Privacy Policy

1. Information we collect

We may collect your name, email address, phone number, account and authentication details, travel dates, routes, hotel choices, passenger and booking details, messages, and special requests. When needed for a booking, you may also provide passport names, passport numbers, nationality, or other travel-document information. The app may store contact details on your device to make future forms easier to complete.

2. How we use information

We use information to answer enquiries, prepare quotes, create and service bookings, verify payments, issue confirmations and travel documents, provide customer support, send service notifications, manage accounts and loyalty benefits, prevent fraud, secure the service, meet legal and accounting duties, and improve service reliability.

3. Who receives information

We share only the information reasonably needed with airlines, hotels, tour operators, booking and technology suppliers, payment processors, email and notification providers, professional advisers, regulators, and authorities where required. Suppliers may process information in other countries under their own privacy terms. Special-request details may also be sent to our authorised staff by email for review.

4. Payments

Online payments are processed through a third-party payment gateway. The gateway handles payment credentials under its own terms. We keep payment references, status, amount, and related booking details so we can verify payment and support the booking.

5. Retention

Special-request passport and traveler details are retained for 90 days after closure. Unfinished requests are retained for 12 months. Legally required booking, payment, refund, supplier, accounting, fraud, and loyalty records are retained for 10 years; nonessential personal information is anonymized after 90 days when safe. Active accounts are retained until deletion. Inactive accounts are reviewed after 3 years; accounts with bookings, balances, or holds are not deleted automatically. Device registrations are retained for 12 months of inactivity and until a deletion request. Chats and session identifiers are retained for 12 months. Raw search analytics are retained for 3 years. App and error logs are retained for 90 days, except security and fraud logs, which are retained for 12 months. Expired temporary authentication records are deleted within 24 hours. Legal holds pause deletion.

6. Your choices and requests

Please provide only information needed for your enquiry or booking. Subject to applicable law and necessary booking, legal, or record-keeping restrictions, you may ask to access, correct, or delete your personal information, or object to certain uses. Submit requests through your signed-in Account or email info@dt-tour.com; we verify identity before acting. We retain a non-identifying audit of requests for 6 years.

7. Security and updates

We use reasonable administrative and technical safeguards, but no internet or storage system can be guaranteed completely secure. We may update this policy when our services or legal obligations change; the date above shows the current version.

Optional AI travel assistance

AI addendum approved: 9 October 2026

DT Tours' AI chat and AI trip builder use Google Gemini through Replit. If you choose to allow AI sharing, your provided chat display name, up to 20 recent chat messages, or your trip-builder preferences (destination, number of nights and travellers, travel style and interests) are sent to these providers to generate a response or travel estimate. AI estimates are not confirmed availability, bookings or guaranteed prices.

We ask for permission before these features send your input to the AI providers. You may refuse and continue to use ordinary travel searches and bookings. Permission applies only to the open feature session and is reset when you close the feature or switch accounts. Declining does not send the attempted AI request.

Do not enter passwords, passport numbers, payment-card information or other sensitive details in AI inputs. We filter some obvious sensitive patterns before transmission, but this is not a guarantee that every personal detail is detected.

Before an accepted AI request proceeds, DT Tours records an anonymous reference, the disclosure version, the acceptance time, the feature and the disclosure language. The consent record does not contain your account identifier, IP address, message text or trip details. This record is separate from existing chat and operational records described in our privacy policy.

Anonymous AI consent records are retained for 12 calendar months after acceptance, then deleted unless a legal hold pauses deletion. Existing booking and other retention periods remain unchanged.

Processing may take place outside your country. Provider handling is governed by the applicable Replit and Google terms. We do not promise zero retention, that processing occurs only in Kuwait, or that all provider logging is disabled.

You may contact info@dt-tour.com for privacy requests.