Privacy Policy for Tour Plaza

Effective Date: October 28, 2026

Last Updated: October 28, 2026

Welcome to Tour Plaza (“we,” “our,” or “us”). We operate the Tour Plaza website, mobile applications (available on the Google Play Store), and related travel marketplace services (collectively, the “Platform”).

Tour Plaza is a multi-vendor platform connecting travelers with independent third-party vendors offering travel services—including hotels, resorts, flights, and curated tour packages.

This Privacy Policy explains how we collect, use, disclose, and protect your information when you access or use our Platform and Android application.

1. Information We Collect

A. Information You Provide to Us Directly

• Account Information: Name, email address, phone number, password, profile photo, and billing address.

• Booking & Passenger Details: Names of travelers/guests, dates of birth, passport/national ID details (where required for flight or international bookings), emergency contacts, and special dietary/accessibility preferences.

• Payment Information: Payment card details, mobile banking details, or transaction reference numbers. (Note: Payment processing is handled by PCI-DSS compliant payment gateways; Tour Plaza does not store complete credit card numbers on its servers).

• Vendor/Partner Information: Business registration, tax identifiers, trade licenses, contact personnel information, and bank account details for payouts (for tour operators, hoteliers, and flight agents).

• Communications: Customer support messages, reviews, inquiries, and feedback submitted through our in-app chat or forms.

B. Information Collected Automatically (Web & Mobile App)

• Device & Technical Information: Device brand and model, operating system version, unique device identifiers (Android ID, Advertising ID), mobile network details, IP address, browser type, and app crash logs.

• Usage Data: Pages viewed, search history (destinations, dates, guests), click streams, session duration, and feature interaction.

C. Android App Permissions & Sensitive Data

To provide core travel services, our Android app may request access to certain device features. These permissions are requested in context and can be revoked at any time via your device settings:

• Approximate & Precise Location (ACCESS_COARSE_LOCATION, ACCESS_FINE_LOCATION): Used to suggest nearby attractions, hotels, pickup points, and provide accurate destination routing.

• Camera & Photos/Storage (CAMERA, READ_MEDIA_IMAGES / READ_EXTERNAL_STORAGE): Used when uploading a profile picture, attaching identity documents for booking verification, or posting photo reviews.

• Notifications (POST_NOTIFICATIONS): Used to send critical updates regarding booking confirmations, flight status/changes, check-in reminders, and promotional offers (opt-out available).

2. How We Use Your Information

We use the collected information for the following purposes:

• Facilitating Bookings: Connecting you with hoteliers, airlines, tour operators, and resort managers to fulfill reservations.

• Account Management: Creating and securing user accounts, authentication, and managing saved itineraries.

• Customer Support: Resolving booking disputes, refund requests, cancellations, and inquiries.

• Service Personalization: Tailoring destination recommendations, promotional deals, and local currency/language preferences.

• Platform Security & Fraud Prevention: Detecting fraudulent transactions, unauthorized account access, and verifying vendor authenticity.

• Legal & Regulatory Compliance: Complying with applicable laws, tax reporting, and aviation/hospitality identity requirements.

3. How We Share Your Information

Because Tour Plaza is a multi-vendor marketplace, your information is shared in specific, limited ways:

1. With Third-Party Vendors & Service Providers:

   • When you make a booking, necessary passenger/guest details (name, contact, dates, travel requirements) are shared with the specific hotel, resort, tour operator, or airline fulfilling your reservation.

   • Vendors are independent entities; while our agreements require them to protect your data, their treatment of data once transferred is subject to their own privacy practices.

2. With Technical & Payment Service Providers:

   • Payment gateways, SMS gateway providers, map and routing providers (e.g., Google Maps API), and cloud infrastructure hosts.

3. Legal Compliance & Safety:

   • If required by law, subpoena, law enforcement request, or border control/aviation authorities.

4. Business Transfers:

   • In the event of a merger, acquisition, reorganization, or sale of assets, user data may be transferred as a business asset.

4. Google Play Store & Android Data Safety Compliance

In accordance with Google Play's User Data policy:

• No Selling of Personal Data: We do not sell your personal data or device identifiers to third-party data brokers or advertisers.

• Data Transmission: All communications between our mobile application, backend APIs, and payment gateways are encrypted using modern Transport Layer Security (HTTPS / TLS).

• Targeted Advertising: Any analytics or advertising identifiers used strictly comply with Google Play Developer Program Policies.

5. Data Retention & Account Deletion

• Retention: We retain your personal data for as long as your account remains active or as needed to maintain historical booking records, fulfill accounting/tax obligations, and resolve disputes.

• Account & Data Deletion:

  You have the right to request the deletion of your account and personal data at any time.

  • In-App: Go to Profile > Settings > Delete Account.

  • Via Web/Email: You may submit a request by contacting us at privacy@tourplaza.com.

    Upon confirmation, your personal identification records will be permanently deleted or anonymized, except where retention is mandated by law (such as financial audit logs).

6. Security of Your Information

We employ industry-standard technical and organizational security measures to protect your data against unauthorized access, loss, misuse, or alteration. While we implement multi-layer security protocols, no method of transmission over the internet or electronic storage is 100% secure.

7. Children's Privacy

Tour Plaza is not intended for use by individuals under the age of 18 without parental or guardian supervision. We do not knowingly collect personal information directly from children. If travel details for a minor are provided by a parent/guardian for a flight, tour, or room booking, that data is processed solely to fulfill the booking.

8. Your Rights & Choices

Depending on your jurisdiction, you may have the right to:

• Access and obtain a copy of the personal data we hold about you.

• Request corrections to inaccurate or incomplete information.

• Opt out of marketing notifications and email newsletters via unsubscribe links.

• Revoke app permissions (Camera, Location, Notifications) directly in your Android system settings.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, mobile app updates, or regulatory standards. Any modifications will be posted here with an updated "Last Updated" date. Continued use of our Platform after revisions implies acceptance of the updated terms.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Team:

• Platform Name: Tour Plaza

• Email: support@tour-plaza.com

• Website: https://www.tour-plaza.com

• In-App Support: Available directly under the Help & Support tab in the Tour Plaza Android app