YOUR INFORMATION

Privacy Notice

Effective 23 October 2026

Google Analytics on public pages and your choices

We use Google Analytics 4 to understand public website visits. For connections identified as Pakistan by our local country database, Analytics may start automatically unless you have opted out. For all other or unknown locations we ask before loading Analytics. IP-country estimates are approximate and can be affected by VPNs. A missing, outdated or unreadable country database keeps the site consent-first. We do not use browser language, company country or your chosen travel destination to make this decision.

The country lookup uses a local, Pakistan-only extract of the monthly DB-IP Country Lite database; your connection IP is used transiently on our server and is not sent to DB-IP or stored by this lookup. IP Geolocation by DB-IP, adapted under CC BY 4.0. This is not precise location tracking.

When Analytics runs, Google receives technical information such as your IP address, browser/device information and a pseudonymous cookie identifier, and may derive approximate location. Data may be processed outside your country under Google's terms. We send generalized page categories rather than individual listing/provider identifiers, remove URL query strings and fragments, and reduce referral URLs to their origin. Private ERP pages, passwords, traveler/passport information, financial records, form contents and search terms are not included in this integration. See how Google uses information from sites using its services.

Use Privacy choices in the public footer at any time, then Reject optional to turn off Analytics, including in automatic regions. Saved rejection and browser Do Not Track or Global Privacy Control signals override regional defaults. Rejecting does not prevent use of the website. Withdrawing disables this site's Analytics measurement and expires its accessible Analytics cookies; it does not retroactively erase data already processed by Google. Explicit choices are remembered in local browser storage for up to 180 days; automatic regional operation is not saved as if you had consented. Analytics cookies are configured for up to 90 days without automatic renewal. Advertising storage, personalization and Google signals are disabled. Enhanced measurement, including automatic form tracking, is off. Google Privacy Policy.

This Google measurement is separate from YASTRAV's own marketplace view counters described below. Operational security and essential login storage do not depend on Analytics choices.

Marketplace views and departure preferences

Service and provider-profile view counts measure visible detail visits, not verified individual people or bookings. A protected 30-day browser cookie helps count each listing, flight group or provider profile once per browser per UTC day. Daily deduplication hashes are cleaned up after 30 days during subsequent tracking activity. Detailed daily aggregates are cleaned up after 400 days; lifetime counters remain. Authorized companies see only their audience report; the platform owner can see cross-company aggregates. Reports include estimated device/browser/OS categories, browser language and its language-region (not physical location), referral hostname and daily trends. No raw user-agent, full referral URL, gender inference, precise geolocation or fingerprint is saved. Physical location is not available in these reports. This view-tracking feature does not store raw IP addresses or send location information to an external service. Counts may influence recommended order within a balanced company mix. Browser Do Not Track and Global Privacy Control signals suppress view tracking. The control below turns off counting for this browser; clear the browser's local site storage to reset that choice.

An explicitly selected departure airport is remembered in a 90-day preference cookie and used to reorder recommended connected packages. It does not hide other departures or override a price sort. Select Anywhere to clear the preference. Cookies can also be removed through your browser settings.

This notice explains the information YASTRAV handles through its public website, marketplace and subscribed travel ERP workspaces.

1. Our privacy roles

For public signup, marketplace and platform-administration information, YASTRAV determines why the information is used. For Customer, traveler, employee, supplier and transaction records entered by a subscribing company, that company normally controls the business purpose and YASTRAV processes the data to provide the service.

2. Information we handle

This may include company and user identity, contact information, login and security records, subscription records, marketplace enquiries, Customers, travelers, passports, service arrangements, documents, financial entries, communications preferences, audit history and technical diagnostics.

3. How information is used

Information is used to provide Company workspaces, authorize access, operate bookings and accounting workflows, route marketplace enquiries, deliver requested notifications, support users, prevent abuse, investigate errors and maintain auditable business records.

Information is available to authorized users of the relevant company according to permissions. It may be processed by hosting, messaging, email, AI or technical service providers configured for the service. Public marketplace pages expose only information a company deliberately publishes; internal supplier cost, margin and operational data are not part of the public projection.

5. Security

YASTRAV uses Company and Branch scoping, role permissions, server-side validation, session controls, audit records and protected file storage. No system eliminates every risk, so companies must use appropriate permissions, protect credentials and report suspected unauthorized access promptly.

6. Retention

Business and accounting records may be retained while a subscription is active and for a period afterward where required for support, recovery, audit, dispute resolution or legal obligations. Public enquiries and technical records are retained only as reasonably necessary for their purpose.

7. Access and correction

Company users should first contact their Company Administrator for profile, Customer or business-record questions. Marketplace visitors may contact the relevant provider regarding an enquiry. Requests concerning YASTRAV-controlled signup or platform information can be submitted through the contact page.

8. Changes

We may update this notice as the platform, providers or legal requirements change. The effective date above identifies the current version.