Privacy & Data

Privacy Policy

We are committed to protecting your personal data and your right to privacy.

Last Updated: June 21, 2026
~7 min read
GDPR Compliant
1

Introduction

TourFolder ("we", "us", or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our B2B travel platform.

Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

We do not sell, trade, or rent your personal data to third parties for marketing purposes — ever.
2

Information We Collect

We collect information you provide directly to us, as well as data generated through your use of the platform:

  • Account Information: Full name, email address, phone number, company name, and user type
  • Business Information: Company registration details, trade licences, and banking information
  • Transaction Data: Booking records, payment history, and reservation confirmations
  • Usage Data: Log files, IP addresses, browser type, pages visited, and time on platform
  • Communications: Messages, support tickets, and correspondence sent through the platform
  • Cookies & Tracking: Session identifiers, preference data, and analytics information
3

How We Use Your Data

Your data is used to:

  • Create, manage, and authenticate your account
  • Process bookings, payments, and related transactions
  • Send transactional emails, booking confirmations, and platform notifications
  • Provide customer support and respond to enquiries
  • Improve platform features through usage analytics and user feedback
  • Detect, prevent, and investigate fraud or security incidents
  • Comply with legal and regulatory obligations

We do not use your data for targeted advertising or sell it to data brokers.

4

Sharing of Information

We do not sell your personal data. We may share your information only in the following limited circumstances:

  • Between Agents & Suppliers: Only booking-relevant details necessary to fulfill a confirmed reservation
  • Service Providers: Trusted third-party vendors under strict data processing agreements
  • Legal Compliance: When required by law, court order, or governmental authority
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, with prior notice
  • Protection of Rights: To protect the rights, property, or safety of TourFolder or its users
5

Cookies & Tracking

We use cookies and similar tracking technologies to enhance your experience:

  • Essential Cookies: Required for login sessions, security, and core platform functionality
  • Preference Cookies: Remember your language, display settings, and personalisation choices
  • Analytics Cookies: Help us understand how users interact with the platform

You can manage or disable non-essential cookies through your browser settings at any time.

6

Data Retention

We retain your personal data only for as long as necessary:

  • Account Data: Retained for the duration of your account and up to 90 days after closure
  • Booking & Financial Records: Retained for up to 7 years for legal and tax compliance
  • Support Communications: Retained for up to 3 years
  • Usage Logs: Retained for up to 12 months
7

Data Security

We implement comprehensive security measures including:

  • SSL/TLS encryption for all data in transit
  • AES-256 encryption for sensitive data at rest
  • Role-based access controls and multi-factor authentication for staff
  • Regular third-party security audits and penetration testing
  • Incident response procedures and breach notification protocols
While we take all reasonable precautions, no method of internet transmission is 100% secure. We encourage you to use a strong, unique password and enable two-factor authentication.
8

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Right to AccessRequest a copy of your personal data we hold

Right to RectificationRequest correction of inaccurate data

Right to ErasureRequest deletion of your personal data

Data PortabilityReceive your data in a machine-readable format

Right to ObjectObject to processing for certain purposes

Right to RestrictRestrict how we process your data

To exercise any of these rights, contact us at privacy@tourfolder.com. We will respond within 30 days.

9

International Transfers

Your data may be transferred to and processed in countries other than your own. Where such transfers occur, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by relevant data protection authorities
  • Adequacy decisions recognising equivalent data protection standards
  • Binding Corporate Rules where applicable
10

Children's Privacy

TourFolder is a B2B platform intended solely for use by business professionals aged 18 and above. We do not knowingly collect personal information from individuals under the age of 18.

If you believe a minor has provided us with their data, please contact us at privacy@tourfolder.com and we will take immediate steps to delete that information.

11

Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page
  • Notify registered users via email at least 14 days before changes take effect
  • Display a prominent notice on the platform

Your continued use of the Service after the effective date constitutes your acceptance of the updated policy.

12

Contact Us

For any privacy-related questions or requests, please contact our Data Protection Officer:

  • Email: privacy@tourfolder.com
  • Support: support.tourfolder.com
  • Address: TourFolder Privacy Team, Global Travel Hub, Suite 400
Our Data Protection Officer aims to respond to all requests within 5 business days.