Our Policies
DATA PROTECTION ADDENDUM
Privacy Policy
At Voyzant Inc, accessible from www.voyzant.com, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information collected and recorded by Voyzant Inc and how we use it.
If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us.
This Privacy Policy applies only to our online activities and is valid for visitors to our website regarding the information they shared and/or collected in Voyzant Inc. This policy does not apply to any information collected offline or via channels other than this website.
1. Reference To Terms
In these terms
- “we”, “us” or “our” refers to VOYZANT , sales persons, offices, call centre, branch offices, agents etc.
- “our Group of Companies” refers to us, and our subsidiaries and corporate
- “our Partners” refers to any affiliated, co-branded or linked website through which our Group of Companies provides content or service.
- “Travel Services” refers to the travel services made available to you by the relevant Travel Provider(s) through our Service, such as flights, hotel stay, car rental, activities, transportation services etc.
- “Travel/Service Provider” refers to the travel supplier making available the Travel Services to you through our Service such as flights, hotel stay, car rental, activities, transportation services etc.
- “you, customer” refers to you, the traveller, agent, agencies using our Service or making a booking with our
- “information, personal information, personal data” refers to customers personally identifiable
2. Privacy Statement
We respect and commit to protect our customer privacy who inquiries about or purchases any products or services of VOYZANT Inc.through its websites, mobile applications, sales persons, offices, call centre, branch offices, agents, partners etc. (all the aforesaid platforms collectively referred to as “Sales Channels”). The websites and the mobile applications of VOYZANT Inc. are collectively referred to as ‘Website’.
By using or accessing the Website or other Sales Channels (or) booking through our Partners, the user hereby agrees with the terms of this Privacy Policy and the contents herein.
This Privacy Statement explains what data we collect, how we collect, how we use, how we protect your data and disclose, what your rights are and our role as data collector when you use our Services.
3. Disclaimer
This Privacy Policy does not apply to any website(s), mobile sites and mobile apps of third parties, even if their websites/products are linked to our Website.
We recommended that you review the privacy statements and policies of any such third parties.
Our Group of Companies reserves the right, in its sole discretion, to modify the privacy policy at its sole discretion without notice. The changes will be effective when posted. You are requested to view the privacy policy time to time.
4. What Data We Collect
We collect the following data, when you register and/or transact through us.
- Personal Details such as Name, age, date of birth, gender.
- Contact Information such as address, email address, phone number, country of residence.
- Account Information such as login email address and password.
- Booking Information such as debit, credit or other payment card information, billing address, contact details.
- Travel Documents such as passport number, driver license id, frequent flyer information, nationality.
- Device Information such as your device type, configuration, operating system, location such as IP address or other device identifier, country of origin, language, region. This will be automatically generated by us.
In case if you are booking on behalf of another person, you are responsible for the privacy of the data shared with us. You also agree to provide no false or fraudulent information for booking any of the Services provided by our Website.
We will use the information that you provide only for the Services that you select and for lawful purpose only. You further understands that we will share some or all of this information with the Travel Service Provider for provision of the desired booking.
If you choose not to provide the personal information necessary to operate and provide you with a particular Service or feature of that Service, you may not be able to use that Service or feature.
5. How We Collect Your Information
We collect required information from your both directly and indirectly.
Directly: we obtain personal data directly from the User in a variety of ways including but not limited to obtaining personal data from individuals who provide their personal information via registrations or guest account for booking travel services, their business card, complete our online form on our website/mobile app, provide records relating to previous requests or reservations made. We may also obtain personal data directly when we are establishing a business relationship, performing professional service through a contract, or through our hosted software applications.
Indirectly: we obtain personal data indirectly about individuals from a variety of sources, which includes but is not limited to travel agents, our Partners, authorized representative from whom you seek travel services on behalf of others and our clients. We may add personal data to our customer relationship management records to better understand and serve you, or to satisfy a legal obligation.
You device information will be automatically generated by us.
6. How We Use Your Information
We will not be sharing your personal data with any third unless otherwise explicitly mentioned by us. When we want to share, we will do so upon your consent or as stated in this policy.
We use your personal information for the following purposes, to:
While making a booking, we may use your personal details, including payment details, card holder name, card number with expiration date, banking details etc. We may also use the information of travellers as available in your account. We will present these information at the time of booking to complete your booking.
While registration or login, we will user your credentials to identify you as necessary to log you in to the Services. We ensure security of your data.
While communicating with you about your account or use of our Services, we may use your mode of communication services such as email notification, SMS etc.
We may also use your information to:
- Confirm your reservation with respective Service Providers
- Keep you information about the transaction status
- Send booking confirmation, cancellation, payment notification, payment error etc.
