Privacy Policy

1. Introduction

The Grand Travels ("we", "us", or "our") operates this website to share travel information and receive enquiries. This Privacy Policy describes how we process personal information in connection with the website.

This page is intended as a clear foundation for visitors. Specific legal obligations can vary by location, and parts of our operational practices may be refined as the business confirms additional details.

2. Information We Collect

We collect personal information that you choose to provide through our public enquiry forms, and limited technical information that is generated when you use the website (such as standard server requests needed to deliver pages).

We do not ask for passport details, payment card numbers, or government identity documents through these forms.

3. Information You Provide

Depending on the form you use, you may provide some or all of the following:

• Name
• Email address
• Phone number
• WhatsApp number
• Subject and message
• Tour of interest (tour enquiry)
• Destination of interest (quote request)
• Preferred travel date
• Number of travellers
• Budget and currency

At least one contact method (email, phone, or WhatsApp) is required so we can respond. Forms also include a hidden anti-spam field that should be left blank by people.

4. How We Use Information

We use enquiry information for operational purposes, including:

• Responding to your enquiry or message
• Understanding the travel requirements you describe
• Communicating about the journey or information you requested
• Managing enquiries internally within our team
• Providing the information or service you asked for

Submitting a form creates an enquiry or quote request. It does not automatically create a confirmed booking or payment.

We do not use your enquiry information for advertising profiles or remarketing on this website, and we do not operate website analytics tracking scripts as part of the current public site.

5. How We Store Information

Enquiry information is stored in our application database so our team can review and respond. Access is limited to authorised administrators through a protected admin area.

6. Service Providers

We use third-party services that are configured for this website, including:

• Email delivery — when email notifications are configured, enquiry details may be sent to our team by email so we can respond promptly.
• WhatsApp messaging — only if WhatsApp notifications are enabled in our operations configuration, limited enquiry details may be delivered to our team through that channel.
• Image hosting — website and admin images may be stored and delivered through our configured cloud image service.
• Hosting — the website is hosted on infrastructure that serves pages over HTTPS when deployed to a production host.
• Fonts — the site loads the Onest typeface from Google Fonts. Google's own terms and privacy practices apply to that delivery.

We do not expose API keys, tokens, or credentials in this policy or on public pages.

7. Cookies and Similar Technologies

The public website does not use advertising or analytics cookies. An authentication cookie may be set for our internal admin area so authorised staff can stay signed in. See our Cookie Policy for more detail.

8. Data Security

We take reasonable technical and organisational measures to protect personal information, including protecting the admin area with authentication and keeping secrets out of public client code. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this policy, subject to applicable legal and operational requirements.

Exact retention periods for enquiries may be confirmed by the business and updated in this policy after legal review.

10. Your Rights

Depending on where you are located and applicable law, you may have rights relating to your personal information. These may include, where applicable:

• Requesting access to personal information we hold about you
• Requesting correction of inaccurate information
• Requesting deletion where applicable
• Objecting to or restricting certain processing where applicable

Available rights and response processes depend on the laws that apply to you and to our operations.

11. Children's Privacy

Our website and enquiry forms are intended for adults planning travel. We do not knowingly collect personal information from children through these forms. If you believe a child has provided information to us, contact us so we can review and delete it where appropriate.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will change when we do. Continued use of the website after an update means you should review the revised policy.

13. Contact Information

For privacy-related questions, contact us at hello@thegrandtravels.com or through our contact page.