Privacy Policy

Legal

Privacy Policy

How we collect, use, and protect your personal information when you use BookingRadar. Please read this carefully so you understand exactly what happens to your data.

Last updated: May 3, 2026 Version: 3.0 Applies to: Travelers worldwide except residents of the Russian Federation
0

Introduction

0.1 Who we are

This Privacy Policy is issued by Booking-tours Inc., a Delaware corporation with registered offices at 201 N Brand Blvd, Suite 200, Glendale, CA 91203, United States. In this document, "BookingRadar", "we", "us", and "our" refer to Booking-tours Inc. We operate the website at bookingradar.com, related mobile applications, and related social channels (together, the "Platform").

For users with habitual residence in the Russian Federation, the Platform is operated by a separate Israeli-registered legal entity. A separate Privacy Policy applies to those users and is available at bookingradar.com/ru/info/privacy-policy. This document does not apply to Russian Federation residents.

0.2 Why we wrote this

We collect personal information when you visit the Platform, create an account, make a Booking, contact our support team, or interact with our communications. This document explains what we collect, why we collect it, who we share it with, how long we keep it, and what rights you have over it.

We are committed to handling your information in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the UK Data Protection Act, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable national and state privacy laws.

0.3 Acceptance

By using the Platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with how we handle your personal information, please do not use the Platform.

0.4 Quick contact

For any privacy-related question, request, or complaint, contact us at sales@bookingradar.com. If you are an EU or UK resident, you may also lodge a complaint with the data protection authority in your country of residence. If you are a California resident, you may contact the California Privacy Protection Agency.

1

What information we collect

1.1 Information you provide directly

When you create an account, make a Booking, or interact with our services, we collect the following categories of information:

  • Account information: name, email address, password (stored hashed), phone number, country of residence, language preference, and optionally a profile photo
  • Booking information: traveler names, dates of travel, destination, special requests, dietary requirements, accessibility needs, ages of any children traveling, emergency contact details where requested by the Operator
  • Payment information: billing address, last four digits of the card used (we do not store full card numbers; tokenization is handled by our PCI-DSS-compliant payment processors)
  • Identification information: for certain Travel Experiences (visa-required destinations, transfers requiring ID verification), passport or national ID numbers as required by the Operator or by law
  • Communications: messages you send through the Platform, support tickets, WhatsApp messages, emails, reviews, and feedback you submit
  • Survey and research responses: answers you provide to optional surveys, polls, or research we conduct

1.2 Information we collect automatically

When you visit the Platform, we automatically collect certain information about your device and how you use the Platform:

  • Device and connection data: IP address, browser type and version, operating system, device identifiers, screen resolution, language settings
  • Usage data: pages visited, search queries, listings viewed, time spent on pages, click patterns, referral source, exit pages
  • Location data: approximate location derived from IP address; precise location only when you explicitly grant permission through your device settings
  • Cookie and similar technology data: as detailed in Section 3 and our separate Cookie Policy

1.3 Information from third parties

We also receive personal information from third parties in connection with our services:

  • From Operators: if you communicate directly with an Operator about a Booking, the Operator may share that communication with us for support purposes
  • From social login providers: if you choose to register or sign in using Google, Facebook, or another social account, we receive the basic profile information you authorize that provider to share
  • From payment processors: confirmation of successful payments, fraud risk scores, and chargeback notifications
  • From referral and affiliate partners: if you arrive at the Platform through an affiliate link or referral, we may receive information about the referring source
  • From advertising and analytics partners: aggregated and pseudonymized data about how users interact with our marketing campaigns

1.4 What we do not collect

We do not collect biometric data, do not knowingly collect any data from children under 18, do not collect more sensitive special-category data than is strictly necessary for a Booking (for example, dietary needs you voluntarily disclose), and do not perform automated decision-making with legal or similarly significant effects.

2

How we use your information

We use your personal information for the following purposes. Where you are a resident of the European Union, the European Economic Area, or the United Kingdom, the table below also identifies the legal basis under Article 6 GDPR for each purpose.

2.1 To provide the Platform and fulfill Bookings

To create and manage your account, accept and process your Bookings, transfer the necessary booking information to the Operator, send you booking confirmations and Vouchers, process payments and refunds, and respond to support requests.

Legal basis (EU/UK): performance of a contract with you (Article 6(1)(b) GDPR).

2.2 To improve the Platform

To analyze how users interact with the Platform, identify and fix technical issues, develop new features, and improve our search, ranking, and personalization algorithms.

Legal basis (EU/UK): our legitimate interest in operating and improving a useful platform (Article 6(1)(f) GDPR).

