FastGo Travel, operated by [Registered Legal Company Name], is committed to respecting your privacy and protecting your personal data.

This Privacy Policy explains how we collect, use, process, store, disclose, transfer, retain, and protect personal information when you:

• Visit https://fastgo.com.bd;
• Use our website, mobile platform, customer account, or booking services;
• Search for or purchase flights, hotels, holiday packages, transfers, insurance, or other travel products;
• Request visa application assistance, Umrah services, corporate travel support, or related services;
• Communicate with us through email, telephone, WhatsApp, social media, live chat, or our office;
• Register as a customer, corporate client, travel agent, supplier, or business partner.

By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy.

Where consent is required by law, we will request your consent before processing the relevant personal data.

2. Who We Are

For the purposes of this Privacy Policy, “FastGo Travel,” “FastGo,” “we,” “us,” or “our” refers to:

Legal company name: [Registered Legal Company Name]
Trading name: FastGo Travel
RJSC registration number: [Insert registration number]
Registered address: [Insert registered address, if different]
Head office: Suite 1103, Level 11, HM Siddique Mansion, 55/A Purana Paltan, Dhaka 1000, Bangladesh
Website: https://fastgo.com.bd
Support email: support@fastgo.com.bd
Privacy email: privacy@fastgo.com.bd
Telephone/WhatsApp: +880 1805-465050

Depending on the service, FastGo Travel may act as a travel agent, booking facilitator, intermediary, service provider, data custodian, or data controller responsible for determining how personal data is used.

Airlines, hotels, payment providers, visa service partners, insurers, tour operators, technology providers, government authorities, and other suppliers may process personal data independently under their own privacy policies.

3. Scope of This Policy

This Privacy Policy applies to personal data collected through:

• The FastGo Travel public website;
• The T360-powered white-label booking platform;
• Customer and travel-agent dashboards;
• Flight and hotel search and booking forms;
• Visa, holiday, Umrah, insurance, transfer, and corporate enquiry forms;
• Telephone, WhatsApp, email, live chat, and social-media communication;
• Physical forms and documents submitted at our office;
• Payment, refund, reissue, cancellation, and customer-support processes;
• Marketing campaigns, events, surveys, and promotional programmes.

This policy does not control the privacy practices of independent third parties whose websites, applications, or services may be linked to our platform.

4. Personal Data We May Collect

The information collected depends on the service you request.

4.1 Identity information

We may collect:

• Full name;
• Title;
• Gender, where required for booking;
• Date of birth;
• Nationality;
• Passport number;
• Passport issue and expiry dates;
• National identification information;
• Photograph;
• Signature;
• Visa, residency, or immigration information;
• Frequent-flyer or loyalty programme number.

4.2 Contact information

We may collect:

• Residential or business address;
• Email address;
• Telephone number;
• WhatsApp number;
• Emergency contact information;
• Preferred communication method.

4.3 Passenger and traveller information

When one person books for another traveller, we may collect information about:

• Adult passengers;
• Children and infants;
• Family members;
• Employees;
• Corporate travellers;
• Group travellers;
• Emergency contacts.

The person submitting the booking must have appropriate authority to provide the other traveller’s information and must inform that traveller about this Privacy Policy.

4.4 Travel and booking information

We may collect:

• Departure and destination locations;
• Travel dates;
• Flight, hotel, transfer, or tour preferences;
• Passenger Name Record or booking reference;
• Ticket number;
• Airline, hotel, or supplier confirmation;
• Seat, meal, baggage, or accessibility requests;
• Travel history associated with bookings made through us;
• Cancellation, refund, reissue, and no-show information;
• Customer-support and complaint records.

4.5 Passport, visa, and immigration documents

For visa application assistance or services that require identity verification, we may collect:

• Passport copies;
• Passport-size photographs;
• National identity documents;
• Birth or marriage certificates;
• Employment and business documents;
• Bank statements or financial evidence;
• Invitation or sponsorship documents;
• Travel insurance certificates;
• Accommodation and itinerary documents;
• Previous visa or refusal information;
• Other documents requested by an embassy, consulate, immigration authority, airline, or authorised service centre.

