

We may share your information with:

• Tour operators: To process and manage your bookings (e.g., Expat Explore, Trafalgar, Costsaver, Globus, Europamundo)
• Payment processors: Stripe, for secure payment handling
• Travel insurance providers: If you request insurance quotes through our service
• Analytics services: Anonymized data with tools like Google Analytics to improve our website
• Legal authorities: When required by law, court order, or to protect our legal rights

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

7. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience:

• Essential cookies: Required for website functionality (session management, security)
• Analytics cookies: Help us understand how visitors use our site (Google Analytics)
• Preference cookies: Remember your settings and preferences
• Marketing cookies: Used to deliver relevant advertisements (only with your consent)

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• HTTPS/SSL encryption on all website pages
• PCI DSS compliant payment processing through Stripe
• End-to-end encrypted communications via WhatsApp
• Regular security reviews and updates
• Access controls limiting who can view personal data
• Secure cloud hosting with encrypted data storage

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but will notify you promptly in the event of a data breach affecting your information.

9. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and fulfill your bookings
• Comply with legal and regulatory obligations
• Resolve disputes and enforce our agreements
• Maintain accurate business and financial records

Generally, booking records are retained for 7 years for tax and legal purposes. Marketing consent records are kept until you withdraw consent. Website analytics data is retained for 26 months.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Request transfer of your data in a machine-readable format
• Right to withdraw consent: Withdraw marketing consent at any time
• Right to object: Object to processing based on legitimate interests

To exercise any of these rights, contact us at the details provided below. We will respond within 30 days.

11. International Data Transfers

As a company operating across multiple jurisdictions with offices in Ancona, Italy and Zurich, Switzerland, your data may be transferred and processed in countries outside your country of residence. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and adequacy decisions where applicable.

12. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.

13. Third-Party Links

Our website may contain links to third-party websites, including tour operator sites, payment pages, and social media platforms. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the updated policy on our website with a new "Last updated" date. Your continued use of our services after any changes constitutes acceptance of the updated policy.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us: