Privacy, Service Delivery and Payment Security Policies

Depending on the service, we may collect:

• name;
• address;
• telephone number;
• email address;
• date of birth;
• travel information;
• passport and travel-document information;
• documents uploaded to the customer portal;
• booking and itinerary information;
• invoice and payment information;
• communications with Data Quay;
• account and portal information; and
• technical information reasonably required for security and operation of our services.

Information may be used to:

• provide requested services;
• administer customer accounts;
• arrange travel services;
• prepare and manage bookings;
• assist with visa or travel-document processes;
• issue invoices and record payments;
• provide customer support;
• communicate booking and service information;
• prevent fraud and protect our systems;
• satisfy legal, regulatory and accounting requirements; and
• manage our relationship with customers.

Where necessary to provide a requested service, information may be shared with relevant service providers, which may include:

• airlines;
• cruise lines;
• hotels;
• accommodation providers;
• insurers;
• transportation companies;
• tour operators;
• embassies, consulates and immigration or government authorities;
• payment processors and acquiring banks;
• accounting and business-service providers; and
• technology providers supporting Data Quay's systems.

We limit disclosures to information reasonably required for the relevant purpose.

Travel services frequently involve organisations located outside Antigua and Barbuda.

Accordingly, customer information may need to be transmitted to or processed in other countries where required to provide the requested travel or related service.

Online card payments may be processed through third-party payment infrastructure, including Data Quay's acquiring bank and authorised payment gateway.

Data Quay does not intentionally store complete card security codes.

Where secure hosted or embedded payment technology is used, sensitive card credentials may be submitted directly to the authorised payment processor rather than Data Quay's application servers.

Data Quay uses reasonable administrative and technical safeguards intended to protect customer information against unauthorised access, alteration, disclosure or loss.

No internet-based system can be guaranteed to be completely secure.

Information is retained for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, accounting, contractual, fraud-prevention and record-keeping requirements.

Information that is no longer reasonably required will be deleted, anonymised or securely retained where continued retention is legally required.

Customers may contact Data Quay regarding their personal information, including requests for access or correction where applicable.

Requests may be subject to identity verification and applicable legal requirements.

Depending on the service purchased, customers may receive information or documents through:

• the Data Quay Travel Portal;
• email;
• secure electronic communication;
• direct communication from a travel supplier; or
• another delivery method agreed with the customer.

Travel documents may include:

• booking confirmations;
• itineraries;
• invoices;
• receipts;
• airline or cruise information;
• accommodation confirmations;
• insurance documentation;
• transportation information; and
• visa or travel-document information.

Delivery timing depends on the type of service, supplier confirmation, payment status and applicable travel schedule.

An invoice or payment receipt does not necessarily mean that every travel document has already been issued.

Some documents, including airline tickets, cruise documents, accommodation vouchers or final itineraries, may become available only after required payments, passenger information or supplier confirmations have been completed.

Customers must provide accurate contact information and should regularly check their registered email address and Travel Portal account.

Customers should promptly notify Data Quay if expected documentation has not been received.

Where Data Quay exceptionally supplies a physical item, specific delivery or collection arrangements will be disclosed separately.

Online card payments are processed using authorised payment infrastructure provided through Data Quay's acquiring financial institution and payment gateway.

Where Data Quay uses a secure hosted or embedded payment interface, sensitive card information is transmitted to the payment processor using the payment provider's secure infrastructure.

Customers should enter payment-card information only through the designated secure checkout interface.

Customers should never send complete card numbers, PINs or card security codes to Data Quay by ordinary email, chat or messaging services.

Data Quay does not require customers to provide their PIN for an online card transaction.

For security, payments may be subject to:

• card issuer authorisation;
• fraud screening;
• identity or transaction verification;
• authentication such as 3-D Secure where enabled; and
• additional review where a transaction presents unusual characteristics.

A payment may be declined or held for review by the payment processor, acquiring bank or card issuer.

Data Quay may retain non-sensitive transaction information such as:

• transaction reference;
• amount;
• currency;
• payment status;
• date and time;
• invoice reference;
• processor transaction identifier; and
• limited card information provided by the processor, such as card brand or masked account information.

Such information may be used for reconciliation, refunds, fraud prevention, accounting and customer support.

Data Quay reserves the right to investigate, decline, cancel or request additional verification for transactions reasonably suspected of being fraudulent or unauthorised, subject to applicable law and payment-network requirements.

If a customer receives an error during payment or is uncertain whether a transaction was successful, the customer should not repeatedly submit the payment.

The customer should check their Travel Portal or contact Data Quay so that the transaction can be verified.

See also our Terms and Conditions and Travel Cancellation and Refund Policy.