XcelTrip.com Privacy Policy

This Privacy Policy describes the policies and procedures of XcelTrip Pte Ltd (“XcelTrip”) on the collection, use and disclosure of your information when you use the XcelTrip Services, via the XcelTrip website, on your mobile phone, or through one of XcelTrip’s applications for mobile devices (including but not limited to iOS/Android applications). We will not use or share your information with anyone except as described in this Privacy Policy. This Privacy Policy does not apply to information we collect by other means (including offline) or from other sources.

What information we collect from you?

XcelTrip receives and stores the information that you provide to us via various forms. While booking hotels, you are asked to provide information including but not limited to name, email and contact number. However, based on the booking reservations, we may ask you additional information like address, date of birth, personal information of any other accompanying guests, telephone number and any preferences that you have for your trip. We may also receive and store profile images if you upload them on your profile. We also require you to provide the payment information but we do not store any information related to the payment.

Various other information like reviews, likes history, search history, website behavioral data will be collected for the analytical purposes.

For registered users, we will collect the basic information along with other information such as IP address, date and time of your service usage, browsers information, Operating System information and location co-ordinates so that we can show the login history to our users in their respective dashboards. This way, they will know if their account is compromised from any other locations and if so, can revoke access by simply deleting existing authentication tokens.

If you are using mobile device, we will collect unique device identifier of the mobile to send various push notifications to the user’ mobile devices. We will also collect information such as mobile version, operating system of the mobile devices, device-specific settings, app crashes logs and other system activities.

If you use SOS feature form our mobile app, we will track the real-time location co-ordinates of your position to notify your loved ones about your status.

How we use the information we receive/collect

We may use information received/collected to:

  • Provide you with the requested services, such as creating a user account, processing and confirming your reservation, and communicating with you aboudt services requested (e.g., pre-reservation or post booking chat support excluding credit card number, special request, cancellations, rewards)
  • Send you email marketing communications about products and services that may be relevant to you
  • Conduct surveys or provide you with information about our services on our website/applications or on other websites you may visit
  • Maintain and improve the website/applications, tailor the user experience and for internal training
  • Protect security of your information and the website/applications
  • Exercise a right or obligation conferred or imposed by law, including responding to request and legal demands

If you have not finalized a reservation online, we may send you a reminder to continue with your reservation. We believe that this additional service is useful to you because it allows you to carry on with a reservation without having to search for the accommodation again or fill out all the reservation details from scratch. You may opt-out of receiving these reminders as detailed below under "Opting Out of Marketing Communications from Us."

Please note that the confirmation emails and text messages sent after your booking, as well as the guest review emails sent after your departure, are not marketing messages. These messages are part of your accommodation reservation process. Respectively, they contain information for you to check in at your booked accommodation, and tools to optionally rate that accommodation after your stay. You will continue to receive them, even if you have opted out of our marketing messages.

How you can access your information?

You can access your entire information from the profile page which is only accessible once you are logged into the website/applications. You can update all the basic information as you desire using the profile update form. However, to destroy all your data, you need to contact our support team at following email address:customercare@xceltrip.com. Once you close your account, you will lose access to it permanently. Even after closing the account, we may retain some information for the analytical purpose as well as for record keeping integrity for a period of time, after which we will ensure such information is securely destroyed. Information we may retain includes, for example, accounting data, data for auditing purposes and transactional information and/or information required to be retained for compliance with law.

With whom we share your information

Subject to the provisions of any applicable law, your personal information may be disclosed, for the purposes to the following:

  • Call center representatives

    We may share your information with the call center representatives so that they can better serve you with accurate guidance and information. Not only they will be able to know your problem with greater accuracy by analyzing the data, they will also be able to solve your problem with greater speed.

  • Support Staffs

    We may share your personal information with our own support staff who works as your first point of contact to solve your queries and problems. Having the access to your personal information will help them to solve your issues.

