1. Who we are (data controller)

JunketTours is a licensed tour operator based in Lahore, Pakistan, and is the controller of the personal data described in this policy for the website https://www.junkettours.co.

• Address: 156,Block M Phase 2 Johar Town, Lahore, 54000
• Email: JunketToursofficial@gmail.com
• Phone / WhatsApp: +92 320 9973486

We are not established in the EU or UK and have not appointed an EU/UK representative. You can contact us directly about any privacy matter using the details above.

2. Data we collect

• Enquiry details — name, email, phone/WhatsApp number, country, and the message you send via our contact form, booking request, or WhatsApp.
• Trip preferences — destinations, dates, budget, group size, departure city and special requirements (e.g. accessibility or dietary needs you choose to tell us).
• Account data — if you register: name, email, phone and a securely hashed password.
• Visa invitation data — passport details, nationality, date of birth and travel dates you submit specifically for a visa invitation letter.
• Booking records — confirmed itineraries, invoices and payment references. We do not take or store card details on this website.
• Technical data — IP-derived country (to choose a display currency), device and browser type, pages viewed and performance metrics (see Cookies & analytics).

3. Why we use it, and our legal basis

• Answering enquiries, preparing quotes and delivering booked trips — necessary to take steps at your request before entering into, and to perform, a contract with you.
• Preparing visa invitation letters — performance of the service you request.
• Keeping booking and accounting records — compliance with legal obligations (e.g. tax and tourism licensing rules in Pakistan).
• AI-assisted itinerary drafts — performance of the service you request; your trip preferences (never passport or payment details) are sent to our AI provider to generate a draft.
• Site security, fraud prevention and aggregated, cookieless performance statistics — our legitimate interests in running a safe, fast website.
• Google Analytics, Google Ads and Meta advertising measurement — only with your consent, which you can withdraw at any time.

We do not use your data for automated decisions with legal effects, and we do not sell personal data.

4. Cookies & analytics

We ask for your choice with a cookie banner on your first visit. Non-essential analytics and advertising cookies are only set if you click “Accept all”. If you click “Reject all”, none of them are used.

We also use Vercel Web Analytics and Speed Insights, which measure page views and page speed without cookies and without identifying individual visitors. Our AI planner and forms may keep an unsent draft in your browser's local storage so you don't lose your progress.

Change or withdraw your choice at any time: Cookie settings.

5. Who we share data with

We share only what each party needs, with service providers acting on our instructions:

• Vercel — website hosting, cookieless analytics and performance monitoring.
• Convex — secure cloud database for enquiries, accounts and bookings.
• Resend — sending confirmation and notification emails.
• Groq (AI language-model provider) — generating draft itineraries from the trip details you enter.
• Google — Analytics and Ads measurement (with consent) and Maps (embedded office location; Google may set its own cookies when you interact with the map).
• WhatsApp / Meta — when you choose to message us on WhatsApp, and (only with your consent) the Meta Pixel and Conversions API, which receive your IP address, browser details and the fact that you sent an enquiry — never your name, phone number or message.
• Hotels, transport operators, guides and permit authorities in Pakistan — only for a trip you book, and Pakistani authorities where required for visas or by law.

6. International transfers

We operate from Pakistan and our technology providers may process data in the United States and other countries. These countries may not have data-protection laws equivalent to those in your home country (for example the EEA or UK). Where required, we rely on our providers' standard contractual clauses or equivalent safeguards, and transfers necessary to arrange the trip you requested.

7. How long we keep data

• Enquiries that don't become bookings — up to 24 months, then deleted or anonymised.
• Booking and invoice records — as long as required by Pakistani tax and licensing law (typically up to 6 years).
• Passport details for visa invitations — only as long as needed to issue the letter and handle follow-up questions from authorities, then deleted.
• Accounts — until you ask us to delete your account.
• Analytics data — Google Analytics retention is set to 14 months.

8. Security

Data is encrypted in transit (HTTPS), passwords are stored as one-way hashes, and access to enquiry and passport data is restricted to authorised staff. No system is perfectly secure; if a breach affects your data we will notify you where the law requires.

9. Your rights

Wherever you live, you can ask us to:

• access a copy of your personal data;
• correct inaccurate data or delete data we no longer need;
• restrict or object to processing based on legitimate interests;
• receive your data in a portable format;
• withdraw consent (e.g. analytics cookies) at any time, without affecting earlier processing.

Email JunketToursofficial@gmail.com with your request. We may ask you to verify your identity and will reply within one month. If you are in the EEA or UK and are unhappy with our response, you can complain to your local data protection authority (for example the ICO in the UK). Residents of California and other US states have similar rights to know, delete and correct their data — we do not sell or “share” personal data for cross-context behavioural advertising.

10. Children

This site is not directed at children. We don't knowingly collect data from anyone under 16 except as part of a family booking made by a parent or guardian.

11. Changes to this policy

We may update this policy as our services change. The date at the top shows the latest version; for material changes we will also highlight the update on the site.

12. Contact us

JunketTours, 156,Block M Phase 2 Johar Town, Lahore, 54000. Email JunketToursofficial@gmail.com or use our contact page. See also our Terms of Service.