1. Data we collect
We may collect names, email addresses, phone numbers, profile images, account data, traveller details, bookings, coupon use and technical data such as IP addresses, user agents and security logs.
2. Payment data
Payments are handled by payment providers. We retain transaction references, status, amount and method as needed, but do not store full card numbers or OTP codes.
3. How we use data
We use data to manage accounts, process bookings, confirm payments, send essential communications, provide member benefits, support customers, prevent fraud and improve performance.
4. Legal bases
Data is processed to perform booking contracts, comply with law, support legitimate operational interests and, where required, based on consent.
5. Sharing
Necessary data may be shared with booked service providers, payment, email and hosting providers, and authorities where legally required. We do not sell personal data.
6. Cookies and usage data
Essential cookies support sign-in, language, security and core website functions. Aggregated data may be used to understand performance without directly identifying individuals.
7. Retention
Data is retained as needed for service delivery, disputes, audits, accounting and legal obligations, then deleted, anonymised or appropriately restricted.
8. Security
We use access controls, encryption in transit, operational logging and proportionate technical safeguards. No online system, however, can guarantee absolute security.
9. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, objection or a copy of data, and withdraw consent. Legal exceptions may apply.
10. Children
Minors should use the service with a parent or guardian’s permission and supervision, especially when submitting information or making payments.
11. Policy changes
This policy may change as services or laws evolve. The latest version and effective date will appear on this page.
12. Privacy contact
Send privacy questions or requests to support@onsello.com with the subject “Privacy Request”. Identity verification may be required to protect your data.