  • Business Partners

    We may share your information with our business partners with whom we jointly offer products and services. Information of those partners with whom we jointly offer products and services will be mentioned in the website so that you will have the transparent information about our partners. If you choose to sign up for these optional, jointly-offered services, we may share information about you, including your personal information, with those business partners so that they can contact you directly by email or post about the products and services that you have signed up to receive. Such personal information may include your contact information as well as other information necessary to provide the travel product or service you have requested. Those third party business partners will not use your personal information for direct marketing purposes, except when permitted to do so by applicable law. However, please note that we do not control the privacy practices of these third-party business partners and once you leave the XcelTrip platform, the privacy policy and terms and conditions will be out of our control.

  • Channel Managers

    We may share your information to the various channel managers to enable easier management of inventories of properties.

  • Suppliers

    We may share the information with our various suppliers such as hotels, airlines and activity providers, who fulfill your travel reservations. Throughout this website/applications, all services provided by a third-party supplier are described as such. We encourage you to review the privacy policies of any third-party travel supplier whose products you purchase through this website/applications. Please note that these suppliers also may separately contact you as necessary to obtain additional information about you, facilitate your travel reservation, or respond to a review you may submit.

  • Third party vendors

    We may share the information to the third party vendors like payment processors, business analytical partners, customer service representatives and other marketing partners, who provides services and products on behalf of us. We may authorize third party vendors to collect the necessary information to execute their business processes and are not permitted to share or use the information for any other purpose.

  • Companies within our corporation

    Any companies directly registered under our corporation may have access to the data for business challenges.

 Cookies and other web technologies

When you use the Service, we use persistent and session cookies and other tracking technologies to: (a) store your username, password and authentication tokens; (b) analyze the usage of the Service; (c) customize the Service to your preferences; and (d) control the advertising displayed by the Service. A persistent cookie remains on your computer after you close your browser so that it can be used by your browser on subsequent visits to the Service. Persistent cookies can be removed by following your web browser’s directions. A session cookie is temporary and disappears after you close your browser. You can reset your web browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of the Service may not function properly if the ability to accept cookies is disabled.

We may also use other Internet technologies, log files, clear GIFs, Flash technologies, and other similar technologies, to deliver or communicate with cookies and track your use of the Service. We also may include clear GIFs in HTML-based emails sent to our users to determine whether the message has been opened. As we adopt additional technology, we may also gather additional information through other methods.

We use these automated technologies to collect and analyze certain types of information we consider to be non-personal information, including: (a) information related to the devices you use to access or interact with the Service, such as: IP addresses, geolocation information, unique device identifiers and other information about your mobile phone or other mobile device(s), browser types, browser language; and (b) information related to the ways in which you interact with the Service, such as: referring and exit pages and URLs, platform type, the number of clicks, domain names, landing pages, pages viewed and the order of those pages, the amount of time spent on particular pages, the date and time you used the Service, and other similar information. We may also capture other data, such as search criteria and results.

XcelTrip discloses a subset of this automatically collected information publicly. Specifically, you consent to XcelTrip’s disclosure of information related to the ways in which you interact with the Service, such as: landing pages, pages viewed and the order of those pages (including questions and answers viewed), the date and time you used the Service, and other similar information on the Service to other XcelTrip users, along with your name and profile picture. If you do not wish to have this information disclosed to the public, you may opt out of this feature.

We may collect different types of information about your location, including general information (e.g., IP address, zip code) and more specific information (e.g., GPS-based functionality on mobile devices used to access the Service), and may use that information to customize the Service with location-based information and features. If you access the Service through a mobile device and you do not want your device to provide us with location-tracking information, you can disable the GPS or other location-tracking functions on your device, provided your device allows you to do this.

XcelTrip may allow third parties to serve advertisements on the Service and on third-party services and use other third parties to help us collect and analyze information about your use of the service, generate aggregate site usage statistics and provide content sharing services to support the Service. These third parties may also use cookies and similar technologies to collect similar non-personal information about your use of the Service. XcelTrip does not control the third parties’ use of such technologies and their use is governed by those parties’ privacy policies.

 How we protect your information?

