PRIVACY POLICY & B2B PARTNER TERMS

Touric seeks to comply with applicable data protection, privacy, cybersecurity, consumer, commercial, and other laws and regulations applicable to its activities and the jurisdictions in which the Platform is used. Where applicable, Touric may also apply internationally recognized privacy principles and contractual safeguards for cross-border data processing.

• Touric acts as a Data Controller for Platform-related account, compliance, billing, security, and operational information.
• Touric may act as a Data Processor or service provider for booking, traveler, passenger, and other customer data submitted by B2B Partners for fulfillment of travel services.
• Partners remain responsible for ensuring that they have a lawful basis, required notices, permissions, and authorizations for collecting and sharing traveler or customer information with Touric.

Touric may collect personal, business, transactional, financial, and technical information necessary to operate the Platform, including:

• Business entity details, incorporation/licensing information, tax or registration information, and KYC documents.
• Primary and alternate contact details, including name, designation, email address, and mobile number.
• Login credentials and account access information.
• Booking and transaction data, including traveler details, itineraries, fares, services booked, amendments, cancellations, and refunds.
• Financial and billing details, including invoices, payment confirmations, credit or wallet information, and reconciliation records.
• Technical and usage data, including IP address, browser type, device information, activity logs, and Platform interactions.

• Enable and administer bookings for flights, hotels, transfers, sightseeing, tours, rail, visa, insurance, and related travel services.
• Process payments, refunds, credits, wallet adjustments, reconciliations, and financial administration.
• Send operational notifications, booking communications, system alerts, service messages, and policy updates.
• Maintain account security, prevent fraud and misuse, and manage operational and financial risk.
• Meet applicable legal, regulatory, licensing, supplier, airline, tax, audit, and compliance obligations.
• Improve Platform performance, functionality, analytics, security, and user experience.

Touric does not sell or rent personal or business data.

Touric may share information on a need-to-know or service-required basis with:

• Airlines, hotels, DMCs, transport operators, tour operators, insurance providers, visa service providers, and other travel suppliers.
• Payment gateways, banks, financial institutions, and payment or settlement partners.
• Government, tax, regulatory, licensing, judicial, or law-enforcement authorities where legally required or permitted.
• Authorized technology, hosting, security, analytics, customer support, and operational service providers.

Touric expects relevant third parties to maintain appropriate confidentiality and data-security measures.

Touric is not responsible for inaccuracies, delays, availability issues, or service failures caused by third-party suppliers.

Touric implements reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, misuse, alteration, loss, or disclosure. Access is restricted to authorized personnel and service providers on a need-to-know basis. No system or method of transmission can guarantee absolute security.

• Investigate and assess suspected or confirmed incidents.
• Take reasonable steps to contain and mitigate potential risks or impacts.
• Notify affected users, Partners, or competent authorities where required by applicable law.

Touric retains information only for as long as reasonably necessary to provide services, maintain business and accounting records, satisfy legal and regulatory obligations, resolve disputes, enforce agreements, prevent fraud, and protect legitimate business interests. Certain records may be retained for longer periods where required or permitted by law. At the end of applicable retention periods, information may be securely deleted, anonymized, or destroyed.

• Request access to or an update of personal or business information held by Touric.
• Request correction of inaccurate information.
• Request deletion or restriction of processing, where legally available and subject to applicable obligations.
• Raise privacy or data-protection concerns.

Requests may be submitted to support@touric.ai, subject to appropriate identity and authority verification.

Touric may use cookies and similar technologies to support Platform functionality, authentication, security, analytics, preferences, and performance. Disabling certain cookies may affect Platform functionality.

The Platform may contain links or integrations to external websites or services. Touric is not responsible for the content, security, or privacy practices of third-party websites or services.

As a global B2B travel platform, information may be processed, stored, or accessed in countries outside the United Arab Emirates. Where required, Touric will seek to apply appropriate contractual, technical, organizational, or other safeguards for cross-border processing.

The Platform is intended for B2B users and authorized business representatives. Touric does not knowingly collect personal information directly from children through the Platform. Traveler information relating to a minor may be submitted by an authorized Partner where necessary to fulfill a travel booking.

Touric may revise this Privacy Policy from time to time to reflect changes in the Platform, business operations, legal requirements, or security practices. The updated version will be posted on the Platform, and continued use may constitute acceptance to the extent permitted by applicable law.

To the extent permitted by applicable law, the Partner agrees to indemnify and hold harmless Touric, its directors, officers, employees, affiliates, licensors, and representatives from claims, losses, damages, penalties, costs, or expenses arising from the Partner’s actions, omissions, unlawful instructions, misuse of the Platform, or breach of applicable terms.

Partners must maintain valid registrations, licenses, permits, and approvals required for their business and must provide accurate KYC and compliance documentation when requested. Touric may suspend or terminate access for non-compliance, misrepresentation, fraud, or material regulatory risk.

Prices are exclusive of applicable taxes unless expressly stated otherwise. Partners are responsible for their own tax and regulatory compliance. Errors resulting from incorrect or incomplete Partner information remain the Partner’s responsibility.

The Platform and APIs are provided on an “as-is” and “as-available” basis to the maximum extent permitted by law. Touric does not guarantee uninterrupted availability and is not liable for downtime, supplier failures, connectivity problems, or technical errors beyond its reasonable control. Unauthorized access, scraping, extraction, reverse engineering, or misuse of APIs is prohibited.

To the maximum extent permitted by applicable law, Touric shall not be liable for indirect, incidental, special, consequential, or loss-of-profit damages. Unless otherwise required by law or expressly agreed in writing, Touric’s aggregate liability arising from a claim shall not exceed the service fees actually earned by Touric in relation to the specific transaction or booking giving rise to the claim.

This Privacy Policy and the B2B Partner Terms shall be governed by the laws applicable in the Emirate of Dubai and the United Arab Emirates, as applicable. Disputes shall be subject to the competent courts of Dubai, United Arab Emirates, unless a separate written agreement provides otherwise.

Users may contact Touric regarding privacy requests, data-protection concerns, or complaints through the contact details above. Touric will make reasonable efforts to review and respond within a commercially reasonable timeframe and in accordance with applicable legal requirements.