Privacy Policy

1. Who operates THILORA

THILORA Travel & Tours operates as a travel brand under Daffodil Capital Maldives, the entity responsible for its business operations. We are based in the Maldives and primarily serve travel professionals and businesses, while also welcoming enquiries from individual travellers.

For privacy questions or requests, contact info@thiloratravelandtours.com.

2. Personal information we collect

When you contact us, you may provide your name, email address, company or travel agency, phone or WhatsApp number, country, property or travel interests, destinations, travel dates, traveller numbers, budget, preferences and additional requirements. Business partnership enquiries may include a website, role, company type, partnership interests and expected volume. We also receive information you choose to send by email.

Enquiry handling may include a reference, correspondence, timestamps, enquiry status, staff assignment and notes needed to follow up your request. Privacy acknowledgements and any separate marketing permission are distinct records.

Do not send passport copies, payment card details or sensitive traveller information in general enquiries. If a requested booking needs additional guest information, please contact us about the information needed and how to provide it. Share another person’s details only where you are entitled to do so.

3. How and why we use information

We use relevant information to respond to questions, understand travel requirements, prepare quotations, discuss partnerships, communicate about requested services and, where agreed, arrange and support bookings. Appropriate operational information also helps protect the website and manage enquiries.

This policy explains how personal information is handled. It does not itself provide consent or replace any other basis or permission required for processing. Acknowledging the policy is not agreement to promotional marketing.

4. Enquiries, quotations and bookings

An enquiry helps us discuss suitable options. A quotation or submitted request is not a confirmed reservation; booking confirmation and supplier conditions are communicated separately. Authorized company staff handle enquiries and follow-up using the details provided.

Please email info@thiloratravelandtours.com with your enquiry. Provide only information relevant to your request. Additional information needed for a booking is addressed separately.

5. Sharing information with travel suppliers

Relevant guest and booking information may need to be shared with resorts, guesthouses, safari vessel operators, transport providers and other necessary travel suppliers to arrange the services you request. Sharing is limited to information relevant to the requested quotation, booking or service.

Suppliers may handle information under their own privacy practices. Contact us if you have questions about information needed by a supplier for your requested services.

6. Service providers, hosting and international handling

The website uses Lovable Cloud for enquiry storage and staff authentication. Hosting and technical services may handle information needed to operate and protect the website.

Travel services can involve suppliers and service providers in different countries. Relevant information may therefore be handled internationally. Contact us with questions about data handling for your requested services.

7. Security and authorized access

Internal enquiry access is restricted to authorized company staff. Authentication, access restrictions and validation controls help protect enquiry information and staff systems.

No system can guarantee absolute security. General enquiries are not an appropriate channel for confidential identity documents or payment information.

8. Retention and deletion

How long information is needed depends on its purpose and the circumstances of the enquiry or booking. Booking and accounting records may need different treatment from general enquiries.

For questions about information we hold, or to request deletion, contact info@thiloratravelandtours.com. A deletion request will be considered in light of the relevant records, circumstances and applicable requirements.

9. Marketing and opting out

THILORA may send occasional promotional emails or messages with appropriate marketing permission and opt-out arrangements. Marketing permission is optional and separate from an enquiry. You do not need to give marketing permission to request travel services, and routine service replies are distinct from marketing.

You can withdraw marketing permission by contacting info@thiloratravelandtours.com or using the opt-out method provided in a promotional message.

10. Cookies and website analytics

Staff authentication uses browser storage to maintain a signed-in session. Hosting and technical services may handle operational information needed to deliver and protect the website.

For questions about cookies, browser storage or website analytics, contact info@thiloratravelandtours.com.

11. Privacy requests and applicable rights

Contact info@thiloratravelandtours.com with questions about your information or requests to access, correct or delete it, or to withdraw marketing permission. Explain your request without sending unnecessary sensitive information. Appropriate identity checks may be needed before information is disclosed or changed.

The rights and conditions that apply depend on the relevant law and circumstances. Nothing in this policy limits rights that apply to you under applicable law.

12. Changes to this policy

Changes will be reflected on this page with a revised last-updated date. Any further notice or permission required for a change will be addressed as applicable. Please check this page when you have questions about our privacy practices.