Security of your data is our highest priority. To protect your data, we are using end to end SSL encryption to prevent any spoofing of your data. Also, on the server, we are using encryption with disk storage on the database server so that no one can read your data. The server is designed in such a way that no one has access to the servers on which any data or code is hosted onto the platform. Only few select authorized personnel’s have access to the servers through secured VPN connection and even they may do so only for permitted business procedures. We have setup firewalls to thwart unwanted connections to the server instances. A proper audit of the system is carried out to make sure that no known security loopholes exist. The third party service providers with respect to payment gateway and payment processing are all validated as compliant with the payment card industry standard (generally referred to as PCI compliant service providers).

We assume no liability or responsibility for disclosure of your information due to errors in transmission, unauthorized third-party access, or other causes beyond our control. You play an important role in keeping your personal information secure. You should not share your user name, password, or other security information for your XcelTrip account with anyone. If we receive instructions using your user name and password, we will consider that you have authorized the instructions.

Children's privacy

We only collect children information provided by you while booking hotels/airlines. Since this is travel OTA platform, children under the age of 18 (unless permitted under applicable local laws) will not be served directly and can only use the services of the XcelTrip platform with the consent of the parents or guardians person. If the children under the age of 18 purchases the services from our website and if we become aware of such activity, we reserve the right to revoke the purchase.

 External Links

We may put some external links to link the contents of our third party vendors and other suppliers so that if you wish, you can click the link and see their detail. However, once you leave the XcelTrip platform website/applications, the privacy policy, terms & conditions and other policies of XcelTrip will not be applicable. You need to go through the policies and terms of each third party vendors.

Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy from time to time to reflect changes in the law, our data collection and use practices, the features of our services, or advances in technology. Please check this page periodically for changes. Use of information we collect is subject to the Privacy Policy in effect at the time such information is used. If we make any material changes to this Privacy Policy, we will post the changes here. Please review the changes carefully. Your continued use of the Services following the posting of changes to this Privacy Policy will constitute your consent and acceptance of those changes..

California Privacy Rights

California law permits users who are California residents to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their personal information (if any) for their direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those parties. To make such a request, please contact us at the information provided the CONTACT US section.

GDPR

EU General Data Protection Regulation (GDPR) has provided the below rights to the EU residents:

  • Right to information - including contact details to the DPO, the purposes for processing Personal Information and the rights of the individual.
  • Right to access the Personal Information that are processed
  • Right to erasure (”Right to be forgotten”)
  • Right to rectification
  • Right to restriction of processing
  • Right to data portability of the Personal Information supplied to XcelTrip by the EU resident
  • Right to object (opt-out) to processing (unless XcelTrip otherwise has compelling legitimate grounds)

EU residents can exercise these rights by raising a request directly atcustomercare@xceltrip.com or contact usat the information provided in CONTACT US section.

U.S.-SWISS SAFE HARBOR FRAMEWORK

As described in our Safe Harbor Privacy Statement, we comply with the US-EU Safe Harbor Framework and the US-Swiss Safe Harbor Framework as set forth by the US Department of Commerce regarding the collection, use and retention of personal information from European Union member countries and Switzerland.

SAFE HARBOR PRIVACY STATEMENT

SCOPE OF THIS PRIVACY STATEMENT

XcelTrip Pte Ltd and its affiliated companies and subsidiaries (collectively, “XcelTrip”) respect your privacy. This Privacy Statement applies to personal data collected by XcelTrip through the Xceltrip.com website, and other websites which we operate and on which we post a direct link to this Privacy Statement. It may not apply to third party website with which XcelTrip provides services. Such third party websites may have their own privacy statements, which we encourage you to review.

Please also note that co-branded websites (websites where XcelTrip presents content together with one or more of our business partners) may be governed by additional or different privacy statements. Please refer to the privacy statement on those websites for more information about applicable privacy practices.

As used in this Privacy Statement, “personal data” means any information relating to an identified or identifiable natural person (‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

THE PERSONAL DATA WE COLLECT

XcelTrip collects personal data directly from you when you interact with us through our websites, including, without limitation, when you:

  • Create a user account (individual or corporate);
  • Make online purchases;
  • Request support;
  • Participate in surveys or evaluations;
  • Participate in promotions, contests, or giveaways;
  • Apply for employment; or
  • Submit questions or comments;

To the extent permitted by applicable law, the types of personal data collected directly from you may include, without limitation:

  • Information used to communicate with you, such as name, title, company name, email address, telephone number, postal address and language;
  • Information that XcelTrip maintains in association with your account, such as your username, password, payment information, purchase records, credit and billing status and support inquiries; and
  • Information contained in your job inquiries or applications, such as resume, cover letter, age, education, professional history and contact details.

