Privacy Policy
This Privacy Policy explains how SIBIA (“Sibia”, “we”, “us”, “our”) collects, uses, shares and protects personal data when you visit, submit your details to, or initiate a booking through traveladoffers.com, any partner-branded version of the TravelAd Offers platform, and our related wishlist, offer-request, messaging and customer-support channels (together, the “Platform”).
Please read this Policy together with our Cookie Policy and our Terms and Conditions. Capitalised terms not defined here (Experience, Offer, Supplier, Third-Party Provider, Provider Terms, Partner Instance) have the meaning given in the Terms and Conditions.
1. Your personal data
Sibia is the data controller of all personal data you enter on the Platform or that we collect about your use of it.
The Platform displays Experiences and Offers made available by third-party marketplaces and booking platforms. When you initiate a booking or request an Offer, we transmit the details they need to the relevant Third-Party Provider and Supplier. From that point they process those details as independent controllers, for their own purposes and under their own privacy notices, which are linked on the Experience or Offer page and at checkout. This Policy does not cover their processing.
Partners whose brand appears on a Partner Instance are separate controllers for the message or app through which you reached us and for their own customer relationship with you.
2. Personal data we collect
2.1 Data you give us
- Name, email address, telephone number (including WhatsApp), country of residence, destination and travel dates, number and ages of travellers, pickup location or hotel, preferred language, special requirements you choose to tell us (for example dietary or accessibility needs), and any message you write for the Supplier.
- If you create an account: login email, password (stored hashed), profile details and saved travellers.
- Payment card details are entered directly into the secure form of the Third-Party Provider or its (or our) payment service provider and are never stored by Sibia. Where Sibia collects payment as collection agent, we receive a payment confirmation, the card type and the last four digits.
- Experiences you save to “My Wishlist” and any preferences you set.
- The content of enquiries, complaints and support conversations you have with us by email, web form, WhatsApp or chat, and their metadata (time, channel, contact identifier).
2.2 Data we collect automatically
- IP address, approximate location derived from IP address, browser type and version, operating system, device identifiers, language settings, referring URL and the pages, searches, filters, Experiences and Offers you view or click.
- If you arrive through a link in a TravelAd message or a partner’s app, the campaign identifier, destination market, Partner Instance and the time of the click, so that we can attribute your visit and any booking to the campaign and pay the correct commission.
2.3 Data we receive from others
- Booking status, confirmation numbers, voucher or code details, amendments, cancellations, refunds and operational messages about your Experience or Offer, so that we can support you and reconcile commissions.
- Authorisation results, chargeback notices and risk scores from payment service providers and fraud-prevention tools.
2.4 Children
The Platform is intended for adults. You must be at least 18 to submit your details or make a booking. We do not knowingly collect personal data from anyone under 16 (or the higher age required in your country) other than the participant details you gives us for a child included in a booking.
3. Use of your personal data
| Purpose | Data used |
|---|---|
| Show you Experiences, Offers, prices and availability for your destination | Device and connection data; campaign data; country selection |
| Receive your details, transmit them to the Third-Party Provider and Supplier, and follow up your booking or Offer request with them | Offer-request and booking form data; data received from Third-Party Providers and Suppliers |
| Keep a record of your request or booking and maintain our customer relationship with you (service messages, reminders, post-experience follow-up, your history if you return) | Offer-request and booking form data; account data; communications |
| Where Sibia collects payment as collection agent: take payment, remit it, process authorised refunds, prevent fraud and manage chargebacks | Payment confirmation; device data; booking data |
| Provide customer support, refer complaints to Third-Party Providers and Suppliers and handle complaints about the Platform | Communications; booking data |
| Operate your account and “My Wishlist” | Account and wishlist data; cookies |
| Send you marketing about experiences, offers and destinations from Sibia and its Partner Instances, by email, SMS, WhatsApp or push, and tailor it to your destination and interests | Contact details; country and destination; booking and browsing history; preferences |
| Measure campaign performance | Campaign data; aggregated booking data |
| Improve the Platform, fix errors, secure our systems and keep logs | Device and connection data; usage data |
| Analytics, advertising and personalisation cookies | Cookie identifiers; usage data |
