ENGUTOTO PRIVACY NOTICE

Last Updated: 20 January 2026

I. Introduction

Engutoto Pte. Ltd. (“Engutoto”, “we”, “us”, or “our”) recognises the importance of protecting your privacy. This Privacy Notice (“Notice”) explains how we collect, use, disclose, and safeguard personal information when you interact with our digital platforms, websites, applications, and related services (collectively, the “Platform”).

Engutoto operates as a digital travel marketing, discovery, and booking facilitation platform. We do not operate tours, accommodation, transport, or on-the-ground travel services. Instead, we connect travellers with independent third-party travel operators and service providers, who remain solely responsible for the delivery of travel services.

This Notice explains:

  • What personal data we collect

  • How and why we process it

  • When we share it with third parties

  • Your rights under applicable data-protection laws

This Notice applies globally to users of the Engutoto Platform.

II. Our Role in Data Processing

Depending on the context, Engutoto may act as:

  • Data Controller – for data collected through our Platform (e.g. enquiries, accounts, marketing, analytics)

  • Data Processor or Intermediary – when transmitting booking or enquiry data to independent travel operators at your request

Third-party operators act as independent data controllers for the travel services they provide. Their privacy practices are governed by their own privacy policies.

III. How We Collect Personal Data

A. Information You Provide to Us

We collect personal data that you voluntarily provide when you:

  • Submit enquiries or booking requests

  • Create an account

  • Subscribe to newsletters or marketing communications

  • Communicate with us via forms, chat, email, or phone

  • Participate in surveys or feedback requests

B. Information Collected Automatically

When you use our Platform, we automatically collect certain information, including:

  • IP address and device identifiers

  • Browser type and operating system

  • Pages viewed, interactions, and referral URLs

  • Cookie and tracking data

For more information, see our Cookie Notice below.

C. Information Received from Third Parties

We may receive personal data from:

  • Independent travel operators responding to your enquiries

  • Payment processors (confirmation data only; we do not store full card details unless explicitly stated)

  • Analytics, advertising, and marketing partners

  • Social media platforms where you interact with Engutoto content

IV. Minors’ Privacy

The Engutoto Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors without parental or guardian consent. If we become aware that personal data has been collected from a minor, we will delete it promptly.

V. Categories of Personal Data and Purposes

CategoryPurposeIdentification data (name, title)Responding to enquiries, account managementContact data (email, phone, address)Communication, booking facilitation, marketingPreference data (travel interests, budget, destinations)Personalisation and recommendationsTransactional dataFacilitating bookings and paymentsTechnical & usage dataPlatform security, analytics, improvementCommunications dataCustomer support, quality assurance

Engutoto collects only the minimum data necessary for these purposes.

VI. Special Category Data

In limited cases, you may voluntarily provide sensitive data (e.g. dietary needs, health-related travel considerations). Where required by law, we process such data only with your explicit consent, and solely to facilitate your request to a third-party service provider.

If you choose not to provide such data, certain travel arrangements may not be possible.

VII. Legal Bases for Processing

We process personal data based on:

  • Performance of a contract (responding to enquiries, facilitating bookings)

  • Legitimate interests (platform operations, fraud prevention, marketing)

  • Consent, where required by law

  • Legal obligations

You may withdraw consent at any time where consent is the legal basis.

VIII. Disclosure of Personal Data

We do not sell personal data.

We may share personal data with:

  • Independent travel operators you choose to engage with

  • Payment processors and technology service providers

  • Analytics and marketing partners (subject to consent where required)

  • Legal or regulatory authorities where required by law

  • Professional advisers (lawyers, accountants, auditors)

All third parties are contractually required to safeguard personal data.

IX. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. Where required, Engutoto uses:

  • Standard contractual clauses

  • Equivalent legal safeguards

  • Due diligence of service providers

X. Social Media & Third-Party Websites

Engutoto is not responsible for the privacy practices of third-party websites or social media platforms. Interactions on those platforms are governed by their own privacy policies.

XI. Your Privacy Rights

Subject to applicable law, you may request:

  • Access to your personal data

  • Correction of inaccurate data

  • Deletion of personal data

  • Restriction or objection to processing

  • Data portability

  • Withdrawal of consent

Requests can be made using the contact details below. We respond within statutory timeframes.

XII. Security & Retention

We use appropriate technical and organisational measures to protect personal data. No system is 100% secure, but we apply industry-standard safeguards.

Data is retained only as long as necessary for:

  • Platform operations

  • Legal and regulatory compliance

  • Legitimate business purposes

Where possible, data may be anonymised for analytics and research.

XIII. Cookie Notice (Summary)

Engutoto uses cookies and similar technologies to:

  • Enable core platform functionality

  • Remember preferences

  • Analyse traffic and usage

  • Improve marketing relevance

You may manage cookies via your browser settings. Some functionality may be limited if cookies are disabled.

XIV. Changes to This Notice

We may update this Notice from time to time. The “Last Updated” date will reflect changes. Continued use of the Platform constitutes acceptance of the revised Notice.