Privacy Policy

At Bismillah Travels and Tour, we collect the minimum information necessary to fulfill your travel bookings through our technology partners:

We use your data strictly for the following purposes:

• Searching and booking flights via Duffel's API on your behalf.
• Processing secure payments and issuing receipts via duffel payment.
• Submitting required passenger data to the US Transportation Security Administration (TSA) for Secure Flight vetting.
• Sending booking confirmations, itinerary updates, and e-tickets to your registered email.
• Providing customer support for booking modifications, cancellations, and refunds.

We do not sell your personal data. However, we share necessary information with the following parties to deliver our services:

We implement industry-leading security measures to protect your data:

• All website traffic is encrypted with SSL/TLS (256-bit encryption).
• Payment data is tokenized by Duffel Payment — we never see or store your full card number.
• Duffel API communications use OAuth 2.0 authentication and encrypted channels.
• Our servers are hosted on SOC 2 compliant infrastructure within the United States.
• Regular security audits and vulnerability assessments are performed.

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent, in full compliance with the Children's Online Privacy Protection Act (COPPA). If we discover that we have inadvertently collected data from a child under 13, we will delete it immediately.

As a US-based customer, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate information.
• Request deletion of your data (subject to legal record-keeping requirements).
• Opt out of marketing communications at any time.
• Request a copy of your data in a portable format.