Privacy Policy

Effective Date: [DATE]


This privacy notice (the "Privacy Notice") explains how ToursZoom LLC and its affiliates ("ToursZoom", "we", "us", "our") process and handle personal information when you book an Experience through our marketplace, inquire about Experiences, visit ToursZoom.com, use our mobile app, or otherwise receive any related services from us.

Your privacy matters to us and we take our data protection and privacy responsibilities seriously. We follow the practices described in this Notice and treat your personal information in accordance with applicable law in the places where we operate. In some cases, we may provide additional data privacy notices specific to certain products, practices, or regions. Any such additional notices are to be read in conjunction with this Notice.

We may change this Privacy Notice from time to time. If we make changes, we will revise the date at the end of this policy and, in some cases, we may provide you with additional notice (such as adding a statement to our website or sending you a notification). We encourage you to review this Privacy Policy regularly to stay informed about our information practices and the choices available to you.

Outline
What personal information we collect from you
How we use your personal information
How we share your personal information
Your rights
How to contact us
Security
Retention
Changes to this privacy notice
1. What personal information we collect from you {#1-information}
When you book an Experience or inquire about booking with us…
We collect various pieces of personal information about you when you inquire about or book Experiences through our marketplace platform. This information may be collected via our website, mobile app, customer service team, or partner travel agents. Depending on the Experience you're booking, we will typically collect:

Your first and last name, phone number, email address, billing address, and date of birth. Once you've confirmed a booking, we need additional information through our confirmation process to coordinate with independent Operators and prepare for your Experience. This includes emergency contact details, dietary preferences, and passport information (for international activities).

We may also collect personal information about co-travelers when you provide it on their behalf during booking. By doing so, you confirm you have their permission to share this information with ToursZoom and the relevant Operator for the purposes described in this Notice.

When you contact us by phone for booking assistance, support, or inquiries, calls may be recorded and monitored for quality assurance, training, and service improvement.

When you visit our website or use our mobile app…
When you use ToursZoom.com or our mobile applications, we collect information about your device and usage patterns to improve functionality and personalize your experience. This includes your IP address, browser type, device information, pages visited, search terms used, and booking interactions. We use cookies and similar technologies as described in our separate Cookie Policy.

2. How we use your personal information {#2-use}
Our primary use of your personal information is to facilitate bookings between you and independent Operators through our marketplace platform, provide customer support, and improve our services. These purposes include:

To provide, improve, and develop our marketplace services…
We use your information to process bookings, generate confirmations, coordinate with Operators, send reminders, and manage the end-to-end booking experience. For example:

Presenting your booking details and history in your account dashboard

Enabling secure payment processing and installment plans

Sharing necessary traveler details with Operators for safe Experience delivery

Sending automated notifications about upcoming Experiences, changes, or cancellations

Providing troubleshooting support when technical issues arise

Analyzing booking patterns to recommend relevant Experiences

To communicate with you…
We send transactional messages essential for booking management, such as confirmation emails, payment reminders, departure instructions, and Operator updates. With your consent, we also send marketing communications about new Experiences, promotions, or referral opportunities.

To comply with our legal obligations and operate our business…
We use information to meet tax reporting requirements, respond to lawful government requests, prevent fraud, and conduct internal business administration such as accounting and audits.

To provide, personalize, measure, and improve our marketing…
We use your booking history and preferences to suggest Experiences that match your interests. Marketing communications are sent only with your explicit opt-in consent and include easy unsubscribe options.

3. How we share your personal information {#3-sharing}
There are a few different circumstances where we share your personal information with third parties. We take great care to ensure that our business partners and Operators treat your information with the same degree of care that we do. We will not sell, distribute, or otherwise share your personal information unless we (i) have your permission and consent, or (ii) are required or permitted by law to do so.

Sharing with Operators to deliver your Experience
We share essential personal information with independent Operators to enable them to provide the Experience you've booked. This includes your full name, phone number, email address, emergency contact details, meeting time and location, and any disclosed medical conditions or special requirements. Operators use this information solely to identify you, ensure your safety, and coordinate the Experience. They are contractually prohibited from using it for marketing or sharing it further.

On-Experience service providers
We share information with affiliated and unaffiliated service providers who help deliver your booking, such as payment processors (Stripe, PayPal), customer support platforms, and cloud hosting providers. These partners are contractually bound to keep your information confidential, secure, and use it only for the specific services they provide us.

