Information We Collect
We collect information you voluntarily provide when contacting us, submitting a booking enquiry, or writing a review. This includes:
- Full name, email address, and contact number
- Travel preferences, tour interest, and travel dates
- Message content and any attachments you send
- Photos voluntarily submitted with reviews (stored securely)
- IP address, browser type, and device information (via server logs)
We do not collect payment card details directly — all payments are processed through secure third-party providers.
How We Use Your Information
Information collected is used solely for legitimate travel business purposes:
- Responding to your enquiries and booking requests
- Planning and arranging personalised tour itineraries
- Sending relevant travel information, confirmations, and updates
- Displaying approved reviews on our public website (name only, no email)
- Improving our website experience and services
- Complying with applicable legal obligations
Data Sharing
We only share your data with trusted parties strictly necessary to fulfil your travel arrangements:
- Local partners & suppliers — hotels, transport providers, guides — only receive the details needed to execute your tour
- Legal authorities — if required by law, court order, or to protect the safety of individuals
- Service providers — web hosting, email services — bound by confidentiality agreements
All third parties we work with are required to handle your data in compliance with applicable data protection laws.
Cookies
Our website uses minimal, essential cookies to ensure core functionality:
- Session cookies — maintain your browsing session and form state
- CSRF tokens — protect form submissions from cross-site request forgery attacks
- Language preference — remembers your selected language via Google Translate
We do not use tracking cookies, advertising cookies, or third-party analytics that monitor your behaviour across other websites. You may disable cookies in your browser settings, though some features may not function correctly.
Data Security
We implement industry-standard measures to protect your information:
- HTTPS/SSL encryption on all pages and data transfers
- Secure server infrastructure with access controls
- Regular security reviews and software updates
- Uploaded images stored in access-controlled server directories
- Admin panel protected with authentication
Your Rights
You have the following rights regarding your personal data:
- Access — request a copy of the data we hold about you
- Rectification — ask us to correct any inaccurate information
- Erasure — request deletion of your personal data (subject to legal obligations)
- Portability — receive your data in a structured, machine-readable format
- Objection — opt out of receiving marketing communications at any time
- Review removal — request removal of a review you submitted
To exercise any of these rights, please contact us using the details below. We will respond within 30 days.
Data Retention
We retain your personal data only for as long as necessary:
- Enquiry and contact data: up to 2 years after last contact
- Booking records: up to 7 years for financial and legal compliance
- Approved reviews: retained until you request removal
- Server logs: automatically purged after 90 days
After the applicable retention period, data is securely deleted or anonymised.
Third-Party Links
Our website may contain links to external websites such as partner hotels, attractions, or social media platforms. We are not responsible for the privacy practices or content of those sites. We recommend you review the privacy policies of any external sites you visit.
Children's Privacy
Our services are not directed at children under the age of 16. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us immediately and we will promptly delete it.
Contact Us
For any privacy-related queries, data requests, or concerns, please reach out to our team:
hello@zenoratravels.com
Response Time
Within 30 business days
This policy may be updated from time to time. Material changes will be communicated via our website. Continued use of our services constitutes acceptance of the updated policy.