Draft — pending legal review
Privacy Policy
These draft terms are not approved legal advice and must be reviewed before launch.
Data handling
TravelOut processes account details, booking records, messages, identity-document references and payment-related credit records to provide travel services. Identity documents are private; ordinary records store only the last four CNIC digits. Guest contacts are disclosed only under authorised booking or paid-lead access. Security and lawful disclosure procedures should be reviewed with reference to Pakistan’s Prevention of Electronic Crimes Act (PECA) 2016 and other applicable laws. This statement does not certify legal compliance.
Account and retention
Guests may request account deletion. A 30-day grace period precedes anonymisation of supported personal records. Booking and financial records may be retained for legitimate obligations; complete storage-file and account-credential erasure requires a reviewed retention process. Contact and statutory retention details must be approved by the owner before launch.
Owner review required
Before publishing these policies, approve the legal entity, contact address, complaint process, retention periods, lawful-disclosure rules, payment terms and effective date.