What TripAll collects about you, why, who else sees it, and what you can ask us to do with it.
TripAll MMC, Baku, Republic of Azerbaijan, decides why and how your personal data is processed on this marketplace.
A partner you book with is separately responsible for what they do with the booking details we pass to them.
What you give us: your name, email address, phone number and the language you read the site in; the details of each booking, including the travellers named on it.
What a booking requires: for some stays and tours the partner or the law requires an identity document, and we collect the document number for that purpose alone.
What happens automatically: the pages you open, the searches you run, your approximate location from your network address, and the device and browser you use.
To take a booking and get you to the partner who will honour it — which is most of it, and which we could not do without your name, your contact details and your dates.
To confirm you are who you say you are where a booking or the law requires it, and to detect payment fraud and abuse of the marketplace.
To send you what the booking needs: confirmations, changes, cancellations and password resets. These are not marketing and you cannot unsubscribe from them while you hold a live booking.
The partner you booked with, and only what they need to receive you: the names on the booking, the dates and any request you attached.
Our payment provider, which handles the card transaction, and our email provider, which delivers the messages above.
A public authority where Azerbaijani law obliges us to disclose. We disclose what is asked for and no more.
We do not hold them. Card data goes to our payment provider, which is certified to handle it, and what comes back to TripAll is the outcome of the payment and the last digits of the card.
Nobody at TripAll can retrieve your card number, because it was never ours to keep.
Booking and financial records are kept for the period Azerbaijani accounting and tax law requires, which is longer than you may expect and is not ours to shorten.
Identity document values are encrypted at rest and are deleted once the verification they were collected for is complete and the retention period for it has passed.
An account you close is deactivated and its personal details are removed, except for what the paragraph above requires us to keep.
A copy of what we hold about you; correction of anything wrong; deletion of anything we are not obliged to keep; and withdrawal of a consent you gave.
Ask at the address below. We answer within a month, and if we refuse we say which obligation we are relying on.
We set the cookies the site needs to work: your session, and the language you chose. Nothing here is used for advertising.
Some of the providers above operate outside Azerbaijan, so your data may be processed abroad under contracts that hold them to the protections described here.
Test-mode placeholder — this is not a legal document