Privacy Policy

1. Scope

This policy explains how Kridiya Travel and Tourism FZ-LLC ("Kridiya Travel", "we", "us") handles personal information when you browse this website, submit an enquiry, create an account, make a booking or contact us about a travel service.

It applies to information received through this website, email, telephone, WhatsApp and our customer account area.

2. Information we collect

Contact and enquiry information

Your name, email address, phone or WhatsApp number, destination, travel dates, traveller count, preferences, budget and the contents of your message.

Booking and traveller information

Passenger names, dates of birth, nationality, passport details, visa information, itinerary details, booking references and travel documents where these are required for the service you request.

Account and communication information

Your account email, profile details, saved travellers, enquiry and booking history, support requests, communication preferences and records of messages exchanged with us.

Website and campaign information

Pages viewed, referral and landing pages, campaign parameters, advertising click identifiers, browser and device information, IP address and actions such as submitting an enquiry. Optional analytics and advertising measurement is controlled by the privacy choices described below.

3. How we receive information

We receive information directly from you, from a person arranging travel on your behalf, from the travel or payment provider involved in your booking, and automatically from this website where you have allowed optional measurement.

If you provide information about another traveller, you must have their permission to give it to us and to use it for the requested travel service.

4. How we use information

• Respond to enquiries and prepare requested travel options or quotations.
• Create, confirm and manage bookings, payments, invoices and travel documents.
• Contact you about changes, documents, deadlines, support requests or service updates.
• Maintain customer accounts and protect them from unauthorised access or misuse.
• Keep records needed for accounting, disputes, fraud prevention and legal or regulatory obligations.
• Send promotional email only where you have chosen to receive it.
• Measure website use and advertising performance where you have allowed it.

We use this information to respond to requests you make, provide a service you book, meet applicable legal obligations, and carry out optional activities you have chosen.

5. Cookies, similar technologies and privacy choices

Essential browser storage keeps your language, cookie choice, sign-in session and requested account or enquiry features working. It is used only for those purposes. Google Fonts supplies the website typefaces, Unsplash supplies travel photographs on some pages, and jsDelivr supplies the Supabase browser library when an account or enquiry feature needs it. These providers receive ordinary connection information such as an IP address, browser type and request time. FormSubmit receives the form details you choose to send so we can receive enquiry and newsletter email notifications.

Optional analytics and advertising technologies are off until you choose. The first notice gives equally available choices to reject optional technologies, choose each category or accept all. Refusing optional technologies does not stop you from browsing, signing in, submitting an enquiry or receiving customer service.

• Google Analytics 4 — analytics: after you allow analytics, Google receives page URLs, referral and campaign details, browser and device information, approximate location and interaction events. GA4 may set _ga and _ga_<container-id> cookies for up to two years. Advertising storage, ad personalisation and ad user data remain disabled.
• Meta Pixel and Conversions API — advertising measurement: after you allow advertising measurement, Meta may receive public-page visits, campaign click identifiers, browser or device information and limited enquiry event data. We do not send enquiry text, names, email addresses, phone numbers, passport details or payment details in these measurement events.

Your browser stores the consent policy version, time and category choices for up to six months. We ask again sooner if the purposes or providers change. Global Privacy Control is honoured by keeping advertising measurement off while that signal is enabled. Where US state privacy law applies, this also acts as an opt-out of advertising sharing or targeted advertising on this website. Kridiya Travel does not sell personal information.

You can withdraw or change your choice at any time through Privacy choices in the site footer. Withdrawal stops new optional measurement, removes accessible GA4 and Meta measurement cookies from this site and reloads the page with optional technologies off. You can also clear site data in your browser. Provider processing already completed before withdrawal may remain subject to the provider's retention rules and applicable law. See the Google Privacy Policy and Meta Privacy Policy.

Open privacy choices

6. Who receives information

We disclose information only when it is needed for the requested service, our business operations or a legal requirement. Recipients may include:

• Airlines, hotels, cruise lines, tour and transport operators.
• Visa, immigration and insurance service providers and relevant authorities.
• Payment processors, banks and fraud-prevention providers.
• Providers that support website hosting, account access, email, document storage, forms and customer communication.
• Auditors, legal advisers, regulators, courts or law-enforcement authorities where required.

These recipients may process information under their own privacy policies where they independently determine how it is used.

7. International processing

Travel bookings may require information to be processed outside the UAE, including in the country of departure, transit or destination. Our website and account providers may also process information in other countries. Contact us if you need details about how your information is handled for a particular service.

8. Payments

Card payments are handled by the payment provider shown at checkout or in the payment request. Kridiya Travel does not store full card numbers, CVV, PIN or OTP values. We may retain the payment reference, status, amount, date, card brand and last four digits where supplied by the payment provider.

9. Retention

We keep information for as long as it is needed to answer the enquiry, provide the booked service, support the customer account, keep required financial or booking records, resolve disputes and meet legal or regulatory obligations. Retention periods vary by record type and service.

Closing an account does not automatically remove records that we must retain for an active booking, payment, dispute or legal obligation.

10. Security

We use access controls, encrypted website connections, restricted document access and service-provider controls intended to protect personal information. Access is limited to people who need the information for their work.

Do not send card numbers, CVV, PIN, OTP values or account passwords by email, WhatsApp or a website message form.

11. Marketing messages

Promotional email is optional. You can withdraw your choice through the unsubscribe page or by contacting us. Service messages about an enquiry, booking, payment, document or support request may still be sent because they relate to a service you requested.

12. Your choices and rights

Subject to applicable law, you may ask us to provide access to your personal information, correct inaccurate information, delete information, restrict or object to certain processing, or withdraw consent. You may also change your website measurement choice and promotional email preference at any time.

We may ask for information to verify your identity before completing a request. A request may be limited where records must be kept for a booking, payment, dispute, fraud prevention or legal obligation.

13. Children travelling

An adult parent, guardian or authorised traveller must manage bookings and accounts for children. We collect a child's traveller information only where it is needed for the requested booking, visa, insurance or related travel service.

14. Policy changes

We may revise this policy when our services, data handling or legal obligations change. The date at the top identifies the current version.

15. Contact us about privacy

Email contact@kridiyatravel.com or write through the contact form. Include enough information for us to identify your account or enquiry and understand the request. Do not include passwords, OTP values or full card details.