Privacy policy

Version 1.0. Effective date: 1 November 2026.

01Information Collection

Welcome to Godoba. We value your privacy and are committed to protecting your personal data when you use our website, online platform, and travel-related services. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information.

Godoba may collect the following categories of information when you register, make a booking, use our services, or communicate with us:

  • Personal and Account Information: Name, email address, telephone number, account identifiers, and other information provided during registration.
  • Travel and Booking Information: Passenger details, travel preferences, travel dates, destinations, booking references, flight information, hotel reservations, and other information necessary to arrange travel services.
  • Identity and Travel Document Information: Passport, national identification, nationality, date of birth.
  • Payment and Transaction Information: Transaction references, billing information, payment status, and other information required to process payments. Full payment card details will be handled directly by authorized payment processors.
  • Usage and Preference Information: Pages visited, platform interactions, selected preferences, search history.

Godoba shall collect only the personal information necessary for specified and legitimate purposes. Where applicable, users will be informed whether providing particular information is mandatory or optional.

Godoba shall take reasonable steps to ensure that personal information is accurate, relevant, and limited to what is necessary for the intended purpose.

02How We Use Your Information

Godoba may process personal information for the following purposes:

  • Creating and managing user accounts.
  • Providing travel-related services and processing bookings.
  • Coordinating with airlines, hotels, payment processors, and other authorized travel service providers.
  • Processing payments and maintaining transaction records.
  • Responding to customer enquiries, complaints, and service requests.
  • Improving platform functionality, service quality, and user experience.
  • Understanding platform usage and user preferences.
  • Sending service-related communications and, where permitted, promotional offers and updates.
  • Detecting and preventing fraud, unauthorized activities, and information security incidents.
  • Complying with applicable legal, regulatory, contractual, and reporting requirements.
  • Establishing, exercising, or defending legal claims and protecting the rights of Godoba, its users, and other relevant parties.

Personal information shall be processed only for specified and legitimate purposes. It shall not be used for purposes unrelated to the original purpose of collection unless the additional processing is appropriately authorized and permitted under applicable law.

Where consent is required, Godoba shall obtain it before processing.

Godoba shall not collect or retain personal information beyond what is reasonably necessary for the relevant processing purposes and applicable retention requirements.

03Information Sharing

Godoba does not sell users’ personal information. Personal information may be disclosed to authorized third parties only where necessary.

Information may be shared in the following circumstances:

  • Travel Service Providers: Airlines, hotels, travel operators, transport providers, and other relevant partners to fulfil booking requests and provide travel services.
  • Payment Processors: Authorized payment service providers to process transactions, verify payments, and prevent fraudulent activities.
  • Other Service Providers: Customer support and operational service providers that support Godoba’s business activities.
  • Protection of Rights and Fraud Prevention: Relevant parties where disclosure is necessary and legally permitted to protect rights, investigate suspected fraud, prevent misuse, or address security concerns.

Where a third party processes personal information for its own independent purposes, Godoba shall assess the third party’s role and communicate relevant privacy information where required.

Godoba shall take appropriate steps to ensure that personal information shared with third parties is limited to the information necessary for the relevant purpose.

04Data Protection

Godoba implements appropriate technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, loss, destruction, or misuse.

These measures may include:

  • Access controls based on business need and the principle of least privilege.
  • Secure authentication and multi-factor authentication for sensitive or privileged access, where appropriate.
  • Encryption of sensitive personal information during transmission and, where appropriate, while stored.
  • Secure management of encryption keys, credentials, and authentication secrets.
  • Security monitoring, logging, and incident detection.
  • Vulnerability management, secure configuration, and appropriate system updates.
  • Backup, recovery, and business continuity arrangements.
  • Personnel confidentiality obligations and information security awareness training.
  • Security assessments of relevant suppliers and cloud service providers.
  • Secure retention, deletion, and disposal of personal information.

Access to personal information shall be restricted to authorized personnel, applications, and service providers who require access for legitimate business purposes. Access rights shall be reviewed and removed or adjusted when no longer required.

