Privacy Policy

We only collect what we need to run the portal and issue airline group tickets:

• Agent account: your name, agency or company name, city, phone number, email address and the agency visiting card you upload when you register. Your password is handled by our login provider and stored only in encrypted (hashed) form; we never see it.
• Passenger details for bookings: title, first and last name, passport number, date of birth and passport expiry date for every traveller you add to a booking.
• Booking and account records: the groups you hold or book, booking references, amounts, and the payments and charges recorded in your ledger.
• Messages: what you send through our contact form, such as your name, email, phone, subject, message and booking reference.

We do not collect card numbers. Payments are made by bank transfer to the accounts on our Bank Details page.

• To create and verify your agent account and keep it secure.
• To hold seats, process bookings and issue tickets with the airline.
• To keep your ledger, invoices and payment records.
• To send account emails, such as your welcome email and password reset links.
• To answer your messages and provide support.
• To meet our legal, tax and accounting obligations.

We do not sell your information or share it for advertising.

• Airlines: passenger names and passport details are shared with the airline only to issue tickets for your bookings.
• Service providers: our database, file storage and login service (Supabase), our website host (Hostinger) and our email provider process data on our behalf to run the portal.
• Authorities: when the law requires us to, for example for immigration or tax purposes.

Portal data is stored with Supabase on servers located in Australia, so it may be processed outside Pakistan. We protect it by:

• Using encrypted (HTTPS) connections for the whole portal.
• Database access rules so each agent can see only their own bookings, passengers and ledger, while only our admin staff can see all records.
• Keeping visiting cards in private storage that only our admin staff can open.
• Checking every booking amount and seat count on our server, not in the browser.

No system is perfectly secure. If we learn of a breach that affects your information, we will let you know.

We do not use advertising or tracking cookies. Your browser stores your login session so you stay signed in, and your light or dark theme choice. Clearing your browser data signs you out.

We keep account, booking and ledger records while your account is active and for as long as we need them for accounting, tax or legal reasons. Contact messages are kept while they are useful for support. When information is no longer needed, we delete it.

You can ask us to:

• Show you the personal information we hold about you or your passengers.
• Correct information that is wrong.
• Close your account and delete your information, except records we must keep by law.

Contact us using the details below and we will reply as soon as we can.

When you add passengers, you confirm that you have their permission to share their details with us for their booking, and that the details are correct.

We may update this policy from time to time. The date at the top shows when it last changed. Important changes will be announced on the portal.

• Bakka Al Jadeed
• Or use our contact form.