Privacy Policy

TripScript Tourism L.L.C (“TripScript”, “we”, “us”) respects your privacy. This policy explains what personal information we collect, why we collect it, who we share it with, and the rights you have over it. It applies to this website and to the TripScript Travel Automation System where we act as controller.

1. Controller and processor

TripScript is a software vendor. Our customers are travel businesses that license the TripScript Travel Automation System.

• As controller. For information you give us directly through this website, our sales process, and our own business operations, TripScript decides why and how that information is used. This policy governs that processing.
• As processor. For traveller and end-customer information held inside a customer’s installation of the platform, our customer is the controller and TripScript processes that information on their documented instructions, under the agreement between us. If you booked travel through a business that runs on TripScript, please contact that business first; their own privacy notice governs your data.

2. Information we collect

• Identification and contact information: name, work email address, telephone number, job title and company name, provided when you request a demo, contact sales or subscribe to updates.
• Business qualification information: business type, market, product lines of interest and approximate booking volumes, where you choose to provide them.
• Transactional information: records relating to contracts, licensing, invoicing and payments with our customers.
• Communication records: correspondence with our sales and support teams.
• Technical information: IP address, browser and device type, and pages visited, collected through server logs and, where enabled, analytics.

3. How we use it

• To respond to demo requests, enquiries and support requests
• To provide, maintain, secure and improve our software and services
• To manage contracts, licensing, invoicing and payments
• To send service communications and, where you have opted in, relevant product updates
• To detect, prevent and investigate fraud, abuse and security incidents
• To meet our legal, regulatory and accounting obligations

4. Sharing

We do not sell, rent or trade personal information. We share it only with:

• Service providers who process data on our behalf under contract, such as cloud hosting, communications, payment processing and analytics
• Travel suppliers and integrated providers, where a booking made through the platform requires it to be fulfilled
• Professional advisers, auditors and insurers, where necessary
• Public authorities, where we are legally required to disclose, or to establish, exercise or defend legal claims

5. Where your data is held

TripScript infrastructure runs on Amazon Web Services in the me-central-1 (United Arab Emirates) region. Personal information processed by the platform is stored in the UAE by default. Where a transfer outside the UAE is necessary, for example to a travel supplier fulfilling a booking, or to a service provider located elsewhere, we take steps to ensure an appropriate level of protection through contractual safeguards.

6. Data security

We apply technical and organisational measures appropriate to the risk, including scoped API credentials and isolated customer configuration, encrypted transport, hosted payment handling so that card data does not transit our customers’ storefronts, access controls, bot protection on public forms, and operational alerting on security and error events. No system is perfectly secure, and we cannot guarantee absolute security.

7. Retention

We keep personal information only as long as necessary for the purposes described here, including to meet legal, tax and accounting requirements, and then delete or anonymise it. Where we act as processor, retention is governed by our customer’s instructions and the agreement between us.

8. Your rights

Subject to applicable law, you may request access to the personal information we hold about you, ask us to correct it, ask us to delete it, object to or restrict certain processing, and withdraw consent where processing is based on consent.

Account deletion is implemented in the product. End users of platforms built on TripScript can delete their own account directly through the application, and the request is processed by the platform rather than handled manually.

To exercise a right, contact [email protected]. If your data sits inside a customer’s installation, we will refer your request to that customer as controller.

9. Cookies

This website uses cookies and similar technologies that are necessary for the site to function and, where enabled, to measure usage. You can control cookies through your browser settings; disabling some cookies may affect how parts of the site work.

10. Children

Our services are directed at businesses. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. The effective date at the top of this page indicates when it was last revised. Material changes will be notified through this website or directly to affected customers.

12. Contact

TripScript Tourism L.L.C
#116, KML Building, Meydan Street, Dubai, U.A.E
[email protected]
+971 4 258 0069