Privacy policy

1. Controller

Fadidi Travel (tax ID [to be completed]), registered at [to be completed]. For any data protection matter: [to be completed].

2. Data we process

Account: name, email, phone, country, language and currency.

Bookings and payments: services booked, dates, amounts and payment status. Card details are handled directly by the payment gateway; we do not store them.

Flight passengers: name, date of birth, sex, travel document and contact details, as required by the airline.

Documents you choose to upload (passport, insurance) and your messages in the help chat.

During a transfer or an SOS alert, the location you share.

Technical security data: IP address, browser or device type and access logs.

3. Purposes and legal bases

Managing your account, bookings, payments, tickets and vouchers, and helping you (including in the chat): performance of the contract (art. 6.1.b GDPR).

Issuing invoices, keeping accounts and passing on the passenger data required by airlines and border authorities: legal obligation (art. 6.1.c GDPR).

Sending you offers by email: only with your consent (art. 6.1.a GDPR), which you can withdraw at any time on this page or through the link in each email.

Mobile notifications: with the permission you give on your device, which you can remove in its settings.

Protecting the service against fraud and abuse (captcha, search limits, security logs): legitimate interest (art. 6.1.f GDPR).

Handling an SOS alert: protecting your vital interests or those of another person (art. 6.1.d GDPR).

We do not take automated decisions with legal effects on you, nor do we profile you for that purpose.

4. Artificial intelligence assistant

The help chat is answered first by an artificial intelligence assistant (Claude, by Anthropic), and we tell you so in the chat itself. It receives your messages and a summary of your bookings only to reply to you; under the provider's terms, they are not used to train its models. You can ask to be helped by a member of our team at any time.

5. Who we share your data with

Only those we need to provide the service, as processors or, where applicable, as independent controllers:

Website hosting and database: Vercel and Supabase.

Payments: Stripe, PayPal, Wave and PayDunya (Orange Money), and your bank for transfers.

Flights: Duffel and the airline that issues your ticket.

Tours and transfers: our partner agency at the destination and the guides, drivers and accommodation that provide the service in Senegal and The Gambia, with only the data they need.

Communications: our email delivery provider, Meta (WhatsApp) if you write to us there, and Expo and Google for mobile notifications.

Security: Cloudflare (captcha). Chat: Anthropic.

Authorities and courts, when required by law.

6. International transfers

Some of these providers are based in the United States or process data there. They do so with appropriate safeguards: the EU-US Data Privacy Framework where the provider is certified, or the European Commission's standard contractual clauses.

To provide the services at your destination, we send the travellers' data needed by guides, drivers and accommodation to Senegal and The Gambia (art. 49.1.b GDPR: necessary for the contract you ask us for).

7. How long we keep it

Account data: for as long as you keep your account. When you delete it, data is erased as explained below.

Bookings, payments and invoices: 6 years (Spanish Commercial Code) or any longer period required by tax law.

Chat messages, incidents and SOS alerts: for as long as they may be needed to handle claims, up to 5 years.

Consents: for as long as we must be able to prove you gave them.

8. Your rights

You can request access, rectification, erasure, objection, restriction of processing and portability of your data, and withdraw your consent at any time, on this page (when signed in) or by writing to [to be completed]. We reply within one month at the latest.

If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

9. Minors

Bookings must be made by an adult. The data of minors travelling is provided by their parent or guardian when booking.

10. Cookies

We only use technical cookies and local storage that the website needs to work. See the cookie policy (fadiditravel.com/cookies).