1. Introduction
NAC Travel International Pty Ltd (“NAC Travel”, “we”, “us”, “our”) provides travel and booking support through the NAC Holidays platform. We are committed to protecting personal information and applying reasonable security controls. This policy explains what we collect, why we collect it, and how it is protected.
This policy should be read together with our Booking Terms and any supplier terms applicable to your booking.
2. Information We Collect
- Account data: name, email, phone, and basic profile details you provide.
- Booking data: traveler names, itinerary details, package selections, and booking references.
- Billing data: invoice details and billing contact/address you provide (including invoice “Bill To” overrides where supported).
- Support messages: communications you send to Support, including attachments you provide.
- Technical data: device/browser information, log data, and IP address for security and fraud prevention.
3. How We Use Information
- To create quotations, bookings, invoices, and confirmations.
- To provide customer support and respond to enquiries.
- To process payments and reconcile transactions.
- To prevent fraud, abuse, and unauthorized access.
- To comply with legal obligations and enforce our policies.
4. Sharing & Disclosure
We do not sell personal information. We may share information when necessary to fulfil your booking, including with:
- Travel suppliers (airlines, hotels, tour operators, transfer providers) to deliver your services.
- Payment providers and banking rails to process payments securely.
- IT and hosting providers that support platform operations under confidentiality obligations.
- Legal/regulatory authorities where we are required by law or court order.
5. International Transfers
Your booking may require cross-border data transfer to suppliers or partners outside South Africa. We take reasonable measures to ensure appropriate safeguards are in place consistent with POPIA and global best practice.
6. Payments
Payments may be processed through approved gateways and banking methods displayed during checkout or on your invoice. Payment processors may collect certain data required to complete transactions and perform fraud checks. We encourage you to review gateway-specific privacy policies where applicable.
7. Security & Account Credentials
We do not display or publish sensitive login details.
NAC Travel protects credentials (passwords, API keys, database credentials, and gateway secrets) using access control and security practices. For your protection, sensitive secrets are stored outside public web pages and are not visible to guests.
- Password handling: account passwords should be hashed and never stored or displayed in plain text.
- Least privilege: system access is limited to authorized personnel and services.
- Secure configuration: secrets should be stored in server configuration files or environment variables not accessible via the browser.
- Your responsibility: keep your password private, use a strong unique password, and avoid sharing login details via email/WhatsApp.
8. Cookies & Analytics
We use cookies and similar technologies for session management, security, and basic analytics. You can control cookies through your browser settings, but disabling cookies may affect login and booking features.
9. Retention
We retain personal information only as long as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary based on booking type and regulatory requirements.
10. Your Rights (POPIA)
- Request access to personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Object to certain processing where permitted by law.
- Request deletion where lawful and where retention is not required.
- Lodge a complaint with the Information Regulator (South Africa).
To exercise these rights, contact info@nac-travel.org.
Contact
If you have questions about this Privacy Policy, email info@nac-travel.org or visit www.nac-travel.org.