Waziha Aviation & Tourism Ltd. (“Waziha”, “we”, “our”, or “us”) is committed to protecting the privacy, confidentiality, and security of personal data in accordance with applicable laws of Bangladesh, including the Information and Communication Technology Act, 2006, relevant provisions of the Digital Security framework, and internationally recognized aviation and data protection standards such as GDPR principles (where applicable) and IATA travel data handling requirements.

By using our website or services, you agree to the practices described in this Privacy Policy.

1. Data Controller

Waziha Aviation & Tourism Ltd. acts as the Data Controller for all personal data collected through our website, booking systems, and customer communication channels.

📧 Contact: info@wazihatravels.com

2. Scope of This Policy

This Privacy Policy applies to:

• Our website and online booking systems
• Ticketing and travel services (air tickets, hotels, tours)
• Customer support and communication channels
• Any digital or offline interaction with our company

It does not apply to third-party websites or services linked from our platform.

3. Information We Collect

We collect only data necessary for legitimate travel and business operations.

3.1 Personal Identification Data

• Full name (as per passport)
• Gender
• Date of birth (including minors where applicable)
• Nationality
• Passport or travel document details
• Contact number and email address
• Residential and billing address

3.2 Travel & Booking Data

• Flight itinerary and booking details
• Airline Passenger Name Record (PNR)
• Seat, baggage, and service preferences
• Frequent flyer details (if provided)

3.3 Payment Information

• Payment reference and transaction ID
• Partial card details (if processed through secure gateway logs only)

⚠️ Full card data is never stored by Waziha Aviation & Tourism Ltd. Payments are processed via secure PCI-DSS compliant third-party gateways.

3.4 Technical Data

• IP address
• Browser and device type
• Cookies and usage analytics
• Website interaction logs

4. Purpose of Data Collection

We use your data strictly for the following purposes:

• Airline ticket issuance and reservation processing
• Hotel and tour booking arrangements
• Compliance with airline and IATA booking standards
• Identity verification for secure travel transactions
• Customer service and communication
• Payment processing and fraud prevention
• Legal, tax, and regulatory compliance in Bangladesh and abroad
• Service improvement and analytics
• Marketing communications (only with consent)

5. Legal Basis for Processing (Bangladesh + International Standards)

We process personal data based on:

• Contract necessity – fulfilling travel booking services
• Legal obligation – compliance with Bangladesh laws and aviation regulations
• Legitimate interest – fraud prevention, business improvement, security
• Consent – marketing and optional communications
• International aviation requirements (IATA/GDS systems)

6. Airline & IATA Compliance Disclosure

As part of global airline distribution systems and aviation operations, passenger data may be shared with:

• Airlines and Global Distribution Systems (GDS)
• Immigration and border control authorities
• Airport security and aviation regulators
• Travel insurance and service providers

This is strictly required for:

• Ticket issuance
• Passenger verification
• Security screening
• Regulatory compliance under international aviation rules

7. Data Sharing Policy

We may share your data only with:

• Airlines and travel suppliers
• Payment processors and banking institutions
• Government or regulatory authorities (when legally required)
• Fraud prevention and cybersecurity agencies
• Technology providers supporting our booking systems

🚫 We do NOT sell, rent, or trade personal data under any circumstances.

8. Data Storage & Security

We implement reasonable technical and organizational safeguards including:

• Encrypted data transmission
• Secure server infrastructure
• Restricted internal access controls
• Regular system monitoring
• Fraud detection systems

While we take strong security measures, no online system is 100% secure.

9. Data Retention Policy

We retain personal data only for as long as necessary for:

• Completion of travel services
• Airline and aviation compliance requirements
• Accounting and tax obligations in Bangladesh
• Legal dispute resolution and fraud prevention

After retention is no longer required, data is securely deleted or anonymized.

10. International Data Transfer

Your data may be transferred outside Bangladesh for:

• Airline booking systems
• Global Distribution Systems (GDS)
• International travel service providers

We ensure such transfers are performed securely and only for legitimate travel-related purposes.

11. Your Rights as a Data Subject

Depending on applicable laws, you may request:

• Access to your personal data
• Correction of incorrect information
• Deletion of your data (where legally permitted)
• Restriction of processing
• Withdrawal of consent (for marketing)
• Information about how your data is used

Requests can be sent to:
📧 info@wazihatravels.com

We aim to respond within a reasonable timeframe, generally within 30 days.

12. Cookies and Tracking Technologies

We use cookies to:

• Improve website performance
• Store user preferences
• Analyze traffic behavior
• Enhance booking experience

Users may disable cookies through browser settings, but some services may not function properly.

13. Marketing Communications

We may send promotional offers only if:

• You have opted in, or
• You are an existing customer and have not opted out

You can unsubscribe at any time.

14. Children’s Privacy

We do not knowingly collect personal data from children under 13 without parental consent. Where child data is required for travel, it is processed strictly for airline and legal requirements.

15. Third-Party Websites

Our website may contain links to third-party platforms. We are not responsible for their privacy practices or content.

16. Limitation of Liability

While we take strong measures to protect your data, Waziha Aviation & Tourism Ltd. shall not be held responsible for:

• Unauthorized access beyond reasonable control
• Security breaches caused by third-party systems
• User negligence in safeguarding credentials

17. Policy Updates

We may update this Privacy Policy from time to time to reflect:

• Legal changes in Bangladesh
• Airline industry requirements
• Operational or technological updates

Updates will be posted with a revised effective date.

18. Contact Information

For privacy inquiries or complaints:

Waziha Aviation & Tourism Ltd.
📧 Email: info@wazihatravels.com