Privacy Policy

Information We Collect

We collect the following types of information:

• Personal Details: Name, email address, phone number, date of birth, passport information
• Booking Information: Travel dates, destinations, hotel preferences, special requests, number of travelers
• Payment Details: Currently, we accept bank transfers and coordinate payments directly with customers. We are in the process of implementing secure online payment processing through PCI DSS compliant third-party payment gateways. Once implemented, we will never store complete credit/debit card numbers on our servers - only the last 4 digits and card type will be retained for booking reference purposes.
• Website Usage Data: IP address, browser type, pages visited, time spent on site, device information
• Communication: Emails, chat messages, phone calls with customer support, booking inquiries
• Travel Documents: Copy of passport or ID for visa applications and hotel check-ins (when required)

How We Use Your Information

We use your information for the following purposes:

• Process Bookings: To confirm and manage your travel reservations
• Customer Support: To respond to inquiries, provide assistance, and resolve issues
• Marketing: To send promotional offers, newsletters, and travel deals (only with your consent)
• Service Improvement: To analyze website usage and improve our services
• Legal Compliance: To comply with applicable laws and regulations
• Security: To detect and prevent fraud, unauthorized access, or illegal activities

Sharing Your Information

We may share your information with:

• Service Providers: Hotels, airlines, tour operators, and other travel service providers necessary to fulfill your booking
• Payment Processors: Once our online payment system is implemented, we will work with secure third-party payment gateways to process transactions. Currently, payments are handled via bank transfer.
• Business Partners: Trusted partners who assist us in operating our website and conducting business
• Legal Authorities: Government authorities, law enforcement, or regulatory bodies when required by law
• Business Transfers: In connection with any merger, sale, or acquisition of our company

We do not sell or rent your personal information to third parties for marketing purposes.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:

• SSL/TLS Encryption: All data transmission between your browser and our servers is protected using industry-standard 256-bit SSL encryption
• PCI DSS Compliance: We work with PCI DSS compliant payment processors to ensure the highest level of payment card security
• Secure Payment Processing: Credit card information is never stored on our servers - all payment data is processed through certified third-party payment gateways
• Regular Security Audits: Our systems undergo regular security assessments and penetration testing
• Access Controls: Limited access to personal data by authorized personnel only, with strict authentication requirements
• Data Encryption: Sensitive information is encrypted both in transit and at rest
• Fraud Prevention: Advanced fraud detection systems monitor transactions for suspicious activity
• Secure Infrastructure: Our hosting infrastructure uses enterprise-grade security measures including firewalls and intrusion detection systems

Cookies and Tracking

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and personalize content. You can control cookie settings through your browser preferences.

Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal obligations)
• Objection: Object to processing of your data for marketing purposes
• Portability: Request transfer of your data to another service provider
• Withdraw Consent: Withdraw consent for data processing at any time

To exercise any of these rights, please contact us at info@hbstravel.ge

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

• Booking Records: Retained for 7 years for accounting, tax, and legal compliance purposes as required by Georgian law
• Payment Information: We do not store complete credit card details. Transaction records are retained according to financial regulations
• Communication Records: Customer service communications retained for 2 years for quality assurance and dispute resolution
• Marketing Data: Retained until you unsubscribe or request deletion
• Website Analytics: Anonymized usage data may be retained indefinitely for statistical purposes

You may request deletion of your data at any time, subject to our legal obligations to retain certain information.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website with a new "Last Updated" date.

Contact Us