2.3 To communicate with you

To send transactional messages (booking confirmations, support replies, account notices, and service updates), and, where permitted, marketing communications about Travel Experiences and offers we think you would value.

Legal basis (EU/UK): performance of a contract for transactional messages (Article 6(1)(b)); your consent for marketing communications where consent is required (Article 6(1)(a)); legitimate interest for marketing to existing customers under the soft opt-in rule of the ePrivacy Directive (Article 6(1)(f)).

2.4 To prevent fraud and protect the Platform

To detect, investigate, and prevent fraudulent transactions, abuse, security incidents, and violations of our Terms.

Legal basis (EU/UK): our legitimate interest in protecting the Platform, our users, and our business (Article 6(1)(f) GDPR), and compliance with legal obligations to prevent fraud.

2.5 To comply with legal obligations

To comply with tax, accounting, anti-money-laundering, sanctions, consumer protection, and other obligations imposed by law on us or on our payment processors and operators.

Legal basis (EU/UK): compliance with a legal obligation (Article 6(1)(c) GDPR).

2.6 To exercise or defend legal claims

To establish, exercise, or defend legal claims and to enforce our Terms.

Legal basis (EU/UK): our legitimate interest in protecting our legal rights (Article 6(1)(f) GDPR).

2.7 With your consent

For any other specific purpose for which you have given us explicit consent. You may withdraw consent at any time without affecting the lawfulness of any processing carried out before withdrawal.

Legal basis (EU/UK): your consent (Article 6(1)(a) GDPR).

3

Cookies and tracking technologies

3.1 What we use

We use cookies, pixels, web beacons, local storage, and similar technologies to operate the Platform, analyze usage, remember your preferences, and deliver relevant marketing.

We use four broad categories of cookies and similar technologies:

  • Strictly necessary: required for the Platform to function (login, security, shopping cart, language switching). These cannot be disabled.
  • Functional: remember your preferences, language, currency, and recent searches.
  • Analytics: help us understand how the Platform is used so we can improve it.
  • Marketing: deliver relevant advertising on our Platform and on third-party platforms, and measure campaign effectiveness.

3.2 Your choices

For non-essential cookies, we ask for your consent through a cookie banner the first time you visit the Platform. You can change your preferences at any time through the cookie preferences link in our footer or by clearing cookies in your browser settings.

Detailed information about each cookie we use, its purpose, and its duration is available in our separate Cookie Policy.

3.3 Do Not Track

Some browsers send a "Do Not Track" signal. There is no industry consensus on how to interpret this signal. We currently do not respond differently to Do Not Track signals; instead, our cookie consent mechanism gives you direct control over non-essential tracking.

4

Sharing and disclosure

We do not sell your personal information. We share your information only as necessary to provide the Platform, comply with the law, or with your consent.

4.1 With Operators

When you make a Booking, we share the information necessary for the Operator to deliver the Travel Experience: traveler names, contact details, booking details, special requests, dietary or accessibility needs, and any identification or visa information required by the Operator. Operators are independent controllers of the data we share with them and are responsible for complying with applicable data protection laws when handling your information for the purpose of delivering your Travel Experience.

4.2 With service providers

We use third-party service providers to operate the Platform. These providers process your information only on our instructions and only to the extent necessary to perform their services. The categories of service providers we use include:

  • Hosting and infrastructure providers that store and serve our website and database
  • Content delivery networks and security providers that protect the Platform from attacks and improve performance
  • Payment processors that handle card transactions and payouts
  • Communication and customer support providers that help us send emails, run WhatsApp support, and operate help desk software
  • Booking management and integration providers that connect our Platform to Operator inventory systems
  • Analytics and product improvement providers that help us understand how the Platform is used
  • Marketing and advertising providers that help us reach travelers and measure campaign performance
  • Identity verification and fraud prevention providers that help us detect suspicious activity
  • Professional advisors including auditors, lawyers, and accountants where reasonably necessary

We enter into written data processing agreements with each service provider that requires GDPR-compliant safeguards where applicable.

4.3 Legal disclosures

We may disclose your information to courts, law enforcement, regulators, or other public authorities when we are required to do so by law, court order, or valid legal process, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of BookingRadar, our users, or others.

4.4 Corporate transactions

If we are involved in a merger, acquisition, restructuring, financing, sale of assets, or transition of services to another provider, your information may be transferred as part of that transaction, subject to standard confidentiality obligations and continued application of this Privacy Policy or an equivalent successor policy.

