Privacy policy

This privacy policy explains how Nadia's Travels LLC, doing business as Nadia Tours (“we”, “us”), collects, uses, discloses and protects personal information when you use www.nadiatour.com (the “Website”) or our travel planning services.

Information we collect

Information you give us. When you send a trip inquiry or contact message we collect:

• your name, email address and, if you provide it, your phone number and preferred contact method;
• trip details you choose to share: country of residence, departure city, destination, travel dates, number of adults and children, trip type, approximate budget and currency, accommodation preference, whether you want flight or hotel help, and any additional notes;
• for contact messages, the subject and message.

If you become a customer, we also collect the details needed to arrange your travel, such as traveler names as they appear on travel documents, and records of quotes, invoices and payments.

Account information. If you create an optional account, our authentication provider, Clerk, handles your email address, name and password. We keep only your verified email address, your name and an account identifier so we can show you your own inquiries.

Payment information. Payments are processed by Stripe. Stripe collects your card details directly; we never receive or store your full card number. We receive limited payment records, such as the amount, date, status and the last four digits and brand of the card.

Information collected automatically. To protect our forms from spam and abuse, we use Cloudflare Turnstile, which evaluates signals from your browser and device. Our hosting provider records technical information such as IP address, browser type and pages requested in security logs. We do not store IP addresses with your inquiry.

What we do not collect

Please do not send passport numbers, government identification, card numbers or bank details through the Website or by email. We will ask for any travel document details only when a supplier requires them, and tell you how to provide them safely.

How we use your information

• to respond to your inquiry and contact you by your preferred method;
• to plan your trip, prepare quotes and arrange travel services you ask for;
• to process payments, cancellations and refunds;
• to operate, secure and improve the Website and prevent fraud and abuse;
• to comply with legal, tax and accounting obligations and to enforce our Terms of service.

We do not sell your personal information, share it for targeted advertising, or use it for automated decisions that have legal or similarly significant effects. We send marketing messages only if you ask to receive them.

Cookies

We do not use advertising or analytics cookies. We use only cookies that are necessary for the Website to work: a short-lived cookie that lets you link an inquiry to your account from the same browser within two hours, and sign-in session cookies set by Clerk if you use an account. Cloudflare Turnstile may use similar strictly necessary storage to run the security check.

How we share information

We share personal information only as needed to run our business:

• Travel suppliers such as airlines and hotels, when you ask us to arrange a service with them;
• Service providers that work on our behalf under contract: Vercel (website hosting), Neon (database), Cloudflare (bot protection), Clerk (accounts), Resend (email notifications), Hostinger (business email) and Stripe (payments);
• Legal and safety reasons, when required by law or to protect rights, property or safety;
• Business transfers, if our business is sold or reorganized, subject to this policy.

Where your information is stored

We are based in the United States. Our database is hosted in Singapore, and our service providers may process information in the United States and other countries. Where information is transferred, we rely on our providers' contractual and security safeguards.

How long we keep information

We keep inquiry and contact records for as long as we need them to respond to you and provide our services, and customer records for as long as required for legal, tax and accounting purposes. You may ask us to delete your information earlier, as described below.

How we protect information

Information is encrypted in transit using HTTPS. Our database requires encrypted connections, and the Website uses a restricted database account that cannot read or change more than it needs. Access to customer records is limited to authorized people at Nadia Tours. No method of transmission or storage is completely secure, but we work to protect your information and will notify you of a breach as required by law.

Your choices and rights

You can ask us to access, correct or delete your personal information, or to stop contacting you, by emailing hello@nadiatour.com. Depending on where you live, including under the Maryland Online Data Privacy Act and other U.S. state laws, you may have additional rights, and you may appeal a decision we make about your request by replying to our response. We will verify your request by confirming it from the email address you used with us, and we will not discriminate against you for exercising your rights.

Children

The Website is not directed to children under 13, and we do not knowingly collect personal information from them. Information about children traveling with you is provided by a parent or guardian and used only to plan that trip.

Changes to this policy

We may update this policy from time to time. We will post the updated policy on this page with a new effective date.

Contact us

For privacy questions or requests: