Privacy policy

Last updated 22 Oct 2026. Drafted with reference to the Digital Personal Data Protection Act, 2023; review with your legal advisor before go-live.

What we collect

• Traveller names, dates of birth, passport numbers (international) — required by airlines.
• Contact email and mobile — to deliver tickets and updates.
• Payment result and transaction ID from PayU — never card numbers.
• Search and booking history — to show My Trips and improve the service.

How we use it

To make and manage your booking, send transactional messages, process refunds, prevent fraud and meet legal obligations. Marketing only with your opt-in.

Who we share it with

The airline/hotel/supplier for your booking; PayU for payment; our email and WhatsApp providers for delivery. Never sold.

Retention

Booking records are retained for 8 years for tax and audit requirements; login codes expire in 10 minutes; fare alerts until you delete them.

Your rights

Access, correction and deletion requests: email info@expocitytravels.com. We respond within 30 days.

Cookies

A session cookie keeps you signed in and holds your search; no third-party advertising cookies on booking pages.