Effective Date: January 1, 2026

At Exotila ("we", "us", or "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we gather, use, and secure your information when you access our booking portal, mobile application, or interact with our customer support teams.

1. Information We Collect

To provide smooth travel bookings and itineraries, we collect various types of personal information, including:

• Identity & Contact Data: Full name, email address, phone number, residential address, and passport details (when required for international flights or hotel bookings).
• Booking & Transaction Data: Details about your travel reservations, flights, hotels, car rentals, and payment history. Note that financial card information is processed securely via PCI-DSS compliant gateways; we do not store full credit card numbers.
• Technical Data: IP address, browser type, device information, and cookies that track how you navigate our portal to improve user experience.

2. How We Use Your Information

We use the data collected for legitimate business and operational purposes, such as:

• Processing and confirming your travel bookings with airlines, hotels, and tour partners.
• Sending booking confirmations, itinerary updates, flight alerts, and customer service notices.
• Providing personalized travel recommendations and promotional offers (only if you have opted in).
• Complying with legal obligations, fraud prevention, and resolving platform disputes.

3. Sharing of Information

Exotila works with trusted global partners to fulfill your travel arrangements. We may share your data with:

• Travel Providers: Airlines, hotels, and tour operators necessary to secure your reservation.
• Service Providers: Payment processors, cloud infrastructure hosts, and analytics providers who assist our business operations.
• Legal Authorities: When required by law enforcement, government bodies, or airport security regulations.

4. Data Security

We implement robust technical and organizational security measures—including SSL encryption, secure servers, and restricted database access—to protect your personal information against unauthorized access, loss, or alteration.

5. Your Data Protection Rights

Depending on your region (such as GDPR in Europe or CCPA in California), you have rights regarding your personal data, including the right to access, correct, or request the deletion of your information. You can manage your account data directly from your Exotila profile dashboard.

6. Changes to This Policy

We may update this Privacy Policy from time to time to reflect operational or regulatory adjustments. Any changes will be posted directly on this page with a revised effective date.

7. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please reach out to our legal and compliance desk at privacy@exotila.com.