CHARMTRVL Privacy Policy

This Privacy Policy applies to CHARMTRVL ("we," "us," or "our") and outlines how we collect, store, use, and/or share ("process") your information when you use our services ("Services"). This includes when you visit our website at https://www.charmtrvl.com, or any of our websites that link to this Privacy Policy, and when you engage with us in other related ways, including any sales, marketing, or events.

Reading this Privacy Policy will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please refrain from using our Services.

If you have any questions or concerns, please contact us at privacy@charmtrvl.com

1. What Information Do We Collect?

We collect personal information that you voluntarily provide to us when you register, make bookings, or contact us.

We collect personal information that you knowingly and voluntarily provide when you register on the Services, express an interest in obtaining information about us or our products and Services, participate in activities on the Services, or otherwise contact us.

The personal information we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use.

Full name
Email address
Phone number
Username and password
Billing address
Debit/credit card numbers and related payment information
Contact or authentication data, such as passenger travel document or passport details required to fulfill travel bookings
Automatically collected technical information, such as IP address, browser type, device characteristics, operating system, language preferences, referring URLs, and clickstream data

2. How Do We Process Your Information?

We process your information to provide, improve, and administer our Services, communicate with you, ensure security and fraud prevention, and comply with legal obligations.

Account creation, authentication, and management
Service delivery and order fulfillment, including bookings, ticketing requests, payments, refunds, flight changes, and related service deliveries
User support and inquiry management
Administrative communications about products, services, terms, conditions, and policies
Security monitoring and fraud prevention
Protection of vital interests, such as preventing physical harm or mitigating immediate threats

3. What Legal Bases Do We Rely On?

We only process your personal information when we believe it is necessary and we have a valid legal basis under applicable law.

If you are located in the European Union (EU) or the United Kingdom (UK), the GDPR and UK GDPR require us to explain the valid legal bases we rely on to process your personal information.

Consent: we may process your information if you have given us clear permission for a specific purpose, and you may withdraw your consent at any time.
Performance of a contract: we may process personal information when necessary to fulfill contractual obligations, including travel reservations or pre-contractual steps requested by you.
Legal obligations: we may process information where necessary to comply with laws, cooperate with regulators or law enforcement, exercise or defend legal rights, or produce evidence in litigation.
Vital interests: we may process information where necessary to protect your vital interests or those of a third party.

4. When and With Whom Do We Share Your Personal Information?

We may share personal information in specific situations and with third-party providers required to fulfill travel bookings.

Third-party travel suppliers, including airlines, GDSs, hotels, insurance providers, fulfillment partners, and related core travel vendors, where required to fulfill travel and ticketing contracts.
Business transfers, including any merger, sale of company assets, financing, acquisition, or related negotiations involving all or part of our business.

5. Do We Use Cookies and Other Tracking Technologies?

We may use cookies and similar tracking technologies to collect and store information.

We may use cookies and similar tracking technologies, such as web beacons and pixels, to access or store information and optimize your browsing experience. Specific information about how we use these technologies and how you can manage or refuse certain cookies is set out in our Cookie Policy.

6. How Long Do We Keep Your Information?

We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless otherwise required by law.

We will only keep your personal information for as long as necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law, such as tax, accounting, anti-money laundering, or other legal requirements.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it. If deletion is not immediately possible, for example because the information is stored in backup archives, we will securely store and isolate it from further processing until deletion is feasible.

7. How Do We Keep Your Information Safe?

We aim to protect personal information through organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process.

However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. Transmission of personal information to and from our Services is at your own risk, and you should only access the Services within a secure and trusted network environment.

8. Do We Collect Information From Minors?

We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 years of age or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services.

If we learn that personal information from users less than 18 years of age has been collected without verified parental consent, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any such data, please contact us at protection@charmtrvl.com.

9. What Are Your Privacy Rights?

In certain regions, you have greater access to and control over your personal information.

Depending on your jurisdiction, you may have the right to request access to, correction of, or deletion of your personal information, as well as the right to restrict or object to certain processing activities. You can exercise these rights by contacting us at privacy@charmtrvl.com. We will consider and act upon any request in accordance with applicable data protection laws.

10. Do We Make Updates to This Policy?

Yes, we will update this notice as necessary to stay compliant with relevant laws and operational changes.

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date at the top of this page and will be effective as soon as it is accessible. If we make material changes, we may notify you by prominently posting a notice or directly sending you a notification.

11. How Can You Contact Us About This Notice?

If you have questions, comments, or complaints about this Privacy Policy or our data processing practices, you may contact our Data Protection Officer (DPO), Nix, via email at data.protection@charmtrvl.com.