Visa documents may contain sensitive or confidential personal information. We process such documents only for the relevant service, legal requirement, fraud prevention, or another authorised purpose.

4.6 Payment and transaction information

We may collect:

• Payment amount;
• Currency;
• Payment method;
• Transaction reference;
• Bank, mobile financial service, or payment-gateway reference;
• Invoice and receipt information;
• Billing address;
• Refund account information;
• Partial or masked payment details;
• Payment status and reconciliation records.

Online card or digital payments may be processed by authorised third-party payment service providers.

FastGo Travel does not intend to store complete card numbers, card security codes, online-banking passwords, PINs, or full payment credentials in its own systems unless securely permitted and operationally required under applicable standards.

Customers must never send card PINs, one-time passwords, passwords, or card security codes through email, WhatsApp, social-media messages, or public comments.

4.7 Corporate and B2B information

For corporate clients, agents, suppliers, and business partners, we may collect:

• Business name;
• Trade licence and registration documents;
• Tax or VAT information;
• Office address;
• Owner, director, employee, or authorised-person details;
• Bank-account information;
• Deposit and transaction records;
• Agent markup, credit, balance, and booking history;
• Contractual and compliance documentation;
• Login and authorised-user details.

4.8 Technical and usage information

When you use our website or platform, we may automatically collect:

• Internet Protocol address;
• Browser type and version;
• Device type;
• Operating system;
• Language and time-zone settings;
• Approximate location based on IP address;
• Login and account activity;
• Pages visited;
• Search information;
• Referring website;
• Date and time of activity;
• Session identifiers;
• Cookie identifiers;
• Error, security, and diagnostic logs.

4.9 Communication information

We may retain records of:

• Emails;
• WhatsApp conversations;
• Telephone-support notes;
• Live-chat messages;
• Enquiry forms;
• Complaints and feedback;
• Social-media communications;
• Call recordings, where recording is used and appropriate notice is provided.

5. Sensitive and Special Information

Certain travel services may require information that is particularly sensitive, including:

• Passport and national identification data;
• Immigration and visa records;
• Health or accessibility information;
• Dietary requirements that may indicate religious or health information;
• Biometric photographs;
• Financial documents;
• Information about children;
• Emergency or medical-assistance information.

We collect such information only where it is reasonably necessary to:

• Complete a requested booking or service;
• Meet airline, hotel, immigration, insurance, or supplier requirements;
• Protect the health or safety of a traveller;
• Comply with legal or regulatory requirements;
• Prevent fraud or misuse;
• Establish, exercise, or defend legal claims;
• Fulfil another purpose authorised by law or consent.

6. How We Collect Personal Data

We may collect personal data:

6.1 Directly from you

For example, when you:

• Create an account;
• Make a booking;
• Submit an enquiry;
• Upload a document;
• Contact customer support;
• Request a refund or change;
• Register as an agent;
• Visit our office;
• Participate in a survey or promotion.

6.2 From a person acting for you

Information may be provided by:

• A family member;
• A group leader;
• An employer;
• A corporate travel coordinator;
• A travel agent;
• An authorised representative;
• A sponsor or host.

6.3 From travel and service suppliers

We may receive information from:

• Airlines;
• Hotels;
• Global distribution systems;
• Flight consolidators;
• Tour operators;
• Transport providers;
• Insurers;
• Visa service partners;
• Payment providers;
• Technology-platform providers.

6.4 From public or authorised sources

Where legally permitted, we may obtain information from:

• Government or regulatory databases;
• Company-registration records;
• Sanctions or compliance lists;
• Fraud-prevention services;
• Public business profiles;
• Social-media pages through which you contact us.

6.5 Automatically through technology

Information may be collected using:

• Cookies;
• Pixels;
• Analytics tools;
• Server logs;
• Device identifiers;
• Session-storage technologies;
• Fraud and security monitoring tools.

7. Why We Process Personal Data

We may process personal data for the following purposes.

