1. What we collect

Order data — guest name(s), email, phone (optional), passport number (optional), date of birth (optional), destination, travel dates, chosen hotel and confirmation style.
Payment data — handled entirely by Stripe, PayPal or PayFast; we receive only a payment reference and status, never card numbers.
Verification logs — when a document's QR is scanned, we log the confirmation reference, IP and time to protect against fraud.
Technical data — standard server logs and a session cookie required for checkout.

2. How we use it

To create and deliver your confirmation, operate the public verification portal, provide support, prevent abuse, and meet legal obligations. We do not sell personal data.

3. Verification portal visibility

Anyone with your confirmation code and guest last name (e.g. an officer scanning your QR) can see booking details needed for verification: hotel, city, dates, guest name and status. This is the document's purpose; keep the code private otherwise.

4. Retention

Order records are retained as long as needed for verification validity, support and legal/accounting requirements. You may request deletion of your data by contacting us; records needed for legal compliance may be retained in minimised form.

5. Sharing

Data is shared only with our payment processors (Stripe/PayPal/PayFast), our email delivery provider, and our hosting/verification infrastructure — each only what they need to perform their function.

6. Your rights

You may request access, correction or deletion of your personal data at [email protected].

7. Cookies

We use a session cookie (checkout), a currency preference cookie, and payment-gateway cookies during checkout. No advertising trackers are set by default.

Privacy Policy