We may also collect information relating to your use of our websites and response to our emails through the use of various technologies. Collecting information in this manner allows us to analyze the effectiveness of our websites and our marketing efforts, personalize your experience and improve our interactions with you. For more information about the technologies we employ for these purposes, see the “Cookies and Other Technologies” section below.

We may also supplement the personal data we collect from you with additional personal data we receive from third parties, such as your employer, our customers, and our business partners where you purchased any of our products or services through such business partners. We do this to help us improve the overall accuracy of the information and its completeness and to help us better tailor our interactions with you.

HOW WE USE (PROCESS) YOUR PERSONAL DATA

XcelTrip uses personal data in an effort to enhance your experience on our websites. In addition, we may use personal data we collect about you to:

  • Identify and Authenticate You. We use your personal data to verify your identity when you access and use our Services and to ensure the security of your personal data. This includes your creation of an account that is associated with your personal data. The personal data that may be collected and processed for this purpose includes: name, title, company name, email address, telephone number, postal address, language, username and password. We process this information in order to comply with our contractual obligations to you.
  • Fulfill Your Requests. If you request something from XcelTrip, such as a product or service, a call back, a newsletter subscription, or other materials, we use the personal data you provide to respond to your request. We or our representatives may also contact you as part of customer satisfaction surveys or for market research purposes. Where required by applicable law, we will obtain your consent before sending marketing messages. The personal data that may be collected and processed for this purpose includes: name, title, company name, email address, telephone number, postal address, language, username, payment information, purchase records, credit and billing status, and support inquiries. We process this information in order to comply with our contractual obligations to you when responding to your requests. In other cases it is in our legitimate business interests to be able to provide customers and prospective customers with information, goods or services they request.
  • Provide You with Information About Our Products and Service. XcelTrip may use your personal data to notify you about product and service offerings as well as events that we believe may be of interest to you. XcelTrip also may use your personal data to respond directly to your requests for information, including registrations for newsletters or other specific requests. The personal data that may be collected and processed for this purpose include: name, title, company name, email address, telephone number, postal address, language, username, payment information, purchase records, credit and billing status, and support inquiries. It is in our legitimate business interests to be able to provide customers, prospective customers, and the public with information about our products, services and events.
  • Provide Support and Customer Service. We use your personal data to provide support for products or services you have obtained from us and answer other questions. In the course of providing support to you, we may sometimes have incidental access to data that you have provided to us. The personal data that may be collected and processed for this purpose includes: name, title, company name, email address, telephone number, postal address, language, username, payment information, purchase records, credit and billing status and support inquiries. We process this information in order to comply with our contractual obligations to you.
  • Process Your Job Application. When you apply for a position at XcelTrip, we use the personal data you provide for the purpose of assessing your application, considering you for future positions and carrying out human resources functions in accordance with applicable law. XcelTrip will share the personal data you supply during the application process with internal human resources professionals as well as professionals in our business functions who are participating in the application and interview process. The personal data that may be collected, shared, and/or processed for this purpose includes: name, title, company name, email address, telephone number, postal address, language, resume, cover letter, age, education, professional history and contact details. It is in our legitimate business interests to be able to review the qualifications of prospective employees and perform human resources functions with regard to our employees.

We will not use your personal data in a manner that is inconsistent with the purpose of its original collection, unless you have consented.

HOW WE DISCLOSE YOUR PERSONAL DATA

XcelTrip will not sell, rent or lease your Personal Data to others without your consent.