- Allow customer service to contact you
- Send verification message or email
- Send any update or changes to your booking
- To meet legal and regulatory requirements
- To protect against fraudulent, unauthorized or illegal activity
- Comply with our policies, procedures and legal obligations, including law enforcement or government authority request, addressing litigation issues and other obligations conferred by law
7. With Whom Do We Share Your Information?
We disclose your personal information as follows:
- We share with our travel partners, also known as Travel Service Providers such as airlines, hotels, car companies, and tour operators etc. to provide the service you look to book.
- We share your personal details with authorities (including auditors, courts and authorities regulating us for internal compliance and audit(s)) as required or authorized by applicable law, and to comply with our legal and regulatory obligations.
- Any other organization after a restructure, sale or acquisition as long as they use your personal information for the same purpose as we did.
- At your request, we share your information as directed.
- We share your payment information such as card number, card holder name, traveller details with Travel Service Providers, third party payment processors to fulfil your Service.
8. How We Store And Protect Your Information
We have implemented very robust and appropriate technical, administrative and physical security measures to safeguard and help prevent unauthorized access to your information and to maintain data security. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. The third party with respect to payment gateway and payment processing are all validated as compliant with the payment card industry standard (referred to as PCI DSS – Payment Card Industry Data Security Standard).
You also play an important role in keeping your information secure. You should not disclose your user name, password and other security information of your account with anyone. If anyone use your account, it is your responsibility to take necessary action, including notifying us. You can contact us at tech@voyzant.com
Though we always strive to provide secure transaction, we assume no liability or responsibility for disclosure of your information due to errors in transmission, unauthorized third-party access, or other causes beyond our control.
9. What Are Your Rights
You have certain rights and choices with respect to your personal information, depending on where you reside and under applicable law, as described below:
- Right to Access – You may ask us to verify whether we are processing personal data about you, and if so, to provide more specific information. You can also request a copy of your personal information
- Right to Correction – You may ask us to correct our records, if you believe they contain incorrect or incomplete information about you.
- Right to Erasure – You may ask us erase/delete your personal data after your consent to process it, subject data retention policy and requirements under applicable law and regulations to meet our legal/regulatory
- Right to Data Portability – You may request portability of your personal data to another data controller or to you in electronic format which shall be possible based on applicable law and regulations.
- Right to Restrict – You may ask us to temporarily restrict access to certain or full personal data, if you feel your data is incorrect or compromised or inaccurate. You may ask us to inform you before lifting the temporary
- Right to Withdraw Consent – You may withdraw your consent that you have previously given to process your personal data. This will not be applicable to the Services provided before your withdrawal. If you do not provide your consent, we may not be able to provide certain services to you.
Where applicable, you may also have the right to register a complaint to your local data protection authority. For residents of the EU and UK, contact the EU data protection authorities. However, we encourage you to contact us first so we can do our best to resolve your concern. You may submit your request to us by email to tech@voyzant.com.
10. How Long We Keep Your Data
Our Group Companies will retain your Personal Information on its servers for as long as is reasonably necessary for the purposes listed in this policy. In some circumstances we may retain your Personal Information for longer periods
of time, for instance where we are required to do so in accordance with any legal, regulatory, tax or accounting requirements.
Where your personal data is no longer required we will ensure it is either securely deleted or stored in a way which means it will no longer be used by the business.
11. Cookies And Data
This Website uses cookies to improve the user experience and ensure that it is functioning effectively. Our Website needs to remember and store information about how you use this Website. This is done using storage data called cookies. Cookies contain small amounts of information and are downloaded to your computer or other device by a server for this Website.
By using this Website, you agree to our Cookie policy and usage.
Some of the cookies that we use are mandatory and cannot be such as accessing secure areas that may contain content for registered users. If you wish to not allow us to use the said cookies, you may not be able to use our Website as intended.
We use some functional cookies to record information about the choices you have made and to allow it to tailor the site to its users; for example, to remember your language or region. This information is usually anonymized and is not used for any other purpose.
We also use analytic services to understand how effective our content is, what the user interest is, and to improve how this Website works. In addition, we use tracking pixels to count visitor numbers and performance cookies to track how many individual users access this Website and how often. This information is used for statistical purposes only and our intention is not to use such information to personally identify any user. However, if you have registered and signed into this Website, we may combine this information with information from its web analytic services and cookies to analyse how you use this Website in more detail.
By using this Website, you agree that we can place cookies on your computer or device as explained above.
We may modify or amend this Cookie Notice from time to time at its discretion. When we makes a change to this notice, it will amend the revision date at the top of this page, and such modified or amended Cookie Notice shall be effective to you and your information as of that revised date. We encourages you to periodically review this Cookie Notice to be informed about how it is using cookies.
