Privacy Policy
Last Updated: November 2025
concoralit is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, and safeguard your information when you use our website and services.
Data Collection
We collect the following types of personal data:
- Contact Information: name, email address, phone number, business address
- Usage Data: IP address, browser type, pages visited, time spent on pages
- Communication Data: messages sent through contact forms, email correspondence
- Travel Information: travel preferences, passport details, loyalty program numbers
- Cookie Data: preferences and session information
How We Use Your Data
We process your personal data for the following purposes:
- Providing travel management services
- Communicating with you about bookings and inquiries
- Processing payments and managing accounts
- Improving our services and website functionality
- Complying with legal and regulatory requirements
- Sending marketing communications (with your consent)
Legal Basis for Processing
We process your data based on:
- Consent: for marketing communications and cookies
- Contract: to provide requested services
- Legitimate Interest: for business operations and improvements
- Legal Obligation: for tax and regulatory compliance
Data Retention
We retain your data for the following periods:
- Contact form submissions: 3 years
- Service records: 5 years
- Financial records: 7 years (legal requirement)
- Marketing data: until consent withdrawn
Data Security
We implement appropriate security measures including:
- Encryption of data in transit and at rest
- Secure servers with restricted access
- Regular security audits and updates
- Staff training on data protection
- Breach notification procedures (within 72 hours)
Third-Party Services
We may share your data with:
- Airlines, hotels, and travel service providers
- Payment processors for secure transactions
- Email service providers for communications
- Analytics services (Google Analytics)
- Cloud hosting services
Your Rights
Under data protection law, you have the right to:
- Request access to your personal data
- Correct inaccurate data
- Request deletion of your data
- Object to data processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with supervisory authorities
International Data Transfers
Your data may be transferred to and processed in countries outside of Singapore. We ensure appropriate safeguards are in place through:
- Standard contractual clauses
- Adequacy decisions
- Privacy Shield certification (where applicable)
Cookie Usage
We use cookies to enhance your experience. For detailed information, please visit our Cookie Policy.
Contact Information
For questions about our privacy practices or to exercise your rights, contact us at:
Email: [email protected]
Phone: +65 6827 3194
Address: 250 North Bridge Road, #24-00, Raffles City Tower, Singapore 179101