Skip to content
AmazingHolidays

Privacy Policy

This policy explains what personal data AmazingHolidays collects, why, who we share it with, how long we keep it and the rights you have.

Effective:

Who We Are

AmazingHolidays operates this website and booking platform and is responsible for the personal data described in this policy. For any privacy question or request, email [email protected].

Information We Collect

  • Account details: your name, email address and password (stored only as a one-way hash), and — if you add them — your phone number, nationality, date of birth and profile photo.
  • Traveler details: for each booking, the traveler list you enter at checkout — names and dates of birth for everyone traveling, and for the lead traveler also nationality, passport number, email and phone. Passport numbers are stored encrypted.
  • Booking and payment records: the tours, dates, rooms, add-ons and amounts you book and pay, payment status and refunds. Card details are entered directly with Stripe, our payment processor; we never see or store your full card number.
  • Messages: support tickets, contact-form messages, booking change requests, and what you tell the chat assistant on our site, including the contact details (name, email, WhatsApp number) you give it.
  • AI trip planner and concierge: the prompts you write, the AI's replies, and the itineraries generated and saved to your account.
  • Reviews: the reviews and photos you post, shown publicly with your name.
  • Technical data: your IP address and browser information in server and network logs, and a record of security-relevant actions on your account (for example bookings, payments and account changes).

How We Use Your Information

  • To create and manage your account and keep it secure.
  • To take, confirm and manage your bookings and payments, including deposits, balance reminders, cancellations and refunds.
  • To give the tour operator what they need to deliver your trip.
  • To answer your support requests and booking questions.
  • To generate itineraries and chat replies when you use the AI features.
  • To meet our accounting, tax and legal obligations, and to prevent fraud.

We do not sell your personal information.

Who We Share It With

  • Partner tour operators: the operator running your tour receives the booking details needed to deliver it — the lead traveler's name and email, travel dates, number of travelers and room arrangement. The full traveler list and passport numbers are not shown to operators in our systems; where an operator needs them to deliver your trip (for example for hotel registration or permits), we pass on only what is required.
  • Service providers (processors) who handle data on our behalf:
    • Stripe — card payments and refunds;
    • z.ai — the language model behind the AI trip planner and AI concierge (it receives the text of your prompts and conversation);
    • our email delivery provider — booking, account and support emails;
    • Cloudflare — network delivery and security for this website.
  • Services your browser contacts directly: maps load from OpenStreetMap, currency conversion rates from open.er-api.com, and stock photos from Unsplash. These services receive your IP address when your browser loads them.
  • Authorities, where the law requires it.

How Long We Keep It

  • Your account data is kept while your account is open.
  • Booking and payment records are kept for as long as accounting and tax law requires, even after you delete your account.
  • AI conversations and saved itineraries are kept until you delete them or your account.
  • Sign-in sessions expire automatically; security records are kept for as long as needed to protect accounts and investigate misuse.

Deleting Your Account

When you delete your account, any open bookings are cancelled under the normal cancellation rules, your name and email are removed from the account, the traveler details stored on your bookings are erased, and you are signed out everywhere. We keep the anonymised booking and payment records we are required to keep.

Cookies and Local Storage

We use cookies that are needed for the site to work: sign-in cookies that keep you logged in, a security token that protects your account against cross-site requests, and your language and theme (light or dark) preferences, so pages open in your language and colours. Your browser's local storage also holds your theme, along with your currency, recently viewed tours, comparison list and packing checklists, on your own device. Cloudflare may set its own security cookie to protect the site from automated abuse. We do not use advertising or analytics cookies.

Your Rights

You can ask to access, correct or delete your personal data, to receive a copy of it, or object to how we use it. You can correct most of your details yourself in your account settings. To make a request, email [email protected] or contact us through our contact page or support center. You also have the right to complain to your local data protection authority.

Changes to This Policy

We may update this privacy policy from time to time. Changes are posted on this page with a new effective date (currently 12 October 2026).