Privacy Policy
Last Updated: October 21, 2026
Your trust matters to us. This Privacy Policy explains what personal information Travaco.com (“Travaco,” “we,” “us,” or “our”) collects when you search, book, or travel with us, why we collect it, who we share it with, and the choices you have. It applies to travaco.com and to our flight, hotel, tour, Hajj, and Umrah services.
Who we are and what this policy covers
Travaco.com is an online travel agency and tour operator. We help customers book flights, hotels, car services, tours, and Hajj and Umrah packages. When you use our services, Travaco acts as the “controller” of your personal data, meaning we decide how and why it is used.
Travaco.com is operated by Travaco LLC.. This policy applies to personal data we collect through our website, by email, by phone, through messaging channels, and in person when we arrange your travel.
Personal data we collect
The information we collect depends on the services you use. We collect it directly from you, automatically when you use our site, and from the partners who help us deliver your trip.
| Category | Examples | Why we need it |
|---|---|---|
| Account and contact details | Name, email address, phone or WhatsApp number, address, password, language and currency preference | To create your account, send confirmations, and contact you about your trip |
| Traveler and identity details | Full name as shown on your passport, date of birth, gender, nationality, passport number, issue and expiry dates, visa details, national ID where required, photograph for visa applications | To issue tickets, apply for visas and permits, and meet airline, hotel, and government requirements |
| Booking and travel details | Flights, hotels, dates, destinations, room and seat preferences, package selection, frequent flyer numbers, itineraries | To make, change, and manage your reservations |
| Payment details | Cardholder name, billing address, last four digits of your card, payment method, transaction and refund history | To take payment, prevent fraud, and process refunds. Full card details are handled by our payment providers (see “How we protect your data”) |
| Special requests | Meal preferences, wheelchair or mobility assistance, accessibility needs, room requests | To arrange the support you ask for with airlines, hotels, and transport providers |
| Communications | Emails, chat and phone messages, call recordings where permitted, feedback, reviews, survey responses | To provide support, resolve complaints, and improve our service |
| Technical and usage data | IP address, device ID, browser type, operating system, pages viewed, searches, referring links, date and time of visits, approximate location | To run and secure our site, remember your preferences, and understand how the site is used |
Where else we get your data
- The person who makes a booking on your behalf, such as a family member, group leader, or employer
- Airlines, global distribution systems, hotels, transport providers, and tour partners who confirm or update your reservation
- Visa processing agents and, where applicable, official Hajj and Umrah platforms operated by the Saudi authorities
- Payment providers and fraud-prevention services
- Analytics, advertising, and social media partners, in line with our Cookie Policy
Sensitive information
Some of the information we handle can be sensitive. We collect it only when it is needed to arrange your trip or to meet a legal requirement, and we handle it with extra care.
- Religious belief. Booking a Hajj or Umrah package may, by its nature, indicate your religious belief. We use this information only to arrange and deliver the pilgrimage services you asked for.
- Health information. We may ask for vaccination certificates required for entry or pilgrimage, or for details of medical or mobility needs you want us to pass to providers. Provide only what is necessary.
- Government identifiers. Passport, visa, and national ID details are used only for ticketing, visas, immigration, and security requirements.
Where the law requires your consent to handle this information, we ask for it first, and you can withdraw it at any time. Withdrawing consent may mean we can no longer arrange the related part of your trip.
How we use your personal data
We use your personal data for the following purposes:
- To provide your booking. Search, reserve, ticket, and manage flights, hotels, tours, and packages, and send confirmations, itineraries, and travel updates.
- To process payments and refunds. Take payment, issue refunds, and keep transaction records.
- To arrange visas and travel documents. Prepare and submit applications for Umrah, Hajj, and other visas.
- To support you. Answer questions, handle changes and cancellations, and help during disruption such as flight delays or schedule changes.
- To keep our service safe. Detect and prevent fraud, misuse, and security incidents, and verify identity when needed.
- To improve Travaco. Analyze how our site and services are used, fix errors, test new features, and personalize search results and offers.
- To market to you. Send offers and promotions where you have agreed or the law allows (see “Marketing communications”).
- To meet legal obligations. Comply with tax, accounting, aviation, immigration, anti-money-laundering, and consumer protection laws, and respond to lawful requests from authorities.
Depending on where you live, our legal basis for these uses is one or more of: performing our contract with you, meeting a legal obligation, your consent, or our legitimate interests in running, securing, and improving our business.
