Privacy Policy
Effective Date: Jan 2026
1. Scope and Data Collection
Dtravel.pk ("the Company") collects and processes Personal Identifiable Information (”PII”) strictly necessary to facilitate travel arrangements and related services. This data includes:
- Identification Data: Full legal name, CNIC or Passport details, date of birth, and gender.
- Transactional Data: Tokenized financial information; the Company does not store raw credit card numbers or CVV codes.
- Technical Data: IP addresses, device identifiers, and geolocation data for the purposes of fraud prevention and system security.
2. Legal Basis for Processing
The Company processes personal data under the following legal frameworks:
- Contractual Necessity: To execute and manage bookings with third-party Service Providers.
- Legal Obligation: To comply with the requirements of the Federal Investigation Agency (FIA), Federal Board of Revenue (FBR), and international travel mandates.
- Legitimate Interest: To ensure platform security and enhance user experience through personalized service offerings.
3. Data Sharing and Disclosure
The Company discloses PII to third-party Service Providers (Airlines, Hotels, GDS, and Visa Authorities) solely for the execution of the User's itinerary. Data may also be shared with regulatory authorities where required by the laws of the Islamic Republic of Pakistan.
4. Data Subject Rights
In accordance with prevailing data protection standards, users possess the right to access, rectify, or request the erasure of their data, provided such requests do not conflict with statutory retention periods required for financial auditing or national security.