XcelTrip discloses Personal Data in the following ways:

  • XcelTrip may disclose personal data to business partners and service providers in order to fulfill your orders/requirements. These business partners and service providers include distributors, resellers, payment processors, financial service providers and institutions, materials production, postal or government authorities, market intelligence and consulting service providers, and information technology service providers. Business partners and service providers are required by contract to keep the information received on behalf of XcelTrip confidential and secure and not use it for any purpose other than the purpose for which it was provided to them.
  • XcelTrip may disclose personal data as required by law or legal process, such as responding to a duly authorized and lawful request of a police or public authority (including to meet national security or law enforcement requirements), to enforce or protect the rights of XcelTrip, when such disclosure is necessary or appropriate to prevent physical harm or financial loss as permitted by applicable law, or in connection with an investigation of suspected or actual illegal activity.
  • XcelTrip may also disclose personal data in the context of a business transaction involving part or all of XcelTrip, such as a merger, acquisition, consolidation or divestiture. Such a transaction may involve the disclosure of personal data to prospective or actual purchasers, or the receipt of it from sellers. It is XcelTrip’s practice to seek appropriate protection for information in these types of transactions. Following such a business transaction, you may contact the entity to which we transferred your personal data with any inquiries concerning the use of that information.

COOKIES AND OTHER TECHNOLOGIES

When you visit our websites we may automatically collect information such as your IP address, browser type and language, operating system, location, date and time. We may also use cookies to collect information as you navigate our websites. A cookie is a small amount of data that is sent to your browser from a web server and stored on your device.

XcelTrip uses some cookies that are strictly necessary for the delivery of services on our websites. Cookies that are strictly necessary allow us to improve the safety and security of our websites, authenticate account users, allow you to access your private accounts on our websites, allow you to sign into different portions of our websites with the use of only one login, balance the traffic on our websites, and remember items in your shopping cart. Cookies that are strictly necessary are not used for marketing purposes.

XcelTrip also uses cookies to improve our service to you and personalize your web browsing experience, such as gaining a better understanding of your interests and requirements regarding our websites, our business or our products and services. Cookies that XcelTrip uses to improve our services and your website experience may remember your language and site preferences, invite you to participate in surveys or evaluations, show you when you are logged into our system and allow you to remain logged-in for a period of time, help provide you with support services, remember your login information, and prepopulate forms that you have already completed.

XcelTrip also uses cookies that collect information about how you use our websites, including which pages you visit and whether you experience any errors. These cookies use aggregate information to provide statistics on how our websites are used, help us improve our websites by measuring errors, testing different designs on our websites and helping us measure the traffic on our websites so that we can optimize our content accordingly. These cookies are used to help us improve how our websites work, understand what interests our users, measure website quality and the effectiveness of our online advertising.

In addition, we may use remarketing technology to advertise on other websites you may visit. In doing so, a third party may place or read a unique ad-serving cookie on your device and use technical information about your browser and your activity at an XcelTrip website to serve advertisements to you on non-XcelTrip websites.

If you do not want your information to be stored by cookies, you can configure your browser so that it always rejects these cookies or asks you each time whether you want to accept them or not. However, you must understand that choosing to reject cookies may reduce the performance and functionality of our websites. Your browser documentation includes instructions explaining how to enable, disable or delete cookies at the browser level (usually located within the “Help”, “Tools” or “Edit” facility). While XcelTrip websites at this time generally do not recognize automated browser signals regarding tracking mechanisms, such as “do not track” instructions, you can generally express your privacy preferences regarding the use of most cookies and similar technologies through your web browser.

YOUR RIGHTS AND CHOICES

In accordance with the laws of certain countries, you may have certain rights and choices regarding the personal data we collect and maintain about you and how we communicate with you. Where the EU General Data Protection Regulation 2016/679 (“GDPR”) applies to the processing of your personal data, especially when you access the website from a country in the European Economic Area (“EEA”), you have the following rights, subject to some limitations, against the respective Red Hat Company responsible for the website you are using:

  • The right to access your personal data;
  • The right to rectify the personal data we hold about you;
  • The right to erase your personal data;
  • The right to restrict our use of your personal data;
  • The right to object to our use of your personal data;
  • The right to receive your personal data in a usable electronic format and transmit it to a third party (also known as the right of data portability); and
  • The right to lodge a complaint with your local data protection authority;

If you would like to exercise any of these rights, you may do so via our Personal Data Request Form.