IT and business support services
We work with trusted third parties who help us operate and improve the Platform, including technology providers for website hosting, analytics, email delivery, and fraud prevention. These service providers process data on our behalf under strict data processing agreements.

Business transfers
If ToursZoom is involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We'll notify you via email and Platform notice if this occurs.

Legal requirements
We may disclose information in response to lawful requests from government authorities, courts, law enforcement, or regulators, or to protect our rights, safety, or property, or that of our users or others.

Cross-border transfers
ToursZoom operates globally, so your information may be transferred to Operators and service providers in various countries. When we transfer data internationally (particularly from the EU/UK/EEA), we use approved mechanisms like Standard Contractual Clauses to ensure appropriate protection levels.

Service providers processing personal information on our behalf do so for our purposes only and must agree to privacy obligations matching our standards.

4. Your rights {#4-rights}
You have the right to access, update, and correct inaccuracies in your personal information in our custody and control, subject to certain exceptions prescribed by law. These rights vary depending on where you live, but generally include:

You may ask us to:

Access the personal information we hold about you
Correct any inaccurate or incomplete information
Delete your personal information (subject to legal retention requirements)
Restrict or object to how we process your information
Withdraw consent for marketing communications at any time
Receive your data in a portable format (where technically feasible)

If you are a resident of the European Union, UK, or European Economic Area, you have additional rights under GDPR including the right to data portability, object to automated decision-making, and lodge complaints with supervisory authorities.

Important notice for residents of California, Florida, Hawaii, and Washington: ToursZoom does not accept bookings from residents of California, Florida, Hawaii, or Washington state. Any bookings made by residents of these states will be canceled and fully refunded immediately upon discovery.

Other regions (Canada, Brazil, Australia, etc.) have similar access and correction rights under local laws.

Your exercising of these rights may impede our ability to provide booking services or complete your Experience coordination. We'll always communicate any consequences before proceeding and provide written reasons for any refusal.

Exercising your rights is simple - use the privacy request form in your Account Dashboard or contact our Privacy Officer using the details in Section 5. We'll verify your identity and respond within 30-45 days (24 hours for access via dashboard).

6. Security {#6-security}
ToursZoom implements robust technical and organizational measures to protect your personal information from unauthorized access, loss, misuse, alteration, or destruction. Our security practices align with industry standards and applicable legal requirements.

Key security measures include:

Encryption: All data in transit uses TLS 1.3 encryption. Sensitive data at rest (e.g., payment details) is encrypted with AES-256.

Access controls: Role-based access restrictions, multi-factor authentication (MFA) for staff accounts, and regular access audits.

Secure infrastructure: Hosted on secure cloud providers (AWS/GCP) with DDoS protection, firewalls, and intrusion detection systems.

Payment security: We use PCI DSS-compliant processors (Stripe, PayPal) and never store full payment card details.

Regular testing: Annual third-party penetration testing, vulnerability scans, and security audits.

Important notice for residents of California, Florida, Hawaii, and Washington: ToursZoom does not accept bookings from these states. Any bookings by residents will be canceled and fully refunded immediately upon discovery.


While we strive for the highest security standards, no system is 100% secure. We cannot guarantee absolute security but commit to protecting your data with commercially reasonable efforts.

If you suspect a security incident, contact privacy@tourszoom.com immediately.

7. Changes to this notice {#7-changes}
We may update this Privacy Notice from time to time to reflect changes in our practices, technology, legal requirements, or business operations. ToursZoom reserves the right to modify this notice at any time.

Notification of changes:
We'll notify you of material changes by:

Posting the updated notice on our Platform with a revised "Last Updated" date

Email notification to your registered address (for significant changes affecting your rights)

Prominent banner notices on the Platform homepage

Continued use: Your continued use of the Platform or services after changes take effect constitutes acceptance of the revised notice. We encourage you to review this page periodically.

Previous versions: We maintain an archive of prior Privacy Notice versions, accessible upon request to privacy@tourszoom.com.

Effective date: This notice is current as of March 20, 2026.

TourZoom is a booking intermediary that connects travellers with independent tour operators. TourZoom does not operate, conduct, or supervise any tours. All tours are provided by third-party operators who are solely responsible for the travel experience, safety, and services delivered.