Privacy Policy
We are committed to protecting your personal data and being transparent about how we use it, in full compliance with the Nigeria Data Protection Regulation (NDPR) 2019.
1. Who We Are
Parallel Travel & Tours Limited ("Parallel Travel", "we", "us", or "our") is a travel agency incorporated in Nigeria and accredited by NANTA and IATA TIDS. Our registered address is:
4 Babatope Bejide Crescent, Lekki Phase 1, Lagos, Nigeria
Email: [email protected]
Phone: +234 913 204 8601
We are the data controller for personal information collected through this website and our services.
2. Personal Data We Collect
We collect the following categories of personal data:
Identity & Contact Data
Name, email address, phone number, gender, date of birth, nationality, country and city of residence, and emergency contact details.
Travel & Document Data
Passport number, passport biodata page, passport photograph, travel history, visa applications, flight tickets, hotel vouchers, travel insurance documents, and PNR (booking reference) codes.
Financial Data
Payment transaction references processed through Paystack. We do not store your card number, CVV, or bank account details — these are handled exclusively by Paystack's PCI-DSS-compliant infrastructure.
Application Support Data
Bank statements, police clearance certificates, and NDLEA clearance certificates submitted as part of visa application packages.
Technical Data
IP address, browser type, device type, pages visited, and session duration collected automatically via Google Analytics (GA4) and server logs.
Communications Data
Enquiry messages, support requests, and any correspondence you send us through our contact form or email.
3. How We Collect Your Data
We collect personal data through the following means:
• Directly from you — when you register a traveller profile, submit a visa application form, make a payment, complete our contact form, or correspond with us by email or phone.
• Automatically — when you browse our website, via cookies and analytics tools (see Section 8 on Cookies).
• From third parties — Paystack provides us with payment transaction references and status confirmations after you complete a payment.
4. How We Use Your Data
We process your personal data for the following purposes and legal bases:
Service Delivery (Contractual Necessity)
To process visa applications, coordinate flights and accommodation, manage your traveller profile, and deliver the travel logistics services you have engaged us for.
Payment Processing (Contractual Necessity)
To initiate and verify payments through Paystack for visa application fees and service charges.
Customer Communication (Legitimate Interest / Consent)
To respond to your enquiries, send booking confirmations, provide travel updates, and notify you of changes to your application status.
Legal Compliance (Legal Obligation)
To comply with Nigerian law, including the Nigeria Data Protection Regulation (NDPR) 2019, anti-money laundering requirements, and any lawful requests from regulatory authorities.
Analytics & Improvement (Legitimate Interest)
To understand how visitors use our website and improve our services, using anonymised and aggregated data from Google Analytics.
Marketing (Consent)
To send you promotional communications about our services where you have opted in. You may withdraw consent at any time by contacting us.
5. Who We Share Your Data With
We do not sell your personal data. We share it only with:
Paystack Payments Inc.
Your payment is processed by Paystack. Paystack acts as an independent data controller for payment data. See Paystack's Privacy Policy at paystack.com/privacy.
Embassy & Immigration Authorities
For visa applications, we submit your documents to the relevant embassy, consulate, or immigration authority on your behalf, as instructed by you.
Airlines, Hotels & Ground Transport Providers
We share booking-relevant details (name, passport number, travel dates) with service providers to fulfil your itinerary.
Technology Service Providers
Google LLC (Analytics), our hosting infrastructure provider, and our email delivery provider — all bound by data processing agreements.
Legal & Regulatory Bodies
Where required by law or a valid court order.
We require all third parties to maintain appropriate security standards and to use your data only for the specified purpose.
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes described in this policy:
• Traveller profile and travel documents: 5 years from your last interaction, or as required by Nigerian tax and business records law.
• Visa application records: 7 years, in line with Nigerian regulatory requirements.
• Payment transaction references: 7 years for financial record-keeping.
• Analytics data: 26 months (Google Analytics default retention).
• Marketing consent records: Until you withdraw consent, plus 1 year.
When data is no longer required, we securely delete or anonymise it.
7. Your Rights Under the NDPR
Under the Nigeria Data Protection Regulation (NDPR) 2019, you have the following rights:
Right of Access — Request a copy of the personal data we hold about you.
Right to Rectification — Ask us to correct inaccurate or incomplete data.
Right to Erasure — Request deletion of your data where there is no overriding legal basis for us to retain it.
Right to Restriction — Ask us to limit how we process your data in certain circumstances.
Right to Data Portability — Receive your data in a structured, machine-readable format.
Right to Object — Object to processing based on legitimate interest, including direct marketing.
Right to Withdraw Consent — Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact our Data Protection Officer at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure, including:
• HTTPS encryption for all data in transit.
• Secure, access-controlled database storage for traveller profiles and documents.
• Payment data handled exclusively by Paystack's PCI-DSS-compliant infrastructure — we never store card details.
• Rate-limiting and OTP-based authentication for the customer portal.
• Staff access to personal data limited to those with a legitimate need.
No method of transmission over the internet is 100% secure. If you believe your data has been compromised, contact us immediately at [email protected].
10. International Data Transfers
Some of our service providers (including Google LLC for Analytics) are based outside Nigeria. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or the recipient country's adequacy status, in compliance with the NDPR.
11. Children's Privacy
Our services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last Updated" date at the top of this page will reflect the most recent revision. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes acceptance of the updated policy.
13. Contact Our Data Protection Officer
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact:
Parallel Travel & Tours Limited
Attn: Data Protection Officer
4 Babatope Bejide Crescent, Lekki Phase 1, Lagos, Nigeria
Email: [email protected]
Phone: +234 913 204 8601
You may also lodge a complaint with the Nigeria Data Protection Commission (NDPC):
Website: ndpc.gov.ng
Questions About Your Privacy?
Our Data Protection Officer is here to help.