Privacy Policy

Effective Date: July 6, 2025

This Privacy Policy outlines how Tolo Travel & Tours (“Company”, “we”, “us”, or “our”), a company based in Dubai, United Arab Emirates, collects, uses, protects, and discloses personal information from users (“you”, “your”) who access our website https://www.tolotravel.com (“Website”) and use our travel and booking services.

By using our Website or services, you consent to the terms of this Privacy Policy. If you do not agree, you must refrain from using our Website.

1. Information We Collect

  • Personal Information: Name, email address, phone number, passport details, nationality, gender, billing address, travel preferences, and any other details voluntarily submitted during booking or inquiries.
  • Payment Information: Credit/debit card details, transaction IDs, and billing information collected via secure, PCI-compliant third-party processors such as Stripe or PayPal.
  • Device & Technical Data: IP address, browser type, operating system, referring URLs, time zone, pages visited, and session data.
  • Cookies & Tracking Data: See Section 6 for more details.

2. How We Use Your Information

  • To process travel bookings, reservations, and payments.
  • To communicate essential trip details, confirmations, and updates.
  • To improve our Website functionality and user experience.
  • To personalize our offerings and send promotional content (you may opt out).
  • To comply with local laws and resolve disputes.
  • To detect and prevent fraud, abuse, and security threats.

3. Sharing & Disclosure

  • Travel Partners: We may share relevant information with third-party travel service providers (airlines, hotels, transport providers) solely to complete your booking.
  • Payment Processors: We use trusted providers like Stripe and PayPal. Your payment information is encrypted and never stored on our servers.
  • Legal Compliance: We may disclose information when required by UAE law, legal process, or government request.
  • Internal Use: Your data may be shared internally with authorized staff and contractors under strict confidentiality agreements.
  • We do not sell or rent your personal data to third parties for advertising purposes.

4. Google Analytics & Tracking

  • We use Google Analytics to understand visitor behavior and enhance performance. This may collect anonymized data such as your IP address, pages visited, device type, and time on site.
  • Google may use cookies to serve ads based on your past visits. You may opt out by visiting: https://tools.google.com/dlpage/gaoptout.

5. Cookies & Similar Technologies

We use cookies, pixels, and similar technologies to:

  • Remember user preferences and session info
  • Improve navigation and performance
  • Collect analytics data (non-identifiable)

You can disable cookies via browser settings, but this may impact site functionality.

Policy Link: https://tolotravel.com/Cookie-Policy-2/

6. Data Retention

  • We retain personal data as long as needed to provide services, comply with legal obligations, or defend our rights.
  • Booking records may be retained for a minimum of 5 years under UAE commercial laws.

7. Data Security

  • We implement technical and organizational measures to protect your data, including SSL encryption, firewalls, and access controls.
  • However, no system is 100% secure. You use our site and services at your own risk.

8. Cross-Border Data Transfers

By using our Website, you acknowledge and agree that your data may be transferred to and stored in countries outside of the UAE, including jurisdictions that may not have equivalent data protection laws. We ensure that such transfers are made with appropriate safeguards.

9. Your Rights Under UAE Law

You may request:

  • Access to personal data we hold about you
  • Correction or updates to your data
  • Deletion of your data, unless legally required to retain it

To exercise these rights, email us at cio@tolotravel.com.

10. Children’s Privacy

Our services are not intended for individuals under 13 years of age. We do not knowingly collect personal data from children. If you believe a minor has provided us data, contact us to have it deleted.

11. Third-Party Links

Our Website may contain links to third-party sites. We are not responsible for their privacy practices. Please review their policies before submitting any personal information.

12. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time without prior notice. The latest version will always be available on this page. Continued use of our services constitutes your acceptance of the updated policy.

By using our Website and services, you confirm that you have read, understood, and agreed to this Privacy Policy.

If you have questions about this Privacy Policy, please visit our Contact Us page.