Skip to main content

Privacy Policy

This policy explains what information Travel.pk collects, how we use it, and the choices you have.

Information We Collect

Personal Information

We collect information you provide directly to us, such as when you create an account, make a booking, or contact us for support. This includes:

  • Name, email address, and phone number
  • Passport information and travel preferences
  • Payment information required by the configured checkout or transfer flow
  • Communication preferences

Automatically Collected Information

When you use our services, we automatically collect certain information about your device and usage:

  • IP address and browser information
  • Pages visited and time spent on our site
  • Search queries and booking history
  • Device type and operating system
  • After optional consent, interactions across every normal browser-rendered Travel.pk route, including rendered page/HTML content and changes, clicks, scrolling, mouse movement and values entered in ordinary non-secret fields

How We Use Your Information

We use the information we collect to:

  • Process your bookings and provide travel services
  • Send booking confirmations and travel updates
  • Provide customer support and respond to inquiries
  • Improve our services and user experience
  • Send promotional offers (with your consent)
  • Comply with legal obligations and prevent fraud
  • Analyze usage patterns to enhance our platform

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

Service Providers

We share information with airlines, hotels, and other travel service providers to complete your bookings.

Business Partners

We may share aggregated, non-personally identifiable information with our business partners for analytics and marketing purposes.

Analytics and Session-Replay Providers

After you consent, Google Analytics, Meta Pixel and Inspectlet may process usage data for analytics, marketing measurement, heatmaps, usability analysis and diagnosing interface problems. Inspectlet acts as our session-replay provider across public and signed-in pages. We do not call its identify or session-tag features to attach account names, email addresses, user IDs or booking references to a session, but identifiers may still be present in rendered page content or ordinary non-secret field values.

Legal Requirements

We may disclose information when required by law or to protect our rights, property, or safety.

Data Security

The public site uses HTTPS, and access to administrative systems is restricted. Payment security also depends on the payment provider shown during checkout and that provider's controls. No online service can promise absolute security, so please use the designated forms and avoid sending sensitive information through unapproved channels.

Your Rights and Choices

You have the following rights regarding your personal information:

  • Access: Request a copy of your personal information
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your personal information
  • Portability: Request transfer of your data to another service
  • Opt-out: Unsubscribe from marketing communications
  • Restriction: Limit how we process your information

To exercise these rights, please contact us at privacy@travel.pk or through our contact form.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

  • Essential Cookies: Required for basic site functionality (sign-in, checkout, preferences). These are always on.
  • Analytics (Google Analytics): Loads only after you choose “Accept optional tracking” in the cookie banner.
  • Marketing (Meta Pixel): Loads only after the same consent; choosing “Essential only” keeps it off entirely.
  • Session replay and heatmaps (Inspectlet): Loads only after the same consent on every normal route rendered through the Travel.pk site layout. It can process a query-free and fragment-free page URL, referrer, country or approximate location, browser/device details, visible and non-visible HTML content and DOM changes, clicks, scrolling, mouse movement, JavaScript errors, network-request details and values entered in ordinary non-secret fields to help us find usability problems.

Travel.pk does not maintain a session-replay route blacklist or apply broad field masking. Ordinary inputs, textareas, select controls and editable fields are not marked sensitive. Only password, password-confirmation and secret/API-key controls carry an Inspectlet sensitive marker so their values remain redacted even if a user clicks a Reveal button. Names, email addresses, phone numbers, booking references, support text, identity or travel details, and information rendered for signed-in customers, agents or staff may otherwise appear in a recording.

Inspectlet automatically suppresses actual type="password" fields, and browser origin isolation prevents Travel.pk's page script from reading fields inside cross-origin hosted-payment widgets. Those provider and browser protections cannot be disabled by Travel.pk.

Inspectlet's automatic single-page route detection remains disabled: this integration announces only the origin and pathname, so query strings and URL fragments are not placed in its initial or virtual pageview commands. That clean pageview URL does not remove parameters or identifiers from a separately collected referrer or network-request URL. Inspectlet may capture request URL, method, status and timing metadata plus JavaScript errors; its dashboard option for recording XHR query/response data is disabled.

Inspectlet may set cookies beginning with __insp_, including the long-term __insp_uid random identifier that can associate visits from the same pseudonymous browser. Travel.pk currently uses Inspectlet's Free plan, which advertises one month of storage. Inspectlet states that recording data is stored in AWS's US East region and permanently deleted on a rolling basis after that retention period. This involves processing outside Pakistan. You may request applicable access or deletion using the contact route below.

Change your choice anytime with “Cookie Settings” in the footer, which reopens the consent banner. Switching to “Essential only” clears accessible optional-tracking cookies and reloads the page with the optional scripts absent. Your browser's cookie controls work in addition to this, and you can also use Inspectlet's Travel.pk recording opt-out.

Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@travel.pk

Phone: +92-42-35692952

Address: 231-B Main Boulevard, Commercial Broadway, Sector B, Phase 8, DHA, Lahore, Pakistan

TechAbout Private Limited is the company named as the operator of Travel.pk. See the Trust Centre for the public identity record and complaint escalation route.