privacy policy

Effective Date: 03-05-2025

1. Introduction & Scope

Welcome to Expedia Itinerary. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.expediaitinerary.com (the “Website”) or use our services.

This policy applies to all information collected through our Website, as well as any related services, sales, marketing, or events. Please read this Privacy Policy carefully to understand our practices regarding your personal data and how we will treat it.

2. Information We Collect

2.1 Information You Provide to Us

We may collect personal information that you voluntarily provide to us when you:

  • Create an account
  • Book travel services
  • Sign up for our newsletter
  • Contact our customer service
  • Participate in promotions or surveys
  • Leave reviews

This information may include:

  • Contact information (name, email address, phone number, postal address)
  • Account credentials (username, password)
  • Payment information (credit card details, billing address)
  • Travel preferences and details (travel dates, destinations, accommodation preferences)
  • Passport or ID information for booking purposes
  • Any other information you choose to provide

2.2 Information We Collect Automatically

When you visit our Website, we may collect certain information automatically, including:

  • IP address
  • Device type and operating system
  • Browser type and version
  • Time and date of your visit
  • Pages viewed and features used
  • Clickstream data
  • Approximate location data (country or city level)
  • Referring website or source

2.3 Cookies and Similar Technologies

Our Website uses cookies and similar tracking technologies to collect and store information. These technologies help us analyze traffic patterns, remember your preferences, and improve your browsing experience. We use:

  • Essential cookies: Required for the website to function properly
  • Performance cookies: Help us understand how visitors interact with our website
  • Functionality cookies: Allow us to remember your preferences and customize your experience
  • Advertising/targeting cookies: Help us and our advertising partners deliver relevant ads

3. How We Use Your Information

We use your personal information for the following purposes:

  • To provide our services: Process bookings, manage your account, and fulfill your requests
  • To communicate with you: Send confirmations, updates, support messages, and respond to inquiries
  • To personalize your experience: Offer tailored content, recommendations, and travel options
  • To process payments: Bill you for services and manage transactions
  • To improve our services: Analyze usage patterns, conduct research, and develop new features
  • For marketing purposes: With your consent, send newsletters and promotional communications
  • To ensure security: Protect our Website, detect fraud, and ensure safety
  • To comply with legal obligations: Meet regulatory requirements and respond to legal requests

4. Cookies & Tracking Technologies

4.1 Types of Cookies We Use

  • Necessary cookies: Enable basic functions and are required for the website to work properly
  • Performance cookies: Help us understand how visitors interact with our website (e.g., Google Analytics)
  • Functional cookies: Allow the website to remember choices you make and provide enhanced features
  • Targeting/advertising cookies: Used to deliver customized advertisements based on your interests

4.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse or accept cookies, delete specific cookies, or block cookies from particular sites. However, blocking certain cookies may impact your experience on our Website.

You can also opt out of certain third-party advertising cookies through services like:

  • Network Advertising Initiative (NAI)
  • Digital Advertising Alliance (DAA)
  • European Interactive Digital Advertising Alliance (EDAA)

5. Third-Party Sharing

5.1 Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as:

  • Payment processors
  • Cloud hosting providers
  • Customer support services
  • Email delivery services
  • Analytics providers
  • Marketing and advertising partners

5.2 Travel Partners

To fulfill your bookings, we may share necessary information with:

  • Airlines, hotels, car rental companies
  • Tour operators
  • Travel insurance providers
  • Other travel service providers

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your data may be transferred as part of that transaction.

5.4 Legal Requirements

We may disclose your information if required by law, governmental request, or when necessary to protect our rights, privacy, safety, or property.

6. User Rights & Choices

Depending on your location, you may have certain rights regarding your personal data:

6.1 Your Rights

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal data in certain circumstances
  • Restriction: Request restriction of processing in certain circumstances
  • Data portability: Request transfer of your data to another service in a structured format
  • Objection: Object to processing based on legitimate interests or direct marketing
  • Withdraw consent: Where processing is based on consent, withdraw consent at any time

6.2 How to Exercise Your Rights

To exercise these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by applicable law (typically within 30 days).

6.3 Marketing Communications

You can opt out of marketing communications at any time by:

  • Clicking the “unsubscribe” link in any marketing email
  • Updating your communication preferences in your account settings
  • Contacting us directly at [email protected]

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The retention periods depend on the type of information:

  • Account information: Until you delete your account or request deletion
  • Booking records: Typically 7 years for tax and legal purposes
  • Payment information: As required by financial regulations
  • Marketing preferences: Until you unsubscribe or request deletion
  • Website usage data: Typically up to 26 months

When we no longer need personal information, we securely delete or anonymize it.

8. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of sensitive information (HTTPS, SSL/TLS)
  • Secure payment processing (PCI DSS compliance)
  • Access controls and authentication mechanisms
  • Regular security assessments and penetration testing
  • Employee training on data protection
  • Physical and electronic safeguards

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. International Transfers

We may process your information in countries outside your residence, including countries that may have different data protection laws. When we transfer personal data internationally, we implement appropriate safeguards such as:

  • Standard Contractual Clauses approved by the European Commission
  • Data Protection Agreements with third parties
  • Certifications and compliance frameworks

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we ensure that transfers comply with applicable data protection laws.

10. Children’s Privacy

Our Website is not intended for children under the age of 16, and we do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at [email protected], and we will take steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated version will be indicated by an updated “Effective Date” at the top of this policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If we make material changes to this policy, we will notify you by email or through a notice on our Website prior to the changes becoming effective.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: [email protected]

Postal Address:
[Your Company Name]
[Street Address]
[City, State/Province, ZIP/Postal Code]
[Country]

Data Protection Officer (if applicable):
[DPO Email or Contact Information]

13. Jurisdiction-Specific Provisions

13.1 California Residents (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

  • Right to know what personal information we collect and disclose
  • Right to delete certain personal information
  • Right to opt-out of the sale or sharing of personal information
  • Right to limit use of sensitive personal information
  • Right to non-discrimination for exercising your rights

To exercise these rights, contact us using the information in Section 12.

13.2 European Economic Area, United Kingdom, and Switzerland (GDPR)

If you are in the EEA, UK, or Switzerland, we process your personal data in accordance with the General Data Protection Regulation (GDPR) or equivalent laws. The legal bases for processing your information include:

  • Performance of a contract when providing our services
  • Legitimate interests in operating and improving our business
  • Compliance with legal obligations
  • Consent, where you have provided it

You have the right to lodge a complaint with your local data protection authority if you have concerns about how we process your personal data.

13.3 Other Jurisdictions

Additional provisions may apply based on your location. We are committed to complying with applicable data protection laws wherever our users are located.