1. Introduction and Data Controller

Rocketours International Limited respects your privacy and is committed to handling personal data responsibly and in accordance with applicable data protection laws, including the Nigeria Data Protection Act 2023. This Policy explains what information we collect, why we use it, who we may share it with and the choices and rights available to you.

Rocketours International Limited is responsible for personal data processed in connection with its own services. Our registered address is No. 3 Odin Street, Ward 36A, Amagba GRA, Benin City, Edo State, Nigeria. Privacy enquiries may be sent to privacy@rocketours.com.

2. Information We May Collect

Depending on the requested service, we may process names, dates of birth and gender; email addresses, telephone numbers and contact information; passport and other travel document information; nationality and travel history; flight, hotel, destination and itinerary information; visa application information and supporting documents; insurance request information; payment and transaction information; corporate or institutional information; communications, account and login information; website usage, device and cookie information; and customer service and complaint records.

We seek to collect only information reasonably necessary for the relevant purpose.

3. Why We Process Personal Data

Personal information may be used to search for and complete bookings; issue or facilitate reservations; provide tours, travel planning, visa assistance and insurance requests; process payments; communicate booking information; provide support; prevent fraud; meet legal and regulatory obligations; manage institutional relationships; improve our services; and send marketing communications where permitted.

Depending on the circumstances, processing may be necessary to perform a contract, take steps at your request, comply with a legal obligation, pursue a legitimate interest permitted by law, protect vital interests, or because you have provided valid consent. Where consent is relied upon, you may withdraw it subject to applicable law.

4. Travel, Visa and Payment Information

Certain services require information in passports, visas and supporting documents. Rocketours uses this information only for legitimate travel-related purposes and restricts access to authorised persons and providers who require it. Customers should not send sensitive documents through unofficial Rocketours channels.

Payment transactions may be processed by third-party payment providers. Rocketours does not necessarily receive or retain complete card information where payment is processed directly by an authorised payment gateway. Use only payment methods displayed through official Rocketours channels.

5. Sharing and International Transfers

Where necessary to deliver services, information may be shared with airlines, hotels, tour operators, travel technology providers, visa processing partners, embassies, visa centres or government authorities, insurance providers or authorised intermediaries, payment processors and financial institutions, IT, hosting and security providers, and professional advisers or authorities where legally required. We do not sell customer personal data.

Travel is international by nature. A requested service may require information to be transferred outside Nigeria. Where applicable, Rocketours will take appropriate steps required by law for international transfers.

6. Cookies and Marketing

Rocketours may use cookies and similar technologies for website functionality, security, preferences, analytics and, where permitted, marketing. Essential cookies may operate automatically where permitted; customers will be provided appropriate choices for nonessential cookies where consent is required.

Where permitted, Rocketours may send travel offers, destination inspiration, product updates and promotions. You may unsubscribe at any time using the provided mechanism or by contacting us. Opting out does not prevent essential booking or service communications.

7. Retention and Security

Rocketours retains personal information only as long as reasonably necessary for the purpose collected and to satisfy legal, regulatory, accounting, fraud prevention and dispute resolution requirements. Information no longer required will be securely deleted, anonymised or otherwise handled in accordance with applicable law.

We take reasonable organisational and technical measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. No internet system can guarantee absolute security; customers should also protect passwords and account credentials.

8. Your Rights and Children's Information

Subject to applicable law, you may have rights to obtain information about processing, request access or correction, request deletion or restriction where applicable, object to certain processing, withdraw consent, exercise data portability rights and lodge a complaint with the relevant authority. Send requests to privacy@rocketours.com. We may need to verify a requester's identity before acting.

School travel may involve children's information. Where Rocketours processes this information, appropriate authorisation should be obtained from a parent, guardian, school or other authorised party as required. It will be used only for legitimate purposes connected with the relevant service and legal obligations.

9. Third-Party Websites and Changes

Our website may contain links or integrations operated by third parties. Their privacy practices are governed by their own policies. Rocketours may update this Policy as services, technology or legal requirements change; the latest version will appear on rocketours.com with its effective date.