Privacy policy

Last updated: 26 August 2026

1. Who we are

Teravia (“we”, “us”, “our”) operates the website and related services at teravia.al. We help travellers discover, plan, and book experiences across Albania.

• Address: Rruga Urani Pano, Tirana, Albania, 1001
• Email: info@teravia.al
• Phone: +355 68 352 6713 (WhatsApp only)

This privacy policy explains what personal data we collect, why we use it, how long we keep it, who we share it with, and what rights you have.

2. What Teravia does (and why it matters for privacy)

Teravia is a travel marketplace and planning platform. Depending on the listing, bookings may work in one of two ways:

• On-platform bookings — you request or confirm a tour, activity, stay, or table through Teravia’s own booking flow. We process guest and booking details and share what the partner needs to fulfil the booking.
• Third-party bookings — we may send you to an external provider (for example Viator for some tours, Booking.com or Airbnb for some stays, or a restaurant’s own reservation channel). Those providers process your data under their own privacy policies once you leave Teravia.

We also provide trip planning tools (saved places, itineraries, search, and recommendations) that rely on account and usage data.

3. The data we collect

3.1 Data you give us

• Account details: name, email address, password (stored hashed), and profile preferences
• Booking details: dates, guest counts, guest names where required, special requests, confirmation codes, and communication about a booking
• Trip and planning data: destinations, saved listings, itinerary notes, interests, and search inputs
• Partner applications: business name, contact details, listing type, and materials you submit
• Support messages: emails, WhatsApp messages, and in-product requests
• Marketing preferences: whether you want product or editorial emails (when we offer them)

3.2 Data we collect automatically

• Technical logs: IP address, browser/device type, approximate location derived from IP, referring pages, and timestamps
• Usage events: page views, listing views, saves, outbound clicks to partners, and booking steps (used for product reliability and recommendations)
• Cookies and similar technologies — see our cookie policy

3.3 Data from partners and processors

• Booking status updates from partners (accepted, declined, cancelled, completed)
• Payment or payout status from payment processors when payments are handled through Teravia or a connected provider
• Fraud, abuse, or security signals from hosting and security tools

We do not intentionally collect special-category data (health, religion, politics, biometrics). If you include that kind of detail in a free-text note, only include what is necessary for the booking.

4. Why we use your data (purposes and legal bases)

Where EU/EEA or Albanian data-protection rules apply, we rely on one or more of: performance of a contract, legitimate interests, legal obligation, or consent.

• Provide the service — create accounts, run trips and saves, process on-platform bookings, and show confirmation details (contract / legitimate interests)
• Share booking details with partners — so they can accept, prepare, and deliver the experience (contract)
• Hand off to third-party booking channels — when a listing books externally; after redirect, that provider’s policy applies (contract / legitimate interests)
• Customer support — answer questions by email or WhatsApp (contract / legitimate interests)
• Recommendations and ranking — improve homepage and explore relevance from engagement signals (legitimate interests; you can limit cookies as described in the cookie policy)
• Security and fraud prevention — protect accounts and the platform (legitimate interests / legal obligation)
• Legal compliance — tax, accounting, consumer, and regulatory requirements (legal obligation)
• Product improvement — aggregated analytics and debugging (legitimate interests)
• Marketing — only where allowed; you can opt out of non-essential marketing emails (consent or soft opt-in where permitted)

5. Who we share data with

• Partners — tour operators, hotels, guesthouses, restaurants, and activity providers fulfilling a booking or enquiry you started
• Third-party booking platforms — when you continue a booking on Viator, Booking.com, Airbnb, OpenTable-style tools, or a partner’s own site; those parties become independent controllers for the data you submit there
• Service providers — hosting, email delivery, analytics, maps, media storage, payment processors, and advertising measurement (including Meta Pixel) acting on our instructions or as independent controllers where their own policies apply
• Professional advisers and authorities — where required by law, dispute resolution, or to protect rights and safety

We do not sell your personal data. We do not rent email lists.

6. International transfers

Some processors may store or access data outside Albania or the EU/EEA. Where required, we use appropriate safeguards (such as standard contractual clauses or an adequacy decision) with those providers.

7. How long we keep data

• Account data — while your account is active; deleted or anonymised after closure when no legal retention applies
• Bookings and invoices — typically for the period required by tax and consumer rules (often several years)
• Support correspondence — as long as needed to resolve the matter, then for a limited archive period
• Logs and analytics — usually shorter rolling windows unless needed for security investigations
• Partner applications — for the application process and a reasonable follow-up period

8. Security

We use industry-standard measures appropriate to a web marketplace: encrypted transport (HTTPS), hashed passwords, access controls on admin tools, and limited staff access to booking data. No method of transmission or storage is perfectly secure; please use a strong unique password and contact us if you suspect unauthorised access.

9. Your rights

Depending on applicable law, you may have the right to:

• Access a copy of your personal data
• Correct inaccurate data
• Delete data (subject to legal retention for bookings and accounting)
• Restrict or object to certain processing
• Receive data portability for information you provided
• Withdraw consent where processing is consent-based
• Lodge a complaint with a supervisory authority

To exercise these rights, email info@teravia.al or write to us at Rruga Urani Pano, Tirana, Albania, 1001. We may need to verify your identity before responding.

10. Children

Teravia is not directed at children under 16. If you believe we hold data about a child without appropriate consent, tell us and we will delete it where required.

11. Automated decisions

We use ranking and recommendation algorithms to order content (for example “Worth the trip”). These do not produce legal or similarly significant effects about you on their own; they help surface listings. Booking accept/decline decisions for on-platform requests are made by partners, not by an automated Teravia credit-style score.

12. Changes to this policy

We may update this policy as the product or the law changes. The “Last updated” date at the top will change when we do. Continued use of Teravia after an update means you acknowledge the revised policy.

13. Contact

Privacy questions: info@teravia.al · +355 68 352 6713 (WhatsApp only) · Rruga Urani Pano, Tirana, Albania, 1001