Privacy Policy

At Givifay Travel Agency ("Givifay," "we," "us," or "our"), accessible from givifay.com, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and store your information when you visit our website or use our travel services.

By using our website and services, you consent to the practices described in this Privacy Policy. We encourage you to read this document carefully to understand our approach to processing your personal information.

1. Information We Collect

1.1. Personal Information

We may collect the following types of personal information:

• Identity Information: Full name, date of birth, gender, nationality, and passport details (when required for travel arrangements).
• Contact Information: Email address, phone number, billing address, and mailing address.
• Payment Information: Credit card details, bank account information, and transaction records.
• Travel Preferences: Information about your travel plans, preferences, dietary requirements, and special assistance needs.
• Account Information: Login credentials, account settings, and user profile details if you create an account on our website.
• Communications: Records of your correspondence with us, including emails, chat messages, and phone calls.

1.2. Automatically Collected Information

When you visit our website, we automatically collect certain information, including:

• Technical Data: IP address, browser type and version, operating system, device information, and time zone setting.
• Usage Data: Pages visited, time spent on pages, links clicked, and browsing patterns.
• Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar tracking technologies.

2. How We Use Your Information

We use your personal information for the following purposes:

• Service Provision: To process and fulfill your travel bookings, provide customer support, and manage your account.
• Communication: To respond to your inquiries, send travel confirmations, updates, and alerts about your bookings.
• Improvement: To analyze usage patterns, develop new features, and enhance our website and services.
• Marketing: To send promotional communications about our offers, services, and news, if you have opted in to receive such communications.
• Legal Compliance: To comply with legal obligations, including immigration requirements for international travel.
• Security: To detect and prevent fraud, unauthorized access, and other potentially illegal activities.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill our contractual obligations to you when you book travel services.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, marketing, and improving our services.
• Consent: Processing based on your specific consent, such as for marketing communications or cookies.
• Legal Obligation: Processing necessary to comply with legal requirements, such as tax regulations or border control requirements.

4. Data Sharing and Disclosure

We may share your personal information with the following categories of recipients:

• Service Providers: Airlines, hotels, car rental companies, tour operators, and other travel service providers necessary to complete your bookings.
• Payment Processors: Third-party payment service providers who process your transactions.
• Business Partners: Trusted partners who assist us in providing our services or marketing activities.
• Legal Authorities: Government agencies, regulatory bodies, or other third parties when required by law or to protect our rights and interests.

We do not sell your personal information to third parties. Any third-party service providers we use are bound by contractual obligations to keep your personal information confidential and secure.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• Encryption of sensitive data
• Regular security assessments
• Access controls and authentication procedures
• Staff training on data protection
• Secure network architecture

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

6. Your Rights

Under applicable data protection laws, including the GDPR, you have the following rights:

• Access: Request access to your personal information.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal information in certain circumstances.
• Restriction: Request restriction of processing of your personal information.
• Data Portability: Request transfer of your personal information to another service provider.
• Objection: Object to processing of your personal information, particularly for direct marketing.
• Withdraw Consent: Withdraw consent at any time where we rely on consent to process your personal information.

To exercise any of these rights, please contact us using the contact information provided at the end of this Privacy Policy. We will respond to your request within one month, as required by applicable law.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. The criteria used to determine our retention periods include:

• The duration of our ongoing relationship with you
• Legal obligations to retain data for certain periods
• Relevant statutes of limitations
• Potential disputes or legal claims

When personal information is no longer necessary, we will securely delete or anonymize it.

8. International Data Transfers

As a travel agency, we may transfer your personal information to countries outside your country of residence to facilitate your travel arrangements. When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place through standard contractual clauses, adequacy decisions, or other legally approved mechanisms.

9. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated Privacy Policy on our website with a new effective date. We encourage you to review this Privacy Policy periodically.

11. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and personalize content. You can control cookies through your browser settings, but disabling certain cookies may limit your ability to use some features of our website.