PRIVACY POLICY

TRAVEVO CONSULTING LIMITED

Last Updated: January 28, 2026

1. INTRODUCTION

Welcome to Travevo Consulting Limited (referred to as "we," "us," "our," or "Travevo"). We are committed to protecting your privacy and handling your personal information with care, transparency, and in compliance with applicable data protection laws, including the Nigeria Data Protection Act (NDPA) 2023 and other relevant regulations.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our travel services, website, mobile applications, and related services (collectively, the "Services"). By accessing or using our Services, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy.

2. INFORMATION WE COLLECT

We collect various types of information to provide, maintain, and improve our Services:

2.1 Personal Information You Provide

When you register for an account, make bookings, or use our Services, we may collect:

• Contact Information: Full name, email address, phone number, postal address
• Account Information: Username, password, security questions, and preferences
• Travel Information: Passport details, date of birth, nationality, visa information, frequent flyer numbers, travel preferences, and special requirements (dietary, accessibility, etc.)
• Payment Information: Credit/debit card details, billing address, bank account information (processed securely through our payment processors)
• Booking Information: Flight details, hotel reservations, car rentals, vacation package selections, travel insurance details
• Communication Information: Information from your communications with us, including customer service interactions, surveys, and feedback

2.2 Information Automatically Collected

When you access our Services, we automatically collect:

• Device Information: IP address, device type, operating system, browser type, unique device identifiers
• Usage Information: Pages visited, search queries, booking history, time spent on pages, click patterns, referring/exit pages
• Location Information: Geolocation data (with your permission), timezone, language preferences
• Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to enhance your experience

2.3 Information from Third Parties

• Travel partners (airlines, hotels, car rental companies, tour operators)
• Payment processors and financial institutions
• Social media platforms (if you choose to connect your account)
• Marketing and advertising partners

3. HOW WE USE YOUR INFORMATION

We process your personal information for the following purposes:

3.1 Service Delivery

• Process and manage your travel bookings (flights, hotels, car rentals, packages)
• Facilitate payment processing and issue invoices
• Provide customer support and respond to your inquiries
• Send booking confirmations, itineraries, and travel-related notifications

3.2 Account Management

• Create and maintain your account
• Authenticate your identity and secure your account
• Enable personalized features and preferences

3.3 Communication and Marketing

• Send promotional offers, newsletters, and travel deals (with your consent)
• Conduct surveys and gather feedback to improve our Services
• Provide personalized recommendations based on your preferences and booking history

3.4 Legal and Regulatory Compliance

• Comply with legal obligations, court orders, and regulatory requirements
• Prevent, detect, and investigate fraud, security breaches, and illegal activities
• Establish, exercise, or defend legal claims
• Verify your identity for visa and travel authorization purposes

3.5 Service Improvement and Analytics

• Analyze usage patterns to improve our website, applications, and Services
• Conduct research, testing, and statistical analysis
• Develop new features, products, and services

4. LEGAL BASIS FOR PROCESSING

We process your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to you (e.g., completing your bookings)
• Consent: You have provided explicit consent for specific processing activities (e.g., marketing communications)
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, service improvement, and analytics, provided these interests do not override your rights
• Legal Obligation: Processing is required to comply with applicable laws and regulations

5. HOW WE SHARE YOUR INFORMATION

We may share your personal information with the following categories of recipients:

5.1 Service Providers and Business Partners

• Travel Suppliers: Airlines, hotels, car rental companies, tour operators, and other travel service providers necessary to fulfill your bookings
• Payment Processors: Financial institutions and payment gateways to process transactions securely
• Technology Partners: Cloud hosting providers, IT support, analytics providers, and software vendors
• Marketing Partners: Advertising networks and marketing agencies (with your consent where required)

5.2 Group Companies and Affiliates

We may share information with members of our corporate group, including subsidiaries and affiliates, for business operations, service delivery, and marketing purposes.

5.3 Legal and Regulatory Authorities

We may disclose your information when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Protect our rights, property, and safety, or that of our users and the public
• Prevent, detect, or investigate fraud, security incidents, or illegal activities

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to the successor entity, subject to appropriate safeguards.

