How we protect your travellers’ data
Companies trusting us with their employees’ details deserve straight answers. Here they are.
Your data stays with us
Traveller details live in systems LUX Travel Adventures controls, not a third-party CRM. They’re shared with suppliers and Fora Travel only as bookings need.
Encrypted everywhere
Connections are encrypted (TLS), and data is encrypted at rest, including backups. Dates of birth get an extra layer of field-level encryption.
Only the people running your trip
Advisors see the events they run. Organizers see their own event’s progress, never other travellers’ sensitive details. Travellers see only their own.
Strong sign-in
Advisors and organizers sign in with a password and an authenticator app; sessions time out.
Deleted on a schedule
Identity data is deleted 30 days after the trip; other traveller data after two years. You can ask us to delete yours sooner.
No card numbers
Payments go through Fora Travel’s secure checkout. We never see or store card details.
Everything logged
Imports, exports and access to sensitive fields are recorded in an audit log.
If something goes wrong
We have a written incident plan, and we tell affected clients within 72 hours of a confirmed incident.
Need a security questionnaire completed or a data-processing agreement? Ask your advisor; we’re happy to help.
Plan your team’s trip
Share a few details and Melissa will come back to you personally within one business day with ideas, not a sales pitch.