Privacy Policy
We explain clearly what data we collect, why we use it and how we protect it.
1. Who we are
Q8BY.com is responsible for information collected directly through this website and customer service. Contact us at info@q8by.com or through the Contact page.
2. Information we collect
- Identity and traveller data: name, nationality, date of birth, gender and passport details.
- Contact data: email, telephone and address where needed.
- Booking data: flights, hotels, services, travellers, requests and notes.
- Payment transaction data: amount, currency, gateway, reference and payment status; we generally do not store the full card number when a payment gateway processes it.
- Documents voluntarily uploaded for visa, passport-reading or booking services.
- Technical data: IP address, browser, device, security logs, cookies and referral parameters such as Wego.
- Customer service communications, consents and marketing preferences.
3. How we use information
- Search, booking, ticket issuance and delivery of requested services.
- Repricing and verification of availability, amounts and discounts.
- Confirmations, changes, cancellations, refunds and customer support.
- Prevention of fraud, manipulation and duplicate requests, and protection of accounts and payments.
- Website improvement, performance measurement, error repair and usage analytics.
- Compliance with legal, accounting and properly issued authority requests.
- Offers where an appropriate basis exists, with an unsubscribe option.
4. Processing grounds and consent
We process data where necessary to perform a booking or take steps at your request, meet a legal obligation, protect legitimate interests such as security and fraud prevention, or with consent where required. Consent may be withdrawn for future processing, but this does not affect prior processing or data needed for a contract or legal obligation.
5. Information sharing
We do not sell personal information. We share the minimum needed to deliver a service or protect a transaction.
- Airlines, hotels, reservation systems, tour, visa, insurance and event providers.
- Payment gateways, banks and fraud-verification providers.
- Hosting, email, messaging, analytics and technical support providers under appropriate obligations.
- Government or judicial authorities where properly required or permitted.
- Professional advisers or parties to a corporate transaction subject to confidentiality and data protection.
6. International transfers
Travel services require traveller information to be sent to suppliers and reservation systems inside and outside Kuwait. Protection laws may differ in a supplier or destination country. We take reasonable measures and limit sharing to what is necessary for the booking and service.
7. Cookies and analytics
We use cookies necessary for sessions, language, security and booking state, and may use analytics, measurement and referral tools to understand performance and campaigns. Browser controls can restrict cookies, but disabling necessary cookies may prevent login or booking completion.
8. Data retention
We retain information as needed for bookings, customer service, fraud prevention, payment settlement, accounting and legal obligations. Periods differ by record type, dispute and supplier requirement. When no longer needed, information is deleted or reasonably de-identified.
9. Information security
- HTTPS encryption in transit.
- Role-based access, authentication and security controls.
- Verification of payment amounts, currencies and references before acceptance.
- Logging, monitoring, backups and incident-response procedures.
- No electronic method is completely secure, so we continue improving controls and reducing collected data.
10. Your rights and choices
Subject to applicable requirements, you may request access to information associated with you, correction, deletion of unnecessary data, objection to certain uses or withdrawal of marketing consent. We may verify identity and retain records required for a contract, dispute or legal obligation.
11. Children’s information
Child and infant data is collected only where needed for travel or another service and is supplied by a guardian or authorised person. The service is not intended for a child to maintain an independent account without appropriate supervision.
12. Third-party links and services
The website may redirect to a payment gateway, supplier or other external site. That party processes information under its own privacy policy and terms, which should be reviewed before directly providing additional information.
13. Security notifications
If a data incident occurs, we will contain and investigate it and notify authorities or affected individuals where applicable requirements call for notification. We will not request your password or complete payment code through an untrusted message.
14. Contact and complaints
For a privacy question or request, email info@q8by.com with a description and suitable contact method, or use the Contact page. We will review the request and respond within a reasonable period after identity verification where needed.
15. Policy updates
We may update this policy when services, suppliers or requirements change. The revised version and date will be published here, with an additional notice where a change is material.