Privacy Policy

Pearl Drift (“we”, “us”, “our”), a travel agency registered in the Maldives, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal data in relation to the services we provide, including via our website www.pearldrifttours.com and other channels. By using our services, you agree to the collection and use of your data as described here.

1. Definitions

• Personal Data: Any information that can identify you, directly or indirectly (e.g. name, contact information, passport details, payment information).
• Processing: Any operation we perform on your data, such as collection, storage, use, disclosure, etc.
• Data Controller: Pearl Drift, responsible for determining how your personal data is processed.
• Data Processor:Any third party who processes data on our behalf.

2. What Data We Collect

We may collect and process the following personal data:

• Identity information: name, date of birth, nationality, passport or ID number.
• Contact information: address, email address, phone number.
• Booking details: travel destination, itinerary, preferences, dates of travel.
• Payment information: credit card or bank details (processed via secured payment gateways).
• Travel documents (if needed): visa information, health declarations (if required by laws or partners).
• Communication data: correspondence, inquiries, feedback.
• Device & usage data: IP address, browser type, device information, cookies, analytics, website usage data.

3. How We Use Your Data

We use your personal data for:

• Facilitating travel bookings and related services you request.
• Processing payments and refunds.
• Communicating with you (confirmations, updates, support, promotional offers if you opt in).
• Meeting legal, regulatory or travel requirements (e.g. visa, immigration, safety).
• Improving our services, website, and user experience via feedback, statistical analysis.
• Marketing (only with your consent), including newsletters, special offers.

4. Legal Basis for Processin

Given Maldives currently lacks general comprehensive data protection legislation, but considering international best practices and possibly GDPR if you serve EU customers or residents, we rely on one or more of the following lawful bases (as relevant):

• Performance of contract (you request travel services from us).
• Your consent (for marketing or optional features).
• Compliance with our legal obligations (visas, immigration, safety).
• Legitimate interests (e.g. improving our service, preventing fraud), balanced with your rights.

5. Data Sharing and Disclosure

We may share your personal data with:

• Travel service providers (hotels, airlines, transport operators, local guides) to fulfill your bookings.
• Payment processors and financial institutions.
• Government, immigration, customs, health, or tourism authorities when required by law.
• Third party service providers who assist in business operations (e.g. IT hosting, marketing services, analytics), under contractual confidentiality obligations.
• Legal authorities in case of legal requirement or to protect our legal rights.

We do not sell your personal data to unrelated third parties.

6. International Transfers

If your travel involves jurisdictions outside the Maldives, your personal data may be transferred to other countries. We will take reasonable steps to ensure that your data is protected in accordance with this Privacy Policy, and that any international transfers meet applicable legal requirements.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. After this period, we will securely delete or anonymize your data, unless further retention is required by law or for legitimate business purposes (e.g. accounting, audit, dispute resolution).

8. Cookies & Tracking Technologies

We use cookies, web beacons, analytics tools, and similar technologies on our website to:

• enable functionality (e.g. keeping you logged in, remembering preferences),
• analyze website usage, improve performance, and serve personalized content or ads (if applicable).

You may disable cookies in your browser settings, though this may impact functionality or your experience.

9. Your Rights

Depending on applicable law (including for users from the EU or other jurisdictions), you may have rights including:

• The right to access the personal data we hold about you.
• The right to correct inaccurate or incomplete data.
• The right to delete your data (where no longer needed or obliged to retain).
• The right to restrict or object to certain kinds of data processing (e.g. marketing).
• The right to data portability (if applicable).
• The right to withdraw consent at any time (for processing based on consent).

If you want to exercise any of these rights, please contact us using the details below.

10. Security

We take appropriate technical, administrative, and physical measures to safeguard your data from unauthorized or unlawful access, alteration, disclosure, or destruction. These include:

• Use of encryption where appropriate (e.g. for sensitive data and during transfer).
• Access controls—only authorized personnel have access to personal data.
• Regular reviews of our data collection, storage, and processing practices.

However, no system is fully secure; while we strive to protect your data, we cannot guarantee absolute security.

11. Children’s Data

We do not knowingly collect personal data from children under [age, e.g. 16] without parental consent. If we learn that we have collected data from a child without proper consent, we will take steps to delete it.

12. Changes to This Policy

We may update this Policy from time to time, to reflect changes in our practices, legal requirements, or service offerings. When we do, we will revise the “Last updated” date. We recommend you review this Privacy Policy periodically. Continued use of our services after changes are posted constitutes acceptance of those changes.

Contact Us

If you have any questions about this Privacy Policy, or wish to exercise your rights, or have a complaint about our handling of your data, please contact:

Pearl Drift PVT LTD

M.White Birdy, Kanba aisa rani hingun, Male’, Rep. of Maldives

+960 9542808

Last Updated: 18^th September 2025