4.5 With your consent

We may share your information with other parties when you give us specific consent to do so.

4.6 Aggregated and de-identified data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you for analytics, research, marketing, or other business purposes without restriction.

5

International data transfers

BookingRadar is based in the United States and operates internationally. Your personal information may be transferred to, stored in, or processed in countries other than your country of residence, including the United States, Israel, the European Economic Area, and other countries where our service providers and Operators are located. Some of these countries may have data protection laws that differ from those in your country of residence.

5.1 Transfers from the European Economic Area or United Kingdom

When we transfer personal information from the EEA or UK to a country that the European Commission or the UK government has not deemed to provide an adequate level of protection, we use one or more of the following safeguards:

  • The European Commission's Standard Contractual Clauses (Decision 2021/914) for transfers between controllers and processors
  • The UK Addendum to the Standard Contractual Clauses for transfers from the UK
  • The EU-US Data Privacy Framework, where applicable to recipients in the United States that participate in the Framework
  • Binding Corporate Rules where the recipient organization has them in place
  • Specific derogations under Article 49 GDPR (such as performance of a contract in your interest) where strictly necessary and limited

5.2 Transfers to Operators in third countries

When you book a Travel Experience that takes place in a country outside the EEA, your personal information will necessarily be transferred to the Operator in that country in order to deliver the Travel Experience. By making such a Booking, you acknowledge that this transfer is necessary for the performance of the contract between you and the Operator (Article 49(1)(b) GDPR).

5.3 Information about safeguards

You may request a copy of the relevant transfer safeguards by emailing sales@bookingradar.com.

6

How long we keep your data

We retain your personal information only as long as necessary for the purposes for which it was collected, plus any additional period required by law. The following table summarizes our standard retention periods:

Account data: for as long as your account is active, plus up to 3 years after closure for our legitimate business and legal record-keeping needs.
Booking and transaction data: 7 years from the date of the Booking, to comply with tax, accounting, and consumer protection record-keeping obligations.
Payment information: tokenized payment data is retained as long as needed for refunds, chargebacks, and fraud investigations, generally up to 18 months after the last transaction. We do not store full card numbers.
Communications and support tickets: 3 years from the date of the last interaction, to handle complaints and reference past conversations.
Marketing data: until you unsubscribe or withdraw consent, plus a short period to honor your preference and prevent re-subscription errors.
Cookie and analytics data: typically retained between 1 and 24 months as detailed in the Cookie Policy.
Server logs and security data: typically 12 months for security investigations.
Legal claims data: retained for the duration of any actual or potential legal claim plus the applicable statutory limitation period.

When personal information is no longer necessary, we delete it or irreversibly anonymize it. Where deletion from backup systems is technically infeasible in the short term, we will isolate the data and delete it during the next regular backup rotation.

7

How we keep your data secure

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction, including:

  • Encryption of data in transit using TLS 1.2 or higher
  • Encryption of sensitive data at rest where supported by our infrastructure
  • Access controls and role-based permissions for our systems
  • Multi-factor authentication for administrative access
  • PCI-DSS-compliant payment processing through specialized third-party processors
  • Regular security reviews, vulnerability scanning, and penetration testing
  • Staff training on data protection and confidentiality
  • Written data processing agreements with all third-party service providers

No method of transmission over the internet or storage on electronic systems can be guaranteed to be 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for promptly notifying us of any suspected unauthorized use of your account.

If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, you, in accordance with applicable law.

8

Your rights

8.1 Universal rights

Regardless of your country of residence, you have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Delete your account and request erasure of your personal information, subject to legal retention obligations
  • Withdraw any consent you have given us at any time
  • Unsubscribe from marketing communications
  • Contact us with questions or complaints at sales@bookingradar.com

8.2 Additional rights for EU, EEA, and UK residents

If you are resident in the European Union, European Economic Area, or United Kingdom, you have the following additional rights under GDPR and the UK Data Protection Act:

  • Right to access (Article 15 GDPR): obtain confirmation of whether we process your personal data and a copy of that data
  • Right to rectification (Article 16 GDPR): correct inaccurate or incomplete personal data
  • Right to erasure (Article 17 GDPR), also known as the "right to be forgotten": request deletion of your personal data in certain circumstances
  • Right to restriction of processing (Article 18 GDPR): request that we limit how we process your data in certain circumstances
  • Right to data portability (Article 20 GDPR): receive a copy of the personal data you provided to us in a structured, machine-readable format and transmit that data to another controller
  • Right to object (Article 21 GDPR): object to processing based on our legitimate interests, including processing for direct marketing
  • Right not to be subject to automated decision-making (Article 22 GDPR): we do not currently make decisions about you based solely on automated processing that produce legal or similarly significant effects
  • Right to lodge a complaint with the data protection supervisory authority in your country of residence

To exercise these rights, contact us at sales@bookingradar.com. We will respond within one month, with the possibility to extend this period by two further months in cases of complex or numerous requests, in which case we will inform you of the extension within the first month.