Please contact us through email: tech@voyzant.com, if you would like more detailed information on the cookies that we use.
Data Privacy Representative is: Mujtaba Ziauddin tech@voyzant.com
Our Address
Our Group of Companies primary address is
Voyzant Inc.
311-7100 Woodbine Ave. Markham, Ontario L3R 5J2
Have Any Questions?
Have questions about our Privacy Policy? We’d love to hear from you — reach out to us anytime!
Data Processing Agreement
This Data Processing Agreement (“DPA”) forms part of the Terms of Use (or other similarly titled written or electronic agreement addressing the same subject matter) (“Agreement”) between Customer (as defined in the Agreement) and Voyzant under which the Processor provides the Controller with the software and services (the “Services”). The Controller and the Processor are individually referred to as a “Party” and collectively as the “Parties”.
The Parties seek to implement this DPA to comply with the requirements of EU GDPR (defined hereunder) in relation to Processor’s processing of Personal Data (as defined under the EU GDPR) as part of its obligations under the Agreement.
This DPA shall apply to Processor’s processing of Personal Data, provided by the Controller as part of Processor’s obligations under the Agreement.
Except as modified below, the terms of the Agreement shall remain in full force and effect.
1. Definitions
Terms not otherwise defined herein shall have the meaning given to them in the EU GDPR or the Agreement. The following terms shall have the corresponding meanings assigned to them below:
- Data Transfer means a transfer of the Personal Data from the Controller to the Processor, or between two establishments of the Processor, or with a Sub-processor by the
- EU GDPR means the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
- Standard Contractual Clauses means the contractual clauses attached hereto as Schedule 1 pursuant to the European Commission’s Implementing Decision (EU) 2021/914 of 4 June 2021 on Standard Contractual Clauses for the transfer of Personal Data to processors established in third countries which do not ensure an adequate level of data protection.
- Controller means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State Law.
- Processor means a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.
- Sub-processor means a processor/ sub-contractor appointed by the Processor for the provision of all or parts of the Services and Processes the Personal Data as provided by the Controller.
2. Purpose of this Agreement
This DPA sets out various obligations of the Processor in relation to the Processing of Personal Data and shall be limited to the Processor’s obligations under the Agreement. If there is a conflict between the provisions of the Agreement and this DPA, the provisions of this DPA shall prevail.
3. Categories of Personal Data and Data Subjects
The Controller authorizes permission to the Processor to process the Personal Data to the extent of which is determined and regulated by the Controller. The current nature of the Personal Data is specified in Annex I to Schedule 1 to this DPA.
4. Purpose of Processing
The objective of Processing of Personal Data by the Processor shall be limited to the Processor’s
provision of the Services to the Controller and or its Client, pursuant to the Agreement.
5. Duration of Processing
The Processor will Process Personal Data for the duration of the Agreement, unless otherwise agreed upon in writing by the Controller.
6. Data Controller’s Obligations
- The Data Controller shall warrant that it has all necessary rights to provide the Personal Data to the Data Processor for the Processing to be performed in relation to the agreed services. To the extent required by Data Privacy Laws, Data Controller is responsible for ensuring that it provides such Personal Data to Data Processor based on an appropriate legal basis allowing lawful processing activities, including any necessary Data Subject consents to this Processing are obtained, and for ensuring that a record of such consents is maintained. Should such consent be revoked by the Data Subject, the Data Controller is responsible for communicating the fact of such revocation to the Data Processor.
- The Data Controller shall provide all natural persons from whom it collects Personal Data with the relevant privacy notice.
- The Data Controller shall request the Data Processor to purge Personal Data when required by the Data Controller or any Data Subject whom it collects Personal Data unless the Data Processor is otherwise required to retain the Personal Data by applicable law.
- The Data Controller shall immediately advise the Data Processor in writing if it receives or learns of any:
- Complaint or allegation indicating a violation of Data Privacy Laws regarding Personal Data;
- Request from one or more individuals seeking to access, correct, or delete Personal Data;
- Inquiry or complaint from one or more individuals relating to the collection, processing, use, or transfer of Personal Data; and 4.4 Any regulatory request, search warrant, or other legal, regulatory, administrative, or governmental process seeking Personal Data
7. Data Processor’s Obligations
- The Processor will follow written and documented instructions received, including email, from the Controller, its affiliate, agents, or personnel, with respect to the Processing of Personal Data (each, an “Instruction”).
- The Processing described in the Agreement and the relating documentation shall be considered as Instruction from the controller.
- At the Data Controller’s request, the Data Processor will provide reasonable assistance to the Data Controller in responding to/ complying with requests/ directions by Data Subject in exercising their rights or of the applicable regulatory authorities regarding Data Processor’s Processing of Personal Data.
