1. Introduction

At GAIA Tours (“we”, “us”, or “our”), we respect your privacy and are committed to protecting your personal data. This Privacy Policy describes how we collect, process, store, and safeguard your personal information when you visit or make a booking through https://gaia-toursjo.com (the “Site”), or when communicating with us via messaging platforms such as WhatsApp.

By accessing the Site, registering an account, or purchasing any of our tourism, transfer, or accommodation services, you acknowledge the data practices described in this policy.

2. Information We Collect

We collect information that is strictly necessary to organize, secure, and operate travel itineraries across Jordan:

• Personal Identification Details: Full legal name (as written on passports/identity documents), nationality, date of birth, and passport/national ID numbers (required for checkpoint permits, Jordan Tourism Board protocols, and archaeological entry manifests).
• Contact Details: Email address, mobile telephone number, and WhatsApp contact details.
• Travel & Logistics Data: Flight arrival and departure details, accommodation addresses, pickup/drop-off locations, selected tour dates, and passenger counts.
• Payment Information: Billing names, contact details, and transaction reference numbers. Note: Credit/debit card numbers are encrypted and processed directly by our authorized third-party payment gateway providers; we do not store full payment card numbers or CVV codes on our servers.
• Health & Dietary Requirements: Any voluntary medical conditions, physical mobility limitations, or dietary preferences you disclose to ensure tour safety.
• Technical & Usage Information: IP address, device type, browser specifications, language preference, and interactions on our website collected via cookies and server logs.

3. How We Use Your Information

We use personal data for clear operational and legitimate business reasons:

• Booking Fulfillment: To reserve tour guides, arrange private transportation, schedule airport transfers, confirm hotel rooms, and manage event tickets (such as GAIA Night).
• Customer Communication: To issue booking confirmations, receipts, itinerary adjustments, and real-time pickup updates via email, SMS, or WhatsApp.
• Safety & Compliance: To verify traveler identity at desert/border checkpoints and fulfill statutory duties mandated by the Jordanian Ministry of Tourism and Antiquities.
• Platform Optimization: To diagnose server errors, resolve routing issues, and maintain website security.
• Partner Portal Management: To process partner applications submitted via /partner/apply.

4. Sharing and Disclosure of Information

We do not sell, rent, or trade your personal data. We only share personal details with trusted third parties necessary to complete your travel arrangements:

• Service Operators: Dedicated local drivers, licensed tour guides, and hotel/camp operators involved in executing your itinerary.
• Payment Gateway Intermediaries: Regulated electronic payment processors ensuring secure transactions.
• Regulatory & Security Authorities: Jordanian government institutions, border control officials, or tourist police where required by law.

5. Cookies and Web Technologies

Our website utilizes essential and analytical cookies to provide functional features:

• Essential Cookies: Required to maintain user sessions, remember language selection (/en/ or /ar/), and support checkout processes.
• Performance & Analytics: Anonymous metrics to understand user flow, optimize page rendering, and improve navigation.

You can modify your browser settings to decline non-essential cookies, though certain interactive checkout features may be affected.

6. Data Retention and Security

We implement SSL/TLS encryption across our entire platform, strict role-based access restrictions, and regular server maintenance to protect your information against unauthorized access, loss, or misuse.

We retain personal booking information only for as long as necessary to complete the booked travel arrangements, fulfill administrative and tax compliance requirements, or settle legal claims.

7. Your Rights

Depending on applicable privacy regulations, you are entitled to:

• Request a copy of the personal information we hold about you.
• Request correction of inaccurate or incomplete personal records.
• Request the deletion of your account or personal details, subject to statutory retention mandates (such as tax and accounting regulations).
• Opt out of non-essential communications at any time.

8. Policy Revisions

We reserve the right to revise this Privacy Policy periodically to reflect operational, legal, or regulatory updates. Any changes will be posted immediately to this page along with an updated “Last Updated” date.