Privacy Policy

1. Information We Collect

To provide safe international travel and fulfill airline and immigration legal requirements, we collect:

• Account & Contact Info: Student name, email address, phone number, school name, and date of birth.
• Travel Documents: Passport scans, national ID copies, and visa documents required for airline ticketing and embassy processing.
• Guardian Data: Parent/guardian names, emergency phone numbers, and signed electronic consent forms for travelers under 18.
• Health & Dietary Information: Voluntary dietary requirements and critical medical disclosures (allergies, medications) needed for student safety during excursions.

2. Storage & Security of Travel Documents

All uploaded document files (passports, IDs, consent waivers, Instapay screenshots) are stored in private, encrypted cloud storage (DigitalOcean Spaces). They are never accessible via public URLs. Authorized agency staff access documents exclusively via time-limited cryptographically signed URLs with a strict 15-minute expiration time-to-live (TTL).

3. Strict Access Control for Medical Data

Medical and emergency health disclosures are classified as restricted. They are accessible solely to the assigned trip leader on duty and designated agency medical coordinators. Access to medical records is logged in an immutable audit trail.

4. Parental Portal & Transparency

Parents linked to a traveler can view their child's itinerary status, confirmed quotes, verified payment receipts, and trip leader updates. A parent may only access information pertaining to their own linked student.

5. Your Rights & Data Deletion

Travelers and guardians may request a copy of all stored personal data or request the deletion of their profile and uploaded documents after the completion of travel. Inquiries can be directed to our privacy officer at privacy@seniorstrip.com.