- In relation to the Personal Data, Data Processor shall obtain consent (where necessary) and/or provide notice to the Data Subject in accordance with Data Protection Laws to enable shared Personal Data to be provided to, and used by, the other Party as contemplated by this Agreement.
- Where shared Personal Data is transferred outside the Data Processor’s territorial boundaries, the transferor shall ensure that the recipient of such data is under contractual obligations to protect such Personal Data to the same or higher standards as those imposed under this Addendum and the Data Protection Laws.
- The processor shall inform the controller if, in its opinion, a processing instruction infringes applicable legislation or regulation.
8. Data Secrecy
- To Process the Personal Data, the Processor will use personnel who are
- Informed of the confidential nature of the Personal Data, and Perform the Services in accordance with the Agreement.
- The Processor will regularly train individuals having access to Personal Data in data security and data privacy in accordance with accepted industry practice and shall ensure that all the Personal Data is kept strictly confidential.
- The Processor will maintain appropriate technical and organizational measures for protection of the security, confidentiality, and integrity of the Personal Data as per the specifications as per the standards mutually agreed in writing by the Parties.
9. Audit Rights
- Upon Controller’s reasonable request, the Processor will make available to the Controller, information as is reasonably necessary to demonstrate Processor’s compliance with its obligations under the EU GDPR or other applicable laws in respect of its Processing of the Personal Data.
- When the Controller wishes to conduct the audit (by itself or through a representative) at Processor’s site, it shall provide at least fifteen (15) days’ prior written notice to the Processor; the Processor will provide reasonable cooperation and assistance in relation to audits, including inspections, conducted by the Controller or its representative.
- The Controller shall bear the expense of such an audit.
10. Mechanism of Data Transfers
Where the processors is located outside the EEA or an adequate country and receives Personal Data: (a) the processor will act as the data importer, (b) the other party(client/customer) is the data exporter, and (c) the relevant Transfer Mechanism will apply. “Transfer Mechanism” refers to any lawful means of transferring personal data from the European Economic Area (EEA) or any adequate country to a third country in compliance with applicable data protection laws. This may include, but is not limited to, the Standard Contractual Clauses (SCCs) approved by the European Commission Decision of 4 June 2021 (as amended from time to time) for the transfer of personal data from the EEA or adequate countries to a third country.
11. Personal Data Breach Notification
- The Processor shall maintain defined procedures in case of a Personal Data Breach (as defined under the GDPR) and shall without undue delay notify Controller if it becomes aware of any Personal Data Breach unless such Data Breach is unlikely to result in a risk to the rights and freedoms of natural persons. 2. The Processor shall provide the Controller with all reasonable assistance to comply with the notification of Personal Data Breach to Supervisory Authority and/or the Data Subject, to identify the cause of such Data Breach and take such commercially reasonable steps as reasonably required to mitigate and remedy such Data Breach. 11.3. No Acknowledgement of Fault by Processor. Processor’s notification of or response to a Personal Data Breach under this DPA will not be construed as an acknowledgement by Processor of any fault or liability with respect to the data incident.
12. Return and Deletion of Personal Data
- The Processor shall at least thirty (30) days from the end of the Agreement or cessation of the Processor’s Services under the Agreement, whichever occurs earlier, shall return to the Controller all the Personal Data, or if the Controller so instructs, the Processor shall have the Personal Data deleted. The Processor shall return such Personal Data in a commonly used format or in the current format in which it was stored at discretion of the Controller, soon as reasonably practicable following receipt of Controller’s notification. 2. In any case, the Processor shall delete Personal Data including all the copies of it as soon as reasonably practicable following the end of the Agreement.
13. Technical and Organizational Measures
Having regard to the state of technological development and the cost of implementing any measures, the Processor will take appropriate technical and organizational measures against the unauthorized or unlawful processing of Personal Data and against the accidental loss or destruction of, or damage to, Personal Data to ensure a level of security appropriate to: (a) the harm that might result from unauthorized or unlawful processing or accidental loss, destruction or damage; and (b) the nature of the data to be protected [including the measures stated in Annex II of Schedule 1].
14. Miscellaneous
- In the event a Data Subject wishes to exercise its data subject rights under applicable Data Protection Law, including, but not limited to, a data subject’s right of access, correction and/or erasure of its Personal Data in Scrut Automation’s control, the Data Subjects can submit such request done by contacting Scrut Automation’s Data Protection Officer (DPO) below. Also, for raising concerns and/or any complaints related to the Customer Personal Data that can be done by contacting the Data Protection Officer below:
Name: Mujtaba Ziauddin
Email ID: Tech@Voyzant.com
- There are no Temporary files getting generated during
Have Any Questions?
Have questions about our Privacy Policy? We’d love to hear from you — reach out to us anytime!