7.1 To provide requested services

This includes:

• Searching flight and hotel availability;
• Creating and managing bookings;
• Issuing tickets and vouchers;
• Processing payments;
• Arranging hotels, holidays, transfers, insurance, tours, or Umrah services;
• Providing visa application assistance;
• Sending confirmations and travel documents;
• Managing cancellations, changes, refunds, and reissues.

7.2 To communicate with you

We may use your information to:

• Respond to enquiries;
• Send booking and payment updates;
• Notify you about schedule changes or cancellations;
• Request missing documentation;
• Provide customer support;
• Communicate refund or complaint outcomes;
• Send important service notices.

7.3 To manage customer and agent accounts

We may process information to:

• Create and authenticate accounts;
• Manage access permissions;
• Maintain booking histories;
• Process deposits and balances;
• Generate invoices and statements;
• Prevent account misuse;
• Maintain audit logs.

7.4 To meet supplier requirements

Airlines, hotels, payment providers, insurers, tour operators, government authorities, and other suppliers may require personal data to confirm or deliver services.

7.5 To protect security and prevent fraud

We may use information to:

• Verify identity;
• Detect suspicious bookings or transactions;
• Protect accounts;
• Prevent fraudulent payments;
• Investigate misuse;
• Manage chargebacks;
• Protect our customers, staff, partners, and systems.

7.6 To comply with legal obligations

We may process information to comply with:

• Data-protection requirements;
• Cybersecurity requirements;
• Tax, accounting, and audit obligations;
• Consumer-protection requirements;
• Court orders or lawful government requests;
• Aviation, immigration, and travel regulations;
• Anti-fraud, anti-money-laundering, sanctions, or financial requirements where applicable.

Bangladesh currently lists the Personal Data Protection Act, 2026 and Cyber Security Act, 2026 among the applicable ICT laws.

7.7 To improve our services

We may use appropriate data to:

• Analyse website performance;
• Improve booking processes;
• Resolve technical errors;
• Develop new services;
• Measure customer satisfaction;
• Train authorised support personnel;
• Conduct internal reporting and service-quality reviews.

Where practical, we use aggregated or de-identified information for analysis.

7.8 For marketing and promotions

With consent where required, we may send:

• Promotional fares;
• Holiday or Umrah offers;
• Travel-service updates;
• Discount campaigns;
• Newsletter content;
• Relevant service recommendations.

You may withdraw marketing consent at any time without affecting essential booking and operational communications.

8. Legal Grounds for Processing

Depending on applicable law and the circumstances, we may process personal data based on:

• Your consent;
• The need to perform a contract or provide a requested service;
• Steps taken at your request before entering into a contract;
• Compliance with a legal obligation;
• Protection of vital interests;
• Prevention and detection of fraud;
• Legitimate business interests that do not improperly override your rights;
• Establishment, exercise, or defence of legal claims;
• Another ground permitted under applicable law.

Consent is not necessarily the only legal basis for every processing activity. For example, we may need to retain transaction information to meet legal, tax, dispute, fraud-prevention, or accounting requirements even after marketing consent is withdrawn.

9. When We Share Personal Data

We may share personal data only to the extent reasonably necessary for the relevant service, legal requirement, security purpose, or authorised business activity.

9.1 Airlines and aviation providers

Information may be shared with:

• Airlines;
• Global distribution systems;
• Ticketing consolidators;
• Airport service providers;
• Ground-handling companies;
• Airline reservation systems.

9.2 Hotels and accommodation providers

We may share booking and guest information with:

• Hotels;
• Resorts;
• Apartments;
• Accommodation wholesalers;
• Bed banks;
• Local accommodation partners.

9.3 Tour and transport providers

Information may be shared with:

• Tour operators;
• Destination-management companies;
• Airport-transfer companies;
• Vehicle providers;
• Guides;
• Cruise, train, bus, or activity operators.

9.4 Visa and immigration service parties

Where you request visa assistance, information may be shared with:

• Embassies;
• Consulates;
• Visa application centres;
• Immigration authorities;
• Authorised document or translation providers;
• Insurance providers;
• Appointment or biometric-service providers;
• Other parties required for the application.