Personnel and service providers with access to personal information shall be subject to appropriate confidentiality and security obligations.

05User Rights

Subject to applicable law, users may have the right to:

  • Request access to their personal information.
  • Request correction or updating of inaccurate or incomplete information.
  • Request deletion of personal information where applicable.
  • Request restriction of, or object to, certain processing activities where applicable.
  • Withdraw consent where processing relies on consent.

Godoba shall establish a process to receive, verify, assess, respond to, and document privacy requests within applicable legal time limits.

Godoba may request reasonable information to verify the identity of the person making a request before disclosing or modifying personal information.

Requests may be subject to legal obligations, contractual requirements, legitimate retention requirements, or other lawful restrictions. Where a request cannot be fulfilled, Godoba shall communicate the applicable reason where required by law.

06Data Retention and Secure Deletion

Godoba shall retain personal information only for as long as necessary to fulfil the purposes for which it was collected, provide requested services, meet applicable legal or contractual obligations, resolve disputes, and protect legitimate business interests.

Retention periods shall be determined according to the category of personal information, processing purpose, applicable legal requirements, contractual obligations, and business needs.

When personal information is no longer required, Godoba shall securely delete, anonymize, or otherwise dispose of it in accordance with documented retention and disposal procedures.

Where personal information is held by cloud service providers or other processors, Godoba shall establish appropriate arrangements for its return or deletion at the end of the relevant service or processing relationship.

Deletion arrangements shall address, where applicable, active systems, databases, backups, replicas, snapshots, archives, and other copies of personal information. Any information retained to meet legal obligations shall be restricted to the permitted purpose and securely protected.

07International and Cross-Border Data Transfers

Personal information may be processed or stored in countries other than the user’s country of residence, depending on the location of Godoba’s systems, cloud service providers, payment processors, and travel service partners.

Where personal information is transferred internationally, Godoba shall assess applicable legal and contractual requirements and implement appropriate safeguards where required.

Godoba shall maintain appropriate records of relevant processing locations and transfer arrangements and shall provide further information to users where required by applicable law.

08Personal Information Security Incidents

Godoba maintains procedures to identify, assess, respond to, and manage information security incidents that may affect personal information.

Where a personal data breach occurs, Godoba shall assess the nature and extent of the incident, the categories of information affected, the potential impact on individuals, and the applicable notification obligations.

Godoba shall notify affected users, relevant authorities, customers, or other parties where required by applicable law or contractual obligations and within the applicable time limits.

Cloud service providers and other processors handling personal information on behalf of Godoba shall be required, through appropriate agreements, to notify Godoba of relevant personal data breaches without undue delay.

Godoba shall document relevant incidents, response actions, notifications, investigations, and corrective actions in accordance with its incident management procedures.

09Cookies and Tracking Technologies

Godoba may use cookies and similar technologies to support essential platform functionality, maintain user sessions, understand platform usage, improve services, and support marketing activities where applicable.

Where required, Godoba shall obtain appropriate consent before using non-essential cookies or tracking technologies and provide information about available preference controls.

Users may manage cookie preferences through available settings or their browser, subject to the impact that disabling certain technologies may have on platform functionality.

10Privacy Contact and Complaints

Users may contact Godoba through its designated privacy contact channel to submit privacy requests, raise concerns, or obtain further information about the processing of their personal information.

Privacy Contact Details

Godoba shall assess and handle privacy complaints in accordance with its documented procedures and applicable legal requirements. Users may also have the right to lodge a complaint with a competent data protection authority, where applicable.

11Policy Updates

Godoba may update this Privacy Policy from time to time to reflect changes in its services, information processing activities, cloud arrangements, security practices, or applicable legal and regulatory requirements.

The updated Privacy Policy shall be published on the relevant website or platform. Material changes shall be communicated to users through appropriate channels where required.

The policy shall identify its effective date and version to support transparency and traceability.

Users are encouraged to review this Privacy Policy periodically to remain informed about how their personal information is handled.