+65 6226 3611 scenic-sales@globaltravel.com.sg

Privacy Policy

  1. Scenic Travel Pte Ltd Privacy Policy

Scenic Travel Pte Ltd (“Scenic Travel”, “we”, “our” or “us”) is committed to protecting the privacy, confidentiality and security of personal data entrusted to us by our clients, travellers, business partners and website users.

As a leading travel management company, we recognize the importance of responsible data stewardship and are committed to processing personal data in accordance with applicable data protection laws, including Singapore’s Personal Data Protection Act 2012 (“PDPA”) and, where applicable, the European Union General Data Protection Regulation (“GDPR”).

This Privacy Policy explains how we collect, use, disclose, transfer, retain and protect personal data in connection with our business operations, travel management services and website.

 

  1. About Scenic Travel

Scenic Travel Pte Ltd is a Singapore company with its principal place of business at:

Scenic Travel Pte Ltd
51 Lorong 21 Geylang
#05-01 to #