6. INTERNATIONAL DATA TRANSFERS

Your personal information may be transferred to, stored, and processed in countries outside Nigeria, including locations where our service providers, partners, and group companies operate. These countries may have data protection laws different from those in Nigeria.

When we transfer your data internationally, we implement appropriate safeguards, including:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions by data protection authorities
• Other legally recognized transfer mechanisms

7. DATA SECURITY

We implement reasonable technical, physical, and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption of data in transit and at rest using industry-standard protocols (SSL/TLS)
• Secure data centers with physical access controls
• Regular security assessments, audits, and penetration testing
• Employee training on data protection and confidentiality
• Multi-factor authentication and access controls

Important Notice: While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to promptly notifying you of any data breaches as required by law.

8. DATA RETENTION

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods vary based on:

• Account Information: Retained for the duration of your account activity plus up to 7 years for legal and tax compliance
• Booking and Transaction Records: Retained for up to 7 years for accounting, tax, and legal purposes
• Marketing Communications: Retained until you withdraw consent or we determine they are no longer necessary
• Technical and Usage Data: Retained for up to 2 years for analytics and service improvement

When information is no longer required, we securely delete or anonymize it in accordance with our data retention policies and applicable laws.

9. YOUR PRIVACY RIGHTS

Under applicable data protection laws, you have the following rights regarding your personal information:

9.1 Right to Access

You have the right to request access to the personal information we hold about you, including details about how we process it.

9.2 Right to Rectification

You can request correction of inaccurate or incomplete personal information.

9.3 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal information in certain circumstances, such as when it is no longer necessary for the purposes collected or when you withdraw consent.

9.4 Right to Restrict Processing

You can request that we limit the processing of your personal information in specific situations.

9.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another service provider.

9.6 Right to Object

You may object to the processing of your personal information for direct marketing purposes or when processing is based on legitimate interests.

9.7 Right to Withdraw Consent

Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time.

9.8 How to Exercise Your Rights

To exercise any of these rights, please contact us using the details provided in Section 14. We will respond to your request within 30 days or as required by applicable law. You can also:

• Access and update your account information through your account settings
• Unsubscribe from marketing emails by clicking the “unsubscribe” link
• Adjust cookie preferences through your browser settings

10. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to enhance your experience on our website and applications. Cookies are small text files stored on your device that help us:

• Remember your preferences and settings
• Analyze website traffic and user behavior
• Provide personalized content and advertisements
• Improve our Services and user experience

10.1 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly (e.g., security, authentication)
• Performance Cookies: Help us understand how visitors interact with our website
• Functionality Cookies: Remember your choices and preferences
• Targeting/Advertising Cookies: Deliver relevant advertisements based on your interests

10.2 Managing Cookies

You can control and manage cookies through your browser settings. However, disabling certain cookies may affect the functionality of our Services. Most browsers allow you to refuse cookies or delete them after they have been stored.

11. THIRD-PARTY LINKS AND SERVICES

Our website and Services may contain links to third-party websites, applications, or services that are not operated or controlled by Travevo Consulting Limited. This Privacy Policy does not apply to such third-party services.

We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services before providing them with your personal information.

12. CHILDREN'S PRIVACY

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18 years of age. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at the details provided in Section 14.

Upon verification, we will take steps to delete such information from our systems as required by applicable law.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:

• Post the updated Privacy Policy on our website with a revised “Last Updated” date
• Notify you via email or through a prominent notice on our website or app
• Seek your consent where required by law

Your continued use of our Services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.

14. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Data Protection Officer:

For matters specifically related to data protection and privacy compliance, you may also contact our Data Protection Officer at: dpo@travevo.com

15. COMPLAINTS AND DISPUTE RESOLUTION

If you are not satisfied with how we have handled your personal information or have a complaint regarding our privacy practices, please contact us first using the details in Section 14. We will investigate and respond to your complaint within a reasonable timeframe.

If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) or other relevant data protection authority in your jurisdiction.

Acknowledgement and Consent

By using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use our Services.

* * * END OF DOCUMENT * * *