FastGo Travel does not control visa decisions. Visa approval, refusal, processing time, or additional-document requests are determined by the relevant authority.

9.5 Payment and financial-service providers

We may share transaction information with:

• Banks;
• Card processors;
• Mobile financial-service providers;
• Payment gateways;
• Refund processors;
• Fraud-prevention and verification services;
• Auditors and accountants.

9.6 Technology and operational providers

We may use third parties that provide:

• T360 white-label booking technology;
• Website hosting;
• Cloud infrastructure;
• Email delivery;
• SMS or WhatsApp communication;
• Customer-relationship management;
• Analytics;
• Cybersecurity;
• Document storage;
• Backup and disaster recovery;
• Customer-support systems.

These providers may process information only according to applicable agreements, instructions, security obligations, and legal requirements.

9.7 Professional advisers

Information may be disclosed where appropriate to:

• Lawyers;
• Accountants;
• Auditors;
• Insurers;
• Compliance consultants;
• Investigators;
• Debt-recovery or dispute-resolution professionals.

9.8 Government and legal authorities

We may disclose information where required or permitted by law to:

• Courts;
• Law-enforcement agencies;
• Tax authorities;
• Aviation regulators;
• Immigration authorities;
• Cybersecurity authorities;
• Consumer-protection bodies;
• Other competent authorities.

9.9 Business transfers

If FastGo Travel undergoes a merger, acquisition, restructuring, investment, financing, sale of assets, or transfer of business operations, relevant personal data may be reviewed or transferred under appropriate confidentiality and legal safeguards.

10. International Data Transfers

Travel services are international by nature. To arrange a booking, personal data may need to be transferred to or accessed from countries outside Bangladesh.

For example, information may be processed in the country where:

• An airline is based;
• A hotel or tour is located;
• A visa application is submitted;
• A booking-system provider operates;
• A payment or cloud provider maintains authorised infrastructure.

Data-protection standards may vary between countries.

Where required, we seek to use reasonable safeguards such as:

• Contractual data-protection obligations;
• Supplier due diligence;
• Access restrictions;
• Encryption;
• Consent or another lawful transfer basis;
• Transfer records;
• Compliance with applicable government or regulatory requirements.

International transfers may also be necessary to perform the travel contract requested by the customer. The 2026 Bangladesh data-protection legislation contains provisions concerning international or cross-border data arrangements, so FastGo Travel’s final transfer procedures should be confirmed through legal and technical review.

11. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to:

• Keep the website functioning;
• Maintain secure user sessions;
• Remember preferences;
• Support login and booking activity;
• Measure website performance;
• Detect errors;
• Prevent fraud;
• Understand how visitors use the website;
• Measure advertising results;
• Provide relevant marketing where consent has been given.

11.1 Types of cookies

We may use:

Essential cookies
Required for security, navigation, login, booking, payment, and core website functionality.

Preference cookies
Used to remember language, currency, location, and user choices.

Analytics cookies
Used to measure traffic and understand website performance.

Marketing cookies
Used to measure advertising campaigns and provide relevant promotions, subject to consent requirements.

11.2 Managing cookies

You may manage cookies through:

• Our cookie-consent tool, where available;
• Browser settings;
• Device settings;
• Advertising-platform controls.

Disabling essential cookies may prevent some booking, login, or payment functions from working correctly.

12. Analytics and Advertising

We may use authorised analytics and advertising technologies, such as Google Analytics, Google Tag Manager, Meta Pixel, or equivalent tools.

Where implemented, these services may receive technical and behavioural information, such as:

• Browser and device information;
• Approximate location;
• Pages visited;
• Search or conversion events;
• Cookie or advertising identifiers.

We do not intend to send passport details, complete payment-card data, visa documents, or directly identifying passenger records to advertising or general analytics platforms.

Marketing tags should be activated only in accordance with applicable consent and configuration requirements.

13. Data Security

We use reasonable administrative, technical, contractual, and physical measures designed to protect personal data against:

• Unauthorised access;
• Loss;
• Misuse;
• Alteration;
• Disclosure;
• Destruction;
• Fraud;
• Cybersecurity incidents.

