Privacy Policy

Lokation Tours is operated by Mendy Lok, a travel and events business in Israel, who is the data controller for the personal information collected through this website. You can reach us through the contact form on our website for any privacy question or request.

Account information: your email address and, if you sign in with Google, the basic profile information Google shares with us.

Passenger and booking information: for each traveller, the details required to issue the booking and the flight manifest, which may include full name, date of birth, nationality, passport or identity-document number and document expiry, plus contact details.

Payment information: the payment is handled by our payment provider. We receive a reference and the status of the transaction, not your full card number.

Technical information: basic data needed to keep the service secure and working, such as session information.

We use your information to verify your identity, take and manage your booking, provide the passenger manifest to the airline or charter operator, process payment and issue a tax invoice, send you booking confirmations and service messages, meet our legal, accounting and tax obligations, and keep the service secure.

Our legal grounds are the performance of your booking contract, compliance with legal obligations, your consent where it applies, and our legitimate interest in running and securing the service.

Sensitive personal information, including passenger names, dates of birth, passport details and contact details, is encrypted at rest using strong encryption (AES-256-GCM). Email addresses used for look-up are protected with a keyed index rather than stored in the clear where possible.

Data is transmitted over encrypted connections (HTTPS), and access is limited to those who need it. Card payments are handled entirely by our payment provider; we never store full card numbers.

We share information only as needed to deliver your booking: with the airline or charter operator that carries the flight (the passenger manifest), with our payment provider to process payment, with our invoicing provider to issue tax documents, with our email provider to send confirmations, and with our hosting and infrastructure providers.

We do not sell your personal information, and we do not share it for third-party advertising.

Some trips involve carriers, authorities or service providers located outside your country, including outside the European Economic Area. Where your information is transferred internationally, for example to operate a flight or process a payment, we take steps to ensure it is handled with appropriate safeguards. Passenger data may need to be shared with carriers and authorities to operate the flight you have booked.

We keep personal information for as long as needed to provide and support your booking and to meet our legal, accounting and tax obligations, after which it is deleted or anonymised. Tax and accounting records are kept for the period required by law.

Subject to applicable law, you may ask us to access the personal information we hold about you, correct it if it is wrong, delete it, restrict or object to certain uses, or receive a copy in a portable format. Where we rely on your consent, you may withdraw it at any time.

If you are in the European Economic Area, these rights arise under the GDPR. If you are in Israel, the Protection of Privacy Law applies. To make a request, contact us through the website; we may need to verify your identity first. You may also complain to your local data-protection authority.

We use a small number of essential cookies that are needed to sign you in and keep your session secure. We do not use advertising or cross-site tracking cookies.

The website is intended for adults booking travel. Where a booking includes a child as a passenger, the adult making the booking is responsible for providing that child's details and for any required consents.

We may update this policy from time to time. The current version is always the one published on this website, and the "last updated" date above shows when it last changed.

For any question about this policy or to exercise your rights, please contact us through the contact form on our website.