Privacy & Cookie Policy — travel2gether

Privacy Policy

Panni Property Management Ltd is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what data we collect through travel2gether.co, how we use it, and your rights under the General Data Protection Regulation (GDPR) and applicable Cyprus data protection law.

Data Controller

Panni Property Management Ltd
Registration number: HE 491094
Registered address: Alexandrou Ypsilanti 3, 7562 Tersefanou, Cyprus
Incorporated: 14 April 2026, Republic of Cyprus
Contact email: hello@travel2gether.co

What Data We Collect

Account information — name, username and email address when you register for an account, plus optional profile details, avatar and bio.
Travel data — countries and places you mark as visited or on your bucket list, badges, trips, and your current location if you choose to share it.
Document data — document names, expiry dates, categories, and any files you choose to upload to the Service.
Community content — forum threads and replies, buddy messages and buddy requests you send.
Notification preferences — your reminder and email settings, including the travel deals newsletter opt-in.
Technical data — IP address, browser type, device information, pages visited, and time spent on the platform, collected automatically.
Communication records — records of correspondence between you and travel2gether.

How We Use Your Data

To create and manage your account and provide the Service to you
To send document expiry reminders and other emails you have opted into
To display your public travel map and stats where your profile is public
To respond to your support enquiries
To comply with legal and regulatory obligations applicable to us in Cyprus and the EU
To improve the Service and user experience based on usage data
To contact you with relevant updates about the Service where you have given consent

Legal Basis for Processing

Contract performance — processing necessary to provide the Service you have signed up for
Legitimate interests — to operate, maintain, and improve the Service, and to respond to enquiries
Legal obligation — where we are required to process data to comply with Cyprus or EU law
Consent — where you have explicitly agreed to receive marketing communications or optional features

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law:

Account and travel data is retained for the duration of your account and for up to 2 years after account deletion
Support correspondence is retained for up to 2 years

You may request deletion of your account and associated data at any time by contacting hello@travel2gether.co.

Sharing Your Data

We do not sell your personal data to third parties. We may share your data with:

Hosting and infrastructure providers — cloud services used to operate travel2gether, acting as data processors under data processing agreements
Email delivery services — solely to deliver your requested reminders and newsletters
AI processing providers — solely to power features you actively use, such as AI document scanning and the in-app assistant
Analytics providers — for anonymous usage analytics to help us improve the Service (see Cookie Policy below)
Legal or regulatory authorities — where required by applicable law
Professional advisers — accountants, lawyers, or insurers where necessary

Your Rights

Under GDPR, you have the following rights:

Right of access — to request a copy of the personal data we hold about you
Right to rectification — to request correction of inaccurate data
Right to erasure — to request deletion of your data where there is no legitimate reason to continue processing it
Right to restrict processing — to request that we limit how we use your data
Right to data portability — to receive your data in a structured, machine-readable format
Right to object — to object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — at any time where processing is based on consent

To exercise any of these rights, contact us at hello@travel2gether.co. We will respond within 30 days.

You also have the right to lodge a complaint with the Commissioner for Personal Data Protection of Cyprus at www.dataprotection.gov.cy.

International Transfers

Your data is processed within the European Economic Area (EEA). Where any data is transferred outside the EEA (for example, via third-party services), we ensure appropriate safeguards are in place in accordance with GDPR Chapter V.

travel2gether uses cookies and similar technologies to ensure its proper functioning and to improve your experience.

What Are Cookies

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device on subsequent visits and store certain preferences or information. Cookies cannot run programmes or deliver viruses to your device.

Cookies We Use

session / auth_token — Strictly Necessary (Session): Maintains your logged-in session. Required for the Service to function correctly.
preferences — Functional (1 year): Remembers your language and display preferences.
_ga, _ga_*, _gid — Analytics (up to 2 years): Google Analytics — tracks website usage, traffic sources, and user behaviour anonymously to help us understand how visitors interact with the Service. Data is processed by Google LLC. See Google's Privacy Policy.

Analytics cookies are only placed on your device if you have given your consent via our cookie banner. You may withdraw your consent at any time by adjusting your cookie preferences.

Your Cookie Choices

When you first visit travel2gether.co, you will be presented with a cookie consent banner. You may accept all cookies or choose essential cookies only. Strictly necessary cookies cannot be disabled as they are required for the Service to function.

You can also manage cookies through your browser settings. For guidance, visit www.aboutcookies.org.

Contact

For questions about our privacy or cookie practices, please contact us at hello@travel2gether.co.