Where the GDPR applies, you also have the right to withdraw any consent you have given to uses of your personal data. If you wish to withdraw consent that you have previously provided to us, you may do so via our Feedback Form. However, the withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

Where the GDPR does not apply, XcelTrip grants you the ability to access, modify, or update some of your personal data online at any time. You may log in and make changes to your information, such as your password, your contact information, your general preferences and your personalization settings. If necessary, you may also contact us via our Feedback Form and describe the changes you want made to the information you have previously provided. However, note that changing or deleting information necessary for XcelTrip to assist with support, services, and purchases may result in a delay or interruption in processing your requests.

You will be given an opportunity to tell us whether you would like to receive information, special offers, and promotional materials by email from XcelTrip or our business partners when you create an XcelTrip account, when you register for a service, when you provide us with your personal data, or when we send you a marketing email. Where required by applicable law, we will obtain adequate consent to provide you with these marketing materials. You also have the option to opt out of receiving marketing emails from XcelTrip at any time without cost by clicking on the relevant link contained in our marketing emails or by contacting us via our Feedback Form. You can also exercise your rights and choices by contacting us as described below under “How to Contact Us.”

SECURITY

XcelTrip intends to protect your personal data. We have implemented appropriate physical, administrative and technical safeguards to help us protect your personal data from unauthorized access, use and disclosure. For example, we encrypt certain personal data such as payment information when we transmit such information over the Internet. We also require that our business partners and service providers protect such information from unauthorized access, use and disclosure.

CHILDREN’S ONLINE PRIVACY

XcelTrip’s products and services are not directed to children and XcelTrip does not knowingly collect online personal data from children under the age of 16. If you are a parent or guardian of a minor under the age of 16 and believe that he or she has disclosed personal data to us, please contact us via our Feedback Form or as described below under “How to Contact Us.”

DATA TRANSFERS AND PRIVACY SHIELD FRAMEWORKS

XcelTrip is a global organization, with legal entities, business processes and technical systems that operate across borders. XcelTrip may transfer your personal data to other XcelTrip entities in the United States and elsewhere. The United States and other countries may not have the same data protection laws as the country from which you initially provided the information.

Where required by applicable law, we have put in place appropriate safeguards (such as standard contractual clauses approved by the European Commission) in accordance with applicable legal requirements to ensure that your data is adequately protected. When transferring your personal data internationally, XcelTrip will protect your personal data as provided in this Privacy Statement. If you wish to obtain a copy of the relevant safeguards that are in place to protect the international transfer of your personal data, please contact us as described below under “How to Contact Us.”

If you are located in the European Economic Area (“EEA”) or Switzerland, XcelTrip and its controlled United States subsidiaries have certified to the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks for the transfer of personal data from the EEA and Switzerland to the United States. [Please advise if you have secured Swiss-US Privacy Shield Frameworks certification or are self-certified]

CHANGES TO THIS PRIVACY STATEMENT

XcelTrip reserves the right to make corrections, changes or amendments to this Privacy Statement at any time. The revised Privacy Statement will be posted on this website. A notice will be posted on our homepage for 30 days whenever this Privacy Statement is changed in a material way, and the date of last update will be indicated at the top of the Privacy Statement. If you do not refuse the changes in writing within that notice period, this shall mean that you have consented to the Privacy Statement as changed, including with respect to personal data provided to us prior to the changes in the Privacy Statement. We encourage you to periodically review this Privacy Statement for any changes or updates.

HOW TO CONTACT US

If you have any questions about XcelTrip’s privacy practices or use of your personal data, please feel free to contact us or by email us at customercare@xceltrip.com

Data Retention & Account Termination

You can close your account by visiting your profile settings page on our website. We will remove your public posts from view and/or dissociate them from your account profile, but we may retain information about you for the purposes authorized under this Privacy Policy unless prohibited by law. Thereafter, we will either delete your personal information or de-identify it so that it is anonymous and not attributed to your identity. For example, we may retain information to prevent, investigate, or identify possible wrongdoing in connection with the Service or to comply with legal obligations.

Login to your account.