Hajj and Umrah bookings
Pilgrimage travel involves extra requirements. In addition to the sections above, when you book a Hajj or Umrah package, we may:
- Collect passport copies, photographs, vaccination certificates, and details needed for visa and permit applications.
- Collect information about your travel companions and family relationships where required for group, family, or women-travel rules.
- Share traveler lists, passport details, and arrival and departure information with licensed service providers and government platforms in Saudi Arabia, so your visa, accommodation, transport, and ground services can be arranged.
- Share group details with your group leader or tour guide so they can assist you during the journey.
- Keep records of your package, visa, and permit for as long as needed to support you, resolve any issues, and meet legal requirements.
Authorities and providers in Saudi Arabia apply their own rules and laws to the data they receive. We share only what is needed for your trip.
Booking for other travelers
If you make a booking for family members, friends, colleagues, or group members, you confirm that you have told them about this Privacy Policy and that you have their permission, or the legal authority, to give us their personal data. If you book for a child, you confirm you are the parent or legal guardian or have their authority.
Marketing communications
With your consent, or where the law otherwise allows, we may send you offers, travel inspiration, and package promotions by email, SMS, WhatsApp, or push notification. You can opt out at any time by using the “unsubscribe” link in any marketing email, replying STOP to a text message, or contacting us. We will still send you service messages about your bookings, such as confirmations, changes, and payment receipts.
International transfers
Travel is international by nature. Your personal data may be transferred to, stored in, and accessed from countries other than where you live, including the United States, Saudi Arabia, and the countries of your airlines, hotels, and other suppliers. These countries may have data protection laws that differ from yours.
Where required, we use appropriate safeguards for these transfers, such as contractual protections, and we transfer data to a supplier when it is necessary to fulfill your booking.
How long we keep your data
We keep personal data only as long as we need it for the purposes described in this policy. In general:
- Account information is kept while your account is active and for a reasonable period afterwards.
- Booking, payment, and invoice records are kept for as long as tax, accounting, and consumer laws require, typically several years.
- Passport, visa, and identity details are kept only as long as needed to complete your travel and any related claims, then deleted or anonymized where the law allows.
- Marketing preferences are kept until you opt out, and we keep a record of that opt-out so we respect it.
Exact periods vary by data type and country. we keep booking and payment records for 7 years, and we delete or anonymize passport and visa copies within 12 months after your trip ends, unless the law requires us to keep them longer.
How we protect your data
We use technical and organizational measures to protect personal data against loss, misuse, and unauthorized access, including encrypted connections (HTTPS), restricted internal access, and secure handling of payment information. Card payments are processed by payment providers that follow the Payment Card Industry Data Security Standard (PCI DSS). Travaco does not store full card numbers or security codes (CVV) on our own servers.
No online service can be completely secure. Please use a strong, unique password, keep it confidential, and contact us right away if you suspect unauthorized use of your account.
Your rights and choices
Depending on where you live, and subject to legal limits, you may have the right to:
- Know what personal data we hold about you and receive a copy
- Correct information that is inaccurate or incomplete
- Ask us to delete your personal data
- Object to or ask us to restrict certain uses, including direct marketing
- Receive your data in a portable format
- Withdraw your consent where we rely on it, without affecting past use
- Opt out of targeted advertising and the sale or sharing of personal data (we do not sell personal data)
- Not be treated unfairly for exercising your rights
These rights may come from laws such as the EU and UK GDPR, the Saudi Personal Data Protection Law, and privacy laws in certain U.S. states.
How to make a request
Contact us using the details in the “Contact us” section. We may need to verify your identity before acting, and we will respond within the time required by law. Some data must be kept for legal or booking reasons, and we will explain if we cannot meet a request in full. You can also lodge a complaint with your local data protection authority.
Children’s privacy
Our services are intended for adults. We do not knowingly collect personal data from children under 16 except as needed to book travel for a child through a parent or guardian. If you believe a child has given us personal data without permission, contact us and we will delete it.
Third-party websites
Our site may link to websites run by airlines, hotels, payment providers, and other third parties. We are not responsible for their privacy practices, so please read their policies before sharing your information.
Contact us
For questions about this Privacy Policy, or to exercise your privacy rights, contact us at:
Travaco LLCEmail: info@travaco.com
Phone: 212-679-3855 Hours: 9.00AM to 6.00PM CST
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, or the law. When we make material changes, we will notify you, for example by email or a notice on our site, before they take effect where required. The “Last Updated” date at the top shows when this policy was last revised.
