Practicing our Privacy Promise
Collecting the bare minimum
We collect as little traveller information as possible. That means for example that we only ask for a passport number and expiry date if the train operator or airline demands this to print the ticket.
Safe storage
We use an encrypted storage system to save the data that we need in order to organise trips.
Deleting what we don’t need
Two weeks after a trip has ended we delete all personal information that we do not need from our servers — that includes everything but the itinerary, and the traveller’s company name. We need that information to report back on emission avoided by travelling the bookachoo way.
Keeping personal data on your request
We do keep personal information in traveller’s profiles if you want us to in order to make the booking process of frequent travellers more efficient. Of course, these profiles are kept securely and only employees that need them for our operation have access to them.
Secure sharing
We receive traveller’s information online through secure communication. That means that for this information we use a secure form on our website from which data go securely to our temporary database. For bulk bookings we either use encrypted email (if you use end-to-end encryption, for example through Protonmail) or we collect the information securely via a third party that supports safe dropping of documents - we chose Tresorit for this service.
Sending tickets
Tickets and booking confirmations do not contain sensitive personal information. On the booking confirmation we only mention the traveller’s name - not even their date of birth.
We therefore send them by email, end-to-end encrypted (E2EE) if you use end-to-end email. If you do not use an encrypted email service, but still like to receive an extra security layer when receiving the tickets, we provide you with a secure link from which you can download the tickets.
Our public PGP keys, used for encryption, can be discovered via our
public web key directory:openpgpkey.bookachoo.com/.well-known/openpgpkey/bookachoo.com/hu/[UserID]
No recording of phone calls
We don’t record any phone calls. We don’t need that for quality assurance or for training. We just don’t.
No sharing of information
The only parties that we share your information with are train operators, airlines, and sometimes a distributor of these tickets. We never share any information for marketing goals and we never sell any information. We just don’t.
Cookies
This website does’t store information of any kind on your personal web browser.
Questions
If you have any questions or concerns regarding privacy, or you want to challenge us on our practice, please email us on privacy@bookachoo.com.