EU Article 27 representative. We do not currently have a designated Article 27 representative in the European Union. EU residents may contact us directly at sales@bookingradar.com for any privacy matter, and may also lodge a complaint with the data protection authority in their country of residence. We will designate an EU representative when required to do so by law and update this Privacy Policy accordingly.

8.3 Additional rights for California residents

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

  • Right to know: request that we disclose the categories of personal information we collect, the categories of sources, the business or commercial purposes for collection, the categories of third parties with whom we share information, and the specific pieces of personal information we have collected about you
  • Right to delete: request that we delete personal information we have collected from you, subject to legal exceptions
  • Right to correct: request that we correct inaccurate personal information we maintain about you
  • Right to opt out of sale or sharing: we do not sell personal information for monetary consideration. To the extent any of our marketing partner integrations qualify as "sharing" of personal information for cross-context behavioral advertising under the CPRA, you may opt out at any time via the cookie preferences link in our footer or by emailing sales@bookingradar.com
  • Right to limit use of sensitive personal information: request that we limit our use of sensitive personal information to purposes specified in the CCPA
  • Right to non-discrimination: we will not discriminate against you for exercising any of these rights

Categories of personal information collected and disclosed. In the preceding 12 months, we have collected the categories of personal information described in Section 1 (identifiers, commercial information, internet activity, geolocation, professional information, and inferences). We have disclosed these categories to the categories of recipients described in Section 4. We have not sold personal information for monetary consideration.

To exercise your California rights, contact us at sales@bookingradar.com. We will respond within 45 days. We may need to verify your identity before processing your request.

8.4 Russian Federation residents

If you are a resident of the Russian Federation, this Privacy Policy does not apply to you. Please refer to the separate Privacy Policy at bookingradar.com/ru/info/privacy-policy.

8.5 Authorized agents

You may use an authorized agent to exercise your rights on your behalf. We may require the agent to provide proof of authorization and may require you to verify your own identity directly with us.

9

Children's privacy

The Platform is intended for adults aged 18 and over. We do not knowingly collect personal information from children under 18. If you are under 18, do not register an account or submit any personal information to us.

If you are a parent or legal guardian and believe that your child has provided us with personal information, please contact us at sales@bookingradar.com so we can promptly delete that information.

When you make a Booking that includes minor travelers (children traveling with you), we collect only the limited information necessary for the Operator to deliver the Travel Experience (typically the child's name and age). You represent that you have the authority to provide this information as the parent or legal guardian, or with explicit authorization from the child's parent or legal guardian.

10

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, applicable law, or industry standards.

When we make material changes that affect how we process your personal information, we will notify you by email at least 30 days before the changes take effect (where we have your email address) and post a prominent notice on the Platform. Non-material changes (clarifications, formatting, contact updates) take effect when the updated Privacy Policy is posted, and the "Last updated" date at the top of this document is revised.

Your continued use of the Platform after the effective date of changes constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you may close your account before the effective date.

You can review prior versions of this Privacy Policy by contacting us.

11

Contact and complaints

For any privacy-related question, request, or complaint, please contact us:

  • Email: sales@bookingradar.com
  • Postal address: Booking-tours Inc., 201 N Brand Blvd, Suite 200, Glendale, CA 91203, United States

If you are not satisfied with our response, you have the right to escalate as follows:

  • EU and EEA residents: lodge a complaint with the data protection supervisory authority in your country of residence. A directory is available on the European Data Protection Board's website
  • UK residents: lodge a complaint with the Information Commissioner's Office (ico.org.uk)
  • California residents: contact the California Privacy Protection Agency (cppa.ca.gov) or the California Attorney General
  • Other jurisdictions: contact the data protection authority in your country of residence, where one exists

11.1 Translations

This Privacy Policy is provided in English and translated into Spanish, German, French, and Hebrew for convenience. The English version is the authoritative version. In the event of any inconsistency between language versions, the English version prevails, except where mandatory law of your country of residence requires otherwise.

Questions about your privacy?

Our team handles privacy questions and data requests at the same address as customer support. We respond within 30 days for general inquiries, and within the legal timeframe for formal data subject requests.

 Email us about privacy