Privacy policy

This privacy policy explains how Nadia's Travels LLC, doing business as Nadia Tours (“we”, “us”), collects, uses, discloses and protects personal information when you use www.nadiatour.com (the “Website”) or our travel planning services.

Information we collect

Information you give us. When you send a trip inquiry or contact message we collect:

• your name, email address and, if you provide it, your phone number and preferred contact method;
• trip details you choose to share: country of residence, departure city, destination, travel dates, number of adults and children, trip type, approximate budget and currency, accommodation preference, whether you want flight or hotel help, and any additional notes, and, if you followed a referral link to the trip form, the referral code in that link;
• for contact messages, the subject and message.

If you become a customer, we also collect the details needed to arrange your travel, such as traveler names as they appear on travel documents, and records of quotes, invoices and payments.

Account information. If you create an optional account, our authentication provider, Clerk, handles your email address, name and password. We keep only your verified email address, your name and an account identifier so we can show you your own inquiries.

Saved travelers. In your account you can choose to save the first and last names of people you travel with, so we can plan trips for them more quickly. Only you can see them in your account, and you can change or remove them at any time. Please save someone's name only if they are happy for you to share it with us, and never save passport numbers, dates of birth or other travel documents there.

Profile image. In your account you can choose to add a profile image. We crop it to a square and re-encode it, which removes location, camera and other details embedded in the file, and store it privately. It is shown only to you, in your account, through short-lived links, and you can change or remove it at any time.

Payment information. Card payments are processed by our third-party payment processor, which collects your card details directly; we never receive or store your full card number. We receive limited payment records, such as the amount, date, status and the last four digits and brand of the card.

Information collected automatically. To protect our forms from spam and abuse, we use Cloudflare Turnstile, which evaluates signals from your browser and device. Our hosting provider records technical information such as IP address, browser type and pages requested in security logs. We do not store IP addresses with your inquiry.

Website analytics. To understand how the Website is used, we use Cloudflare Web Analytics. It counts page views, referring sites, the country a visit comes from, the type of browser and device, and how quickly pages load. It sets no cookies, does not use your browser's storage, does not follow you across other websites and does not build a profile of you. We see only aggregate reports, never individual visitors.

Consultation scheduling. If you choose a consultation time through the calendar on our Website, the calendar is provided by Cal.com. It loads from Cal.com only when you open it, and Cal.com receives what you enter there (such as your name, email address and chosen time) to schedule the consultation for us, along with the technical information any website receives when you visit it.

What we do not collect

Please do not send passport numbers, government identification, card numbers or bank details through the Website or by email. We will ask for any travel document details only when a supplier requires them, and tell you how to provide them safely.

How we use your information

• to respond to your inquiry and contact you by your preferred method;
• to plan your trip, prepare quotes and arrange travel services you ask for;
• to process payments, cancellations and refunds;
• to operate, secure and improve the Website and prevent fraud and abuse;
• to comply with legal, tax and accounting obligations and to enforce our Terms of service.

We do not sell your personal information, share it for targeted advertising, or use it for automated decisions that have legal or similarly significant effects. We send marketing messages only if you ask to receive them.

Cookies

We do not use advertising or analytics cookies. We use only cookies that are necessary for the Website to work: a short-lived cookie that lets you link an inquiry to your account from the same browser within two hours, and sign-in session cookies set by Clerk if you use an account. Cloudflare Turnstile may use similar strictly necessary storage to run the security check.

How we share information

We share personal information only as needed to run our business:

• Travel suppliers such as airlines and hotels, when you ask us to arrange a service with them;
• Service providers that work on our behalf under contract: Vercel (website hosting), Neon (database and file storage), Cloudflare (bot protection and website analytics), Cal.com (consultation scheduling), Clerk (accounts), Resend (email notifications), Hostinger (business email) and our payment processor;
• Legal and safety reasons, when required by law or to protect rights, property or safety;
• Business transfers, if our business is sold or reorganized, subject to this policy.

Where your information is stored

We are based in the United States. Our database and stored files are hosted in Singapore, and our service providers may process information in the United States and other countries. Where information is transferred, we rely on our providers' contractual and security safeguards.

How long we keep information

We keep inquiry and contact records for as long as we need them to respond to you and provide our services, and customer records for as long as required for legal, tax and accounting purposes. Saved travelers are kept until you remove them, and are deleted when your account is deleted. A profile image is kept until you change or remove it, and is removed from active service when your account is deleted. Our storage provider may keep removed files in its systems for a limited period before they are permanently erased. You may ask us to delete your information earlier, as described below.

How we protect information

Information is encrypted in transit using HTTPS. Our database requires encrypted connections, and the Website uses a restricted database account that cannot read or change more than it needs. Access to customer records is limited to authorized people at Nadia Tours. No method of transmission or storage is completely secure, but we work to protect your information and will notify you of a breach as required by law.

Your choices and rights

You can ask us to access, correct or delete your personal information, or to stop contacting you, by emailing privacy@nadiatour.com. Depending on where you live, including under the Maryland Online Data Privacy Act and other U.S. state laws, you may have additional rights, and you may appeal a decision we make about your request by replying to our response. We will verify your request by confirming it from the email address you used with us, and we will not discriminate against you for exercising your rights.

Children

The Website is not directed to children under 13, and we do not knowingly collect personal information from them. Information about children traveling with you is provided by a parent or guardian and used only to plan that trip.

Changes to this policy

We may update this policy from time to time. We will post the updated policy on this page with a new effective date.

Contact us

For privacy questions or requests: