1. Data Collection and Browsing

This website and mobile application are not designed to collect your personal data while you browse. Data is only collected with your explicit knowledge and consent. We collect the minimum data necessary to provide our travel services — name, email address, and optionally phone number and profile picture.

2. Your Data Rights and Deletion

You have complete control over your data. You can delete all your data from our systems by going to My Account → Edit Account → Delete My Account in the mobile app or website. This action is irreversible and removes your booking history, preferences, and all associated data. See the Data Deletion page for full instructions.

3. Mobile App Permissions

• Location — nearby recommendations and navigation
• Camera — profile pictures and travel photo uploads
• Push notifications — booking confirmations and travel updates
• Contacts (optional) — sharing trip details with friends

All permissions are requested with clear explanations and can be revoked at any time from your device settings.

4. Booking and Travel Data

When you book through our platform we process: passenger details, payment information (handled by certified PCI-DSS gateways — never stored on our servers), travel preferences and history, and emergency contact information. This data is shared only with the relevant travel providers (airlines, hotels, car rentals) as necessary to fulfil your bookings.

5. Third-Party Services

Our platform may link to or embed third-party services including payment processors, hotel and airline reservation systems, analytics providers, and advertising networks such as Google AdSense. We are not responsible for the privacy practices of those services. Please review their privacy policies before providing personal information.

6. Data Security and Storage

We use SSL encryption for data in transit, secure cloud storage with regular backups, routine security audits, and need-to-know access controls. Payment information is processed through PCI-DSS compliant gateways and is never stored on Halla servers. We retain data only as long as necessary to provide services or as required by law.

7. Information Disclosure

We will not disclose your personal information except when required by law or legal process, to protect our rights or property, in emergencies involving personal safety, or as necessary to complete bookings with service providers. We never sell, trade, or rent your personal information for marketing purposes without your explicit written consent.

8. Communication and Marketing

We send service-related communications such as booking confirmations, security alerts, and account notifications. Marketing communications are sent only with your explicit consent and you can opt out at any time. All marketing emails include an unsubscribe link.

9. Policy Updates

We may modify this policy when necessary. Changes are posted on this page with an updated revision date. We encourage you to review it periodically.