Privacy Policy

Kromanti Group (“we”, “us”, “our”) operates the website kromantigroup.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information that you provide when you visit or interact with the Site.

By accessing or using the Site, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Site.


1. Effective Date

Effective Date: 1st January, 2026.


2. Information We Collect

Category

Types of Data

Collection Method

Personal Identification

Name, email address, phone number, mailing address

Forms for booking, newsletter sign‑up, contact us, account registration

Payment & Transaction

Payment‑card details (processed by third‑party), billing address, transaction ID, invoice data

Secure payment gateway (Stripe, PayPal, etc.) – we never store raw card numbers

Technical / Usage

IP address, device type, operating system, browser, screen resolution, pages viewed, referral URL, timestamps, cookie identifiers

Automatic collection via server logs, cookies, and analytics tools

Location

Approximate geographic location derived from IP or GPS (when you enable location services)

When you use location‑based features (e.g., “tours near me”)

Communications

Content of messages submitted through contact forms, live‑chat, or email

Directly from your submissions


3. How We Use Your Information

We process your data for the following lawful purposes:

  1. Provision of Services – To complete bookings, issue tickets, confirm reservations, and deliver purchased travel packages.
  2. Customer Support – To answer inquiries, resolve disputes, and improve overall service quality.
  3. Marketing & Communications – To send newsletters, promotional offers, and updates about new tours (only if you have opted‑in).
  4. Analytics & Site Improvement – To analyze traffic patterns, monitor performance, and enhance user experience.
  5. Legal & Security – To comply with legal obligations, enforce our Terms of Service, prevent fraud, and protect the security of the Site and its users.

4. Legal Basis for Processing (EU/UK GDPR)

Basis

When Applied

Contractual Necessity

Processing required to fulfil a booking or purchase contract.

Legitimate Interests

Analytics, fraud prevention, and site optimisation (balanced against your rights).

Consent

Sending marketing communications, location tracking, or any optional data collection (you may withdraw consent at any time).

Legal Obligation

When required by law, regulation, or court order.


5. Sharing & Disclosure

We may disclose your personal data to the following categories of recipients:

Recipient

Purpose

Payment Processors (e.g., Stripe, PayPal)

To securely process payments.

Service Providers (hosting, email delivery, analytics, CRM)

To operate the Site, send emails, and perform data analysis.

Tour Operators / Accommodation Partners

To fulfil the travel services you have booked.

Legal Authorities

When required by law, subpoena, or to protect our legal rights.

Business Transfer Parties

In connection with a merger, acquisition, or sale of assets (subject to confidentiality).

All third parties are contractually obligated to protect your data with at least the same level of security we apply.


6. International Data Transfers

Your information may be transferred to, stored, and processed in countries outside your residence, including the United States. We ensure appropriate safeguards (e.g., EU Standard Contractual Clauses, adequacy decisions) are in place for any such transfers.


7. Data Retention

Data Type

Retention Period

Account & Booking Information

While the account remains active + 2 years for record‑keeping and legal compliance.

Marketing Lists

Until you unsubscribe or request deletion.

Analytics / Log Data

Aggregated, anonymised data retained up to 24 months; personally identifiable data removed earlier where feasible.

Financial Records

Retained for the period required by tax and accounting regulations (generally 7 years).


8. Your Rights

Depending on applicable law (e.g., GDPR, CCPA, PIPEDA), you may have the following rights:

  • Right of Access – Request a copy of the personal data we hold about you.
  • Right to Rectification – Request correction of inaccurate or incomplete data.
  • Right to Erasure (“Right to be Forgotten”) – Request deletion of your data, subject to legal exceptions.
  • Right to Restriction of Processing – Limit how we use your data.
  • Right to Object – Object to processing based on legitimate interests or direct marketing.
  • Right to Data Portability – Receive your data in a structured, commonly used format.
  • Right to Opt‑Out of Sale – Where applicable (e.g., CCPA), you may opt out of the sale of your personal information.

To exercise any of these rights, please contact us at privacy@kromantigroup.com. We will respond within the statutory timeframes and may request proof of identity to protect your privacy.


9. Cookies & Tracking Technologies

We use cookies and similar technologies for:

  • Essential Functions – Session management, security, and preference storage.
  • Analytics – Understanding usage patterns (Google Analytics, Matomo, etc.).
  • Marketing – Delivering personalized ads and measuring campaign effectiveness (only with your consent).

You can manage or delete cookies through your browser settings. Disabling essential cookies may impair site functionality.


10. Security

We employ reasonable administrative, technical, and physical safeguards, including:

  • TLS/SSL encryption for data in transit.
  • Secure storage and restricted access controls.
  • Regular vulnerability assessments and penetration testing.

While we strive to protect your data, no security measure is foolproof; we cannot guarantee absolute security.


11. Children’s Privacy

The Site is not intended for children under 13 years of age. We do not knowingly collect personal information from minors. If you become aware that a child has provided us with personal data, please contact us so we can promptly delete such information.


12. Links to Third‑Party Sites

Our Site may contain links to external websites (e.g., partner tour operators, travel blogs). This Privacy Policy does not apply to those sites. We encourage you to review the privacy notices of any third‑party sites you visit.


13. Changes to This Privacy Policy

We may revise this Privacy Policy from time to time. Any material changes will be posted on this page with an updated Effective Date. Continued use of the Site after such changes constitutes acceptance of the revised policy.


14. Contact Information

Kromanti Group – Privacy Officer
Email: info@kromantigroup.com
Postal Address: [Insert Physical Business Address]
Phone: [Insert Phone Number, optional]

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out using the contact details above.


Scroll to Top
0

Subtotal