Introduction
This Privacy Policy explains how GSK travel (identification number: 01027038032), which operates the GSK travel website and booking services (“we”, “us”, “our”), collects, uses, stores, and protects personal data when you browse our site, create an account, request quotes, or complete bookings for hotels, flights, tours, or custom travel packages in Georgia and related destinations.
We process personal data in accordance with applicable law in Georgia and, where relevant, international data protection principles. By using our services, you acknowledge this policy.
Data controller
Data controller: GSK travel, Tbilisi, Kalouabni Street 32A.
Privacy enquiries: support@gsk.travel. Booking-related data: support@gsk.travel.
Information we collect
Identity and contact details: name, email, phone, nationality, passport details where required for flights, billing address.
Booking data: travel dates, passenger counts, room or fare selections, special requests, itinerary preferences from our trip planner, and communications with support.
Payment data: for online card payments, processing is carried out by our licensed payment partner (e.g. TBC Bank eCommerce). We do not store full card numbers on our servers; we receive transaction references, amounts, and payment status.
Technical data: IP address, browser type, device identifiers, cookies, and analytics events to improve security and site performance.
Partner accounts (B2B): company name, registration details, and activity logs for approved travel trade users.
Affiliate and referral data: when you click partner links or embedded widgets, partners may receive technical identifiers (e.g. click ID, referrer URL, device/browser signals) to attribute referrals and commissions. We may receive aggregated or transaction-level reports from partners where our programmes allow.
Live chat: when enabled, an automated GSK travel Assistant (AI) may answer general and policy questions before a human agent joins. Chat content is stored with your support ticket. The assistant cannot access your bookings or payment records and is not legal advice.
How we use your data
To process and confirm bookings, send confirmations, provide customer support, and meet legal obligations.
To prevent fraud, protect accounts, and secure our platform.
To personalise travel recommendations when you use our AI trip planner (based on your input).
To send service messages about your booking; marketing only where you have opted in, with an option to unsubscribe.
Affiliate and third-party booking partners
When you use affiliate links, deeplinks, or embedded search/booking widgets (e.g. Travelpayouts, Booking.com partner tools, or similar providers), those partners may collect and process personal data under their own privacy policies when you interact with their sites.
GSK travel may receive limited data from partners (e.g. booking status, commission reports, or aggregated analytics) to manage and improve our programmes. We do not control partner processing once you leave our site.
For direct GSK travel bookings and booking requests we process ourselves, we are responsible for the data we collect as described in this policy. For bookings on a partner site, contact that partner for access, correction, or deletion requests relating to their processing.
Retention
We retain booking and payment records for accounting, tax, and dispute resolution as required (typically up to 7 years unless law requires longer).
Marketing preferences and analytics logs are kept for shorter periods, consistent with our Cookie Policy.
Your rights
Under applicable law, you may request access, correction, deletion, restriction, or portability of your personal data, or object to certain processing.
Send requests to support@gsk.travel. We respond within a reasonable time and may ask you to verify your identity.
Security
We use HTTPS, access controls, and industry-standard practices to protect data. No method of transmission over the internet is 100% secure; please use strong passwords and keep account credentials confidential.
Changes
We may update this policy; the “last updated” date at the bottom of the page will change. For material changes we may notify you by email or site notice where appropriate.