| Comply with tax, accounting, consumer-protection, anti-fraud and other legal obligations, and respond to lawful requests from authorities | Booking, payment and communications data |
| Establish, exercise or defend legal claims | Any relevant data |
4. Who we share your personal data with
| Recipient | What is shared and why |
|---|---|
| The Third-Party Provider through which the Experience or Offer is sourced | The booking subset of your form data (name, contact details, participant numbers and ages, pickup details, special requirements) and payment confirmation, to place, confirm, amend and cancel the booking or issue the Offer and to provide customer service under its Provider Terms. |
| The Supplier of the Experience or Offer | The same booking subset, received directly or through the Third-Party Provider, so the Supplier can deliver the Experience or honour the Offer and contact you about it. Suppliers are located in the destination country. |
| Payment and card networks | Payment data, to process payments and refunds and to prevent fraud. |
| Hosting, IT, CRM and communications providers | Data needed to host the Platform, store your record and send service and (with consent) marketing messages. |
| Analytics and advertising providers | Cookie identifiers and usage data. See the Cookie Policy. |
| Partner Instance partners (mobile network operators, loyalty programmes, advertisers) whose campaign brought you to the Platform | Aggregated statistics only (clicks, requests, bookings, revenue by campaign). |
| Professional advisers, auditors, insurers | Data necessary to obtain advice, audit our accounts or manage claims. |
| Courts, regulators, law-enforcement and tax authorities | Where required by law or to protect our rights, property or safety or those of others. |
| A buyer, investor or successor in a merger, acquisition, financing or sale of assets | Data relevant to the transaction, under confidentiality obligations. |
5. Partner Instances and TravelAd messages
TravelAd Offers is also made available under the brand of mobile network operators, loyalty programmes and other partners. If you arrived on the Platform through an SMS, WhatsApp message or app of such a partner, please note that:
- The message or app placement was provided by, or on the instructions of, that partner under its own terms and privacy notice, on the basis of your relationship with the partner and the marketing permissions you have given it;
- Sibia does not receive your telephone number or identity from the partner in order to send that message; the partner selects and messages its own customers;
- When you click through to the Platform, we process your visit and anything you submit as described in this Policy, as controller; we report only aggregated campaign statistics back to the partner.
6. Your rights
Subject to the conditions and exemptions in the applicable law, you have the right to:
- Access the personal data we hold about you and receive a copy of it;
- Rectify inaccurate or incomplete data;
- Erase your data where it is no longer needed, where you withdraw consent or object, or where it has been unlawfully processed;
- Restrict processing while a request is being assessed or where processing is unlawful;
- Portability: receive the data you gave us in a structured, commonly used, machine-readable format and have it transmitted to another controller where technically feasible;
- Object at any time to processing based on our legitimate interests, and to direct marketing at any time and without giving reasons;
- Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
- Not be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
Data held by Third-Party Providers and Suppliers: Because they are independent controllers, a request concerning the copy of your booking details they hold must be made to them under their own privacy notices. We will help you route it and will pass on any correction we make to your record.
If you are unhappy with how we handle your personal data, please contact us.
7. Security
We apply technical and organisational measures appropriate to the risk, including encryption of data in transit (TLS) and at rest for stored records, access controls and least-privilege administration, logging and monitoring, regular patching of the Platform and its plugins, and contractual security obligations on our processors. Payment card data is handled only by PCI DSS-compliant providers. No system is completely secure; if a personal data breach is likely to result in a high risk to you, we will notify you and the competent authority as required by law.
8. Third-party websites and content
The Platform links to and embeds Third-Party Provider, Supplier, partner and social-media websites and checkout pages. Their privacy practices are their own and this Policy does not apply to them; we tell you when you are leaving the Platform. Reviews and ratings displayed on the Platform are supplied by Third-Party Providers and their reviewers; we do not verify the identity of reviewers.
9. Changes to this Policy
We may update this Policy from time to time, including to add or remove Third-Party Providers, processors or purposes. The “Last updated” date at the top shows when it last changed. For material changes we will give notice on the Platform or, where we hold your contact details and the change affects you, by email or message before the change takes effect.
