Privacy Policy

This Privacy Policy explains how Travel Globus ("we", "us"), an AtaForge Inc. company, collects and processes personal data when partner agencies and their travellers use our platform. We act as a data controller for partner account data and as a data processor for booking data handled on behalf of agencies.

• Account data — company details, contact names, email, phone and credentials.
• Booking data — traveller names and details required to fulfil reservations.
• Financial data — wallet balances, transfers and reference codes (we do not store full card numbers; card payments are handled by certified processors).
• Technical data — IP address, device, browser and approximate location for security and logging.

We use personal data to provide and secure the platform, process bookings and payments, prevent fraud and abuse, comply with legal obligations, and communicate service and account information. We do not sell personal data.

We process data on the bases of contract performance (operating your account and bookings), legitimate interests (security, fraud prevention and service improvement), legal obligation (accounting and tax) and, where required, consent.

We share data only with the suppliers necessary to fulfil a booking, and with vetted sub-processors (hosting, email, payments, currency and analytics) under data-processing agreements. The identity of suppliers is abstracted from travellers; agencies remain the customer-facing brand.

We keep personal data only as long as needed for the purposes above and to meet legal and accounting requirements, after which it is deleted or anonymised.

Subject to applicable law, you may request access, correction, deletion, restriction or portability of your personal data, and object to certain processing. Requests can be made at our contact page.

We use strictly necessary cookies for authentication and security, and optional analytics cookies to improve the product. You can control optional cookies in your browser and via our cookie controls.

We protect data with encryption in transit, scoped access controls, structured audit logging, IP controls and continuous monitoring. No method is perfectly secure, but we work to industry standards and review our controls regularly.

For privacy questions or to exercise your rights, reach us via the contact page. See also our GDPR / KVKK page for compliance details.

This document is provided in several languages for convenience. In case of any discrepancy, the English version prevails.