Who controls your data
Credo Travel Group LLC, identification code 442738405, registered in Georgia. Any question about your data can be sent to the contact address on this site.
What we collect
When you send a booking request: your name, email address, telephone number, the details of the trip (resort, dates, number of travellers) and any note you choose to add. When you create an account: your email and password, which is hashed by our authentication provider and never reaches this application.
We never see your card
Payment happens on Flitt's own hosted page. Your card number, expiry date and CVV are never collected, transmitted or stored by us — we receive only the outcome, the amount and a payment reference.
Who else receives it
Only those necessary to provide the service: Supabase (database, authentication, hosted in Frankfurt), Vercel (hosting), Flitt (card payments, Georgia), Resend (sending email) and the tour operator who actually holds your booking. We do not sell data and we do not pass it to advertisers.
Where it is stored
The database is in the European Union (Frankfurt). Payments are processed in Georgia and email is sent from within the EU. The operator's location depends on the specific supplier.
How long we keep it
Bookings are financial records and are kept for as long as Georgian accounting law requires. An account is kept until you ask us to delete it.
Your rights
You may ask what we hold about you, ask for it to be corrected or deleted, and object to how it is processed. Write to us at the contact address. You also have the right to complain to Georgia's Personal Data Protection Service.
Cookies
There is no analytics, no advertising and no third-party tracking on this site. The only cookies are functional ones: your session, your language and your chosen currency.
Contact
Questions about your data can be sent to the contact address on this site.