Security measures may include:

• Secure HTTPS connections;
• Encryption where appropriate;
• Restricted staff access;
• Role-based permissions;
• Strong authentication;
• Two-factor authentication for authorised accounts;
• Activity logging;
• Secure backups;
• Staff confidentiality obligations;
• Vendor-security requirements;
• System monitoring;
• Incident-response procedures;
• Secure deletion or disposal methods.

The Bangladesh government has also enacted the Cyber Security Act, 2026, replacing the preceding 2025 ordinance.

No online system, email service, cloud platform, messaging service, or transmission method can be guaranteed to be completely secure. Customers should protect their login credentials and immediately report suspected account misuse.

14. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, contractual, accounting, operational, security, dispute, and regulatory requirements.

Retention periods may vary according to:

• The type of service;
• Supplier requirements;
• Tax and accounting obligations;
• The existence of a dispute or refund;
• Fraud and security risks;
• Immigration or visa-processing requirements;
• Legal limitation periods;
• Regulatory instructions;
• Customer consent.

General retention approach

Subject to applicable requirements:

• Uncompleted general enquiries may be deleted or anonymised after a reasonable operational period;
• Booking and payment records may be retained for the legally required accounting and dispute period;
• Visa documents should be deleted or securely archived once no longer required for the service or a lawful retention purpose;
• Marketing information may be retained until consent is withdrawn or the data is no longer useful;
• Security and access logs may be retained for an appropriate cybersecurity and investigation period;
• Data relating to an active dispute, complaint, refund, fraud inquiry, or legal claim may be retained until the matter is resolved.

When information is no longer required, we may securely delete, destroy, anonymise, or de-identify it.

15. Your Rights and Choices

Subject to applicable law, identity verification, and lawful exceptions, you may have the right to:

• Ask whether we process your personal data;
• Request access to personal data;
• Request correction of inaccurate or incomplete information;
• Request deletion where there is no lawful reason to retain the information;
• Withdraw consent for consent-based processing;
• Object to certain marketing activities;
• Request restriction of certain processing;
• Request information about data-sharing categories;
• Request a copy of certain information in an appropriate format;
• Make a complaint about our use of personal data;
• Nominate or use an authorised representative where legally permitted.

Certain requests may be limited where processing is necessary to:

• Complete an active booking;
• Comply with legal obligations;
• Maintain financial or tax records;
• Prevent fraud;
• Protect legal rights;
• Resolve disputes;
• Meet airline, hotel, immigration, or supplier requirements;
• Protect another person’s rights.

The Personal Data Protection Act, 2026 establishes Bangladesh’s current statutory framework for personal-data protection and applies to relevant custodians, processors, and processing activities.

16. How to Exercise Your Rights

To submit a privacy request, contact:

Privacy email: privacy@fastgo.com.bd
Support email: support@fastgo.com.bd
Subject line: Privacy Request
Address: Suite 1103, Level 11, HM Siddique Mansion, 55/A Purana Paltan, Dhaka 1000, Bangladesh

Please include:

• Your full name;
• Contact details;
• Booking reference, where relevant;
• A clear description of the request;
• Proof of identity where reasonably necessary;
• Evidence of authority when acting for another person.

We may request additional information to confirm identity, prevent fraudulent requests, and locate relevant records.

We will respond within the period required by applicable law or, where no specific period applies, within a reasonable time.

We will not normally charge a fee for a legitimate privacy request. However, a lawful and reasonable fee may apply where a request is manifestly repetitive, excessive, unfounded, or requires disproportionate administrative work, if permitted by law.

17. Marketing Communications

We may send promotional communications where:

• You have provided consent;
• You requested an offer or subscription;
• The communication is otherwise legally permitted.

You may unsubscribe by:

• Using an unsubscribe link;
• Replying with an opt-out request;
• Contacting privacy@fastgo.com.bd;
• Adjusting account or communication preferences where available.

Opting out of marketing will not stop essential communications concerning:

• Active bookings;
• Payment status;
• Flight or schedule changes;
• Ticket issuance;
• Refunds;
• Security;
• Customer-support matters;
• Legal or policy notices.

18. Children’s Personal Data

Travel bookings frequently include children and infants.

We may process a child’s information when it is provided by and under the responsibility of:

• A parent;
• A legal guardian;
• An authorised adult;
• A school, employer, or group organiser with appropriate authority.

We collect only the information reasonably necessary to provide the requested travel or visa service.

Our services are not intended for children to create accounts, make independent payments, or submit sensitive documents without appropriate adult supervision or authority.

A parent or legal guardian may contact us to request access, correction, or deletion of a child’s information, subject to lawful retention obligations.

19. Passport and Document Upload Safety

Customers should submit passports, bank statements, identification documents, visa files, and financial evidence only through approved FastGo Travel channels.

Customers should not:

• Post documents in public social-media comments;
• Share one-time passwords or account passwords;
• Send complete card information through WhatsApp;
• Upload unnecessary personal records;
• Send documents to an unverified employee or third party;
• Allow unauthorised persons to access their account.

FastGo Travel may request identity verification before releasing documents or booking information.

20. Automated Processing and Fraud Screening

We may use automated tools to:

• Detect unusual login activity;
• Identify potentially fraudulent transactions;
• Prevent duplicate bookings;
• assess payment or booking risk;
• Route enquiries;
• identify technical errors;
• recommend relevant services.

Where a significant decision is made solely through automated processing and applicable law grants additional rights, you may contact us to request information or appropriate human review.

We do not use automated systems to decide whether an embassy or immigration authority should approve a visa.

21. Third-Party Websites and Services

Our platform may contain links to:

• Airlines;
• Hotels;
• Embassies;
• Visa centres;
• Payment gateways;
• Insurers;
• Social-media platforms;
• Maps;
• External service providers.

Once you leave our platform or directly use a third-party service, that party’s privacy policy and terms may apply.

FastGo Travel is not responsible for the independent privacy practices, security, accuracy, or availability of third-party websites and services.

Customers should review the relevant third-party privacy information before submitting personal data.

22. Social Media and Messaging Services

When you contact us through Facebook, Messenger, WhatsApp, Instagram, LinkedIn, or another platform:

• The platform provider may independently collect and process information;
• The provider’s privacy policy also applies;
• Messages may be retained for customer-service, security, and dispute purposes;
• Public comments may be visible to other users.

Do not publish passport details, booking references, ticket copies, payment receipts, phone numbers, or other sensitive information in public comments.

We may ask you to move the conversation to a private and verified support channel.

23. Data Breach and Security Incidents

If a security incident affects personal data, we may:

• Investigate and contain the incident;
• Secure affected systems;
• Preserve relevant evidence;
• Notify affected service providers;
• Notify competent authorities where required;
• Notify affected individuals where required or appropriate;
• Take corrective and preventive action.

The nature, timing, and content of notifications will depend on the incident and applicable legal obligations.

24. Complaints

For concerns about our privacy practices, contact:

privacy@fastgo.com.bd

Please include sufficient information for us to investigate the issue.

We will review the complaint and seek to provide an appropriate response. You may also have the right to contact the competent data-protection, cybersecurity, consumer, judicial, or regulatory authority under applicable law.

25. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• Changes in law;
• Regulatory guidance;
• New products or services;
• Changes to suppliers or technology;
• Security improvements;
• Business restructuring;
• Changes in data-processing practices.

The updated policy will be published on our website with a revised “Last Updated” date.

Where a change materially affects how we use personal data, we may provide additional notice through the website, account dashboard, email, or another suitable channel.

Continued use of the services after an update does not replace consent where fresh consent is legally required.

26. Contact Information

For privacy questions, requests, complaints, or concerns:

FastGo Travel
Operated by: FastGo Travel
Suite 1103, Level 11
HM Siddique Mansion
55/A Purana Paltan
Dhaka 1000, Bangladesh

Privacy email: privacy@fastgo.com.bd
Customer support: support@fastgo.com.bd
Telephone/WhatsApp: +880 1805-465050
Website: https://fastgo.com.bd

© 2026 FastGo Travel. All rights reserved.
Your Dream, Our Destination.