Privacy Policy

1. Who we are

is a federally registered Canadian corporation and is generally the controller responsible for deciding why and how personal information is processed. Our registered office is .

Contact: info@avelorianessiqra.com · +1 416-555-0186.

2. Scope and GDPR approach

This policy covers this website, enquiries, travel planning conversations, and related services. It explains our practices and protections that may apply under the General Data Protection Regulation (EU) 2016/679 (GDPR) when the GDPR applies to our processing. Other Canadian or local privacy laws may also apply.

3. Personal information we may collect

• Identity and contact details, including name, email, phone, billing details, and correspondence.
• Travel details, including destinations, dates, preferences, accessibility requirements, passport or visa information when needed, and booking references.
• Transaction and service information, including quotations, invoices, payments, cancellations, and supplier communications.
• Technical information, including browser/device data, approximate network location, security logs, and requested pages. We do not use this to build advertising profiles.

Please do not send special-category information unless it is necessary for a requested arrangement. If it is needed, we will seek an appropriate legal basis and safeguards.

4. Sources

We collect information from you, a person arranging travel on your behalf, travel suppliers involved in an itinerary, and your device when the website is accessed. We may also receive information from payment, booking, identity, or fraud-prevention providers when necessary for a service or legal obligation.

5. Purposes and legal bases

• Enquiries and pre-contract steps — GDPR Article 6(1)(b).
• Arranging and performing travel services — Article 6(1)(b).
• Payments, records, disputes, tax, accounting, and legal obligations — Article 6(1)(c).
• Security, fraud prevention, continuity, and legal claims — Article 6(1)(f), where our interests are not overridden by your rights.
• Optional marketing or analytics, where applicable — Article 6(1)(a) consent, unless another lawful basis applies.

Where processing relies on consent, you may withdraw it at any time. Withdrawal does not affect processing already carried out lawfully.

6. Minimisation and accuracy

We seek information that is adequate, relevant, and limited to what is needed. Tell us if your information changes or is inaccurate. We may request reasonable verification before changing or disclosing information.

7. Sharing and recipients

We may disclose relevant information to airlines, hotels, tour operators, insurers, transport providers, visa or destination providers, payment processors, hosting and technology providers, professional advisers, auditors, regulators, law-enforcement bodies, or courts when necessary. Suppliers may process information under their own notices and terms.

We do not sell personal information and do not disclose more than reasonably necessary for the relevant service, legal requirement, or protection of our rights.

8. International transfers

Travel services may involve processing in Canada, the EEA, the United Kingdom, the United States, or another supplier location. Where GDPR applies to a transfer outside the EEA, we will seek an adequacy decision or another lawful mechanism, such as appropriate contractual safeguards, subject to applicable exceptions. Contact us for available safeguard information where required by law.

9. Retention

We retain personal information only as long as reasonably necessary for the purpose, the client relationship, applicable limitation periods, and mandatory accounting, tax, or regulatory periods. We then delete, anonymise, or securely restrict it. Exact retention depends on the record and circumstances.

10. Security and breaches

We use reasonable technical and organisational measures appropriate to risk, including access controls, limited permissions, secure administration, backups where appropriate, and confidentiality obligations. No transmission or storage method is completely secure. We will assess and respond to reportable personal-data breaches within applicable timeframes.

11. Your GDPR rights

Where GDPR applies, you may request access, rectification, erasure, restriction, data portability, and object to processing based on legitimate interests or direct marketing. You may withdraw consent and may have rights relating to decisions based solely on automated processing with legal or similarly significant effects, subject to exceptions.

To exercise a right, contact info@avelorianessiqra.com. We generally respond within one month, subject to lawful extensions. We may verify identity and will explain a refusal unless the law prevents it.

12. Complaints

Contact us first so we can investigate. If GDPR applies, you may also complain to the supervisory authority in your habitual residence, place of work, or the place of the alleged infringement. European supervisory authorities are listed by the European Data Protection Board.

13. Children

Our services are directed to adults arranging travel. We do not knowingly collect children’s information for independent marketing. Parents or guardians may contact us about information supplied improperly.

14. Changes and contact

We may update this policy as services, technology, law, or supplier arrangements change. The effective date will be updated when a new version is published.

info@avelorianessiqra.com
+1 416-555-0186