1. Data Controller

ClickXplor 
Email: info@clickxplor.com
Data Protection Officer (DPO): dpo@clickxplor.com

2. Scope

This Policy applies to:

• Travel searches, comparisons, and bookings
• User accounts and customer support
• Payments, confirmations, and itinerary management
• Marketing communications (where consented)
• Cookies and similar technologies

3. Personal Data We Collect

A. Data You Provide

• Identity & Contact: name, email, phone number, address
• Booking Details: travel dates, destinations, passenger details
• Travel Documents: passport/ID details (where required)
• Payment Data: billing details (processed securely by payment providers)
• Preferences: seating, meals, accessibility needs
• Communications: messages with support, feedback

If you provide data about other travellers, you confirm you have authority to do so.

B. Automatically Collected Data

• IP address, approximate location
• Device, browser, OS, language
• Usage data (pages viewed, searches, clicks)
• Cookies and similar technologies (see Cookie Policy)

C. Data from Third Parties

• Airlines, hotels, tour operators, OTAs
• Global Distribution Systems (GDS)
• Payment processors, fraud-prevention providers
• Analytics and advertising partners (where consented)

4. Legal Bases for Processing (Art. 6 GDPR)

We process Personal Data on one or more of the following bases:

• Contractual necessity (Art. 6(1)(b)): to search, book, ticket, modify, or refund travel.
• Legal obligation (Art. 6(1)(c)): accounting, tax, travel/aviation requirements.
• Legitimate interests (Art. 6(1)(f)): service improvement, security, fraud prevention, customer communications about existing bookings (balanced against your rights).
• Consent (Art. 6(1)(a)): marketing, optional analytics, non‑essential cookies (withdrawable anytime).

5. Purposes of Processing

We use Personal Data to:

• Provide and manage travel bookings
• Issue tickets, confirmations, invoices
• Process payments and refunds
• Deliver customer support
• Improve website performance and features
• Prevent fraud and misuse
• Send marketing communications (with consent)
• Meet legal and regulatory obligations

We do not make decisions producing legal or similarly significant effects solely by automated means.

6. Sharing Personal Data

A. Travel Service Providers

Shared as necessary with airlines, hotels, tour operators, transport and insurance providers to fulfill your booking.

B. Service Providers (Processors)

Hosting, payments, analytics, CRM, email delivery—under GDPR‑compliant data processing agreements.

C. Legal & Safety

Disclosures required by law, court order, or to protect users and the Service.

D. Business Transfers

In mergers or acquisitions, data may transfer to a successor under continued GDPR safeguards.

We do not sell Personal Data.

7. International Data Transfers

Travel bookings may require transfers outside the EEA/UK. We use appropriate safeguards such as:

• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Secure industry systems (e.g., GDS)

You may request details of safeguards.

8. Data Retention

We retain data only as necessary:

• Booking/transaction records: typically 6–7 years (legal/accounting)
• Account data: while active
• Marketing data: until consent is withdrawn
• Travel document copies: deleted after travel completion unless legally required

Data may be anonymized for analytics.

9. Security Measures

We apply technical and organizational measures including encryption, access controls, secure payment gateways, monitoring, and staff confidentiality training.

10. Your GDPR Rights

You have the right to:

• Access (Art. 15)
• Rectification (Art. 16)
• Erasure (Art. 17)
• Restriction (Art. 18)
• Portability (Art. 20)
• Objection (Art. 21), including to direct marketing
• Withdraw consent at any time
• Lodge a complaint with your Data Protection Authority

Exercise rights via privacy@clickxplor.com.

11. Marketing

We send marketing communications only with your consent. You can unsubscribe at any time via email links or by contacting us.

12. Cookies

We use cookies for essential functionality, analytics, and marketing (with consent). See our Cookie Policy for details and controls.

13. Children

Our Service is not intended for children under 16. We do not knowingly process children’s data without verified parental consent.

14. Updates

We may update this Policy to reflect changes in services, technology, or law. The latest version will always be available on our website.

15. Contact

ClickXplor Privacy Team
Email: privacy@clickxplor.com