EXO Travel Data Protection & Privacy Policy - Customer Data

EXO Travel Group (EXO) is committed to protecting your privacy. 

This policy describes how we handle personal information collected and supplied to some sources, including agents, suppliers and individuals.

1. Personal Traveler Data 

We collect passenger information to provide travel services and improve the travel experience. This may include:

  • Contact Information: Name,  phone number (if needed for logistics coordination).

  • Travel Information: Booking details, itineraries, dietary restrictions, medical conditions (allergies) relevant to travel.

  • Passport and Visa Information: Passport data  (number, issuing country) if needed for airline or hotel/cruise bookings, visa information (where applicable).

  • Payment Information: is collected only if the payment is done to EXO. We do not save credit card numbers as payment processing is done through a secure third-party gateway. 

  • Location Data: Geographical location (limited collection).

2. How We Use Personal Data

We use client data to:

  • Process travel bookings and reservations.

  • Provide customer support and respond to inquiries.

  • Personalize travel recommendations 

  • Improve our travel services and website.

  • Comply with legal and regulatory requirements (e.g., immigration controls).

  • Prevent fraud and enhance security.

3. Sharing of Customer Data

We share customer data with third-party service providers only to assist us in delivering the travel services (airlines, hotels, cruise companies, tour operators, payment processors). These providers are contractually obligated to protect your data and only use it for the specific service.

We may also share customer data if required by law or to prevent fraud. We will always notify you if we are required to disclose your data in such circumstances.

4. Data Security

We take appropriate security measures to protect your personal data, including strong passwords, data encryption, secure connections, access controls, and regular security audits.

5. Data Retention

We retain customer data only as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, and resolve disputes. We regularly review and delete data when it's no longer required (once traveler has departed destination)

6. Your Rights

You have definite rights regarding your personal data, although they may vary depending on your location. These rights generally include:

  • Right to access a copy of your personal data.

  • Right to request correction of inaccurate data.

  • Right to request deletion of your data in certain circumstances.

  • Right to restrict how we process your data.

  • Right to object to our processing of your data for marketing purposes.

7. Contact Us

For any questions about this policy or your data rights, please contact us at:

8. Updates to this Policy

This policy will be updated periodically and changes/updates and the new complete policy.