Privacy policy
This policy explains what we collect when you search and book travel through ViaGates Holidays, who we share it with, and the choices you have.
Last updated 1 March 2026
1. Data we collect
Search data: routes, destinations, dates, traveller counts, cabin or room preferences, and the language and currency you choose. This lets us return accurate availability and prices.
Booking data: traveller names, dates of birth, contact details, and where a carrier requires it, passport or national ID details, frequent flyer numbers and driver licence information.
Account data: your email address, saved travellers, saved hotels and travel preferences.
Technical data: device type, browser, approximate location derived from IP, and interaction events used to keep the service fast and secure.
2. Why we process it
To search inventory and issue the booking you asked for, including passing required details to airlines, hotels, car suppliers and consolidators.
To provide customer support, tickets, vouchers, invoices and change or cancellation handling.
To prevent fraud and comply with legal, tax and aviation security obligations.
With your consent, to send price alerts and deals for destinations you follow. You can withdraw consent at any time from My Trips.
3. Who we share data with
Travel providers and their global distribution systems, strictly as needed to fulfil your booking.
Payment processors, which handle card data directly under their own PCI-DSS scope. ViaGates does not store full card numbers.
Service providers for hosting, email delivery, analytics and fraud prevention, bound by contract to process data only on our instructions.
4. International transfers
Travel is international by nature, so your data may be transferred to providers outside your country. Where required, we rely on standard contractual clauses or an equivalent safeguard.
5. Retention
Booking records are retained for the period required by tax and consumer law in the market of sale. Search history is retained in aggregated form only. Account data is deleted on request unless a booking record must be kept.
6. Your rights
You can request access, correction, deletion, restriction or portability of your data, and object to marketing. Write to privacy@viagates.example and we will respond within one month.
This policy is a working draft for the ViaGates preview. Before launch it should be reviewed by your legal counsel and completed with your registered entity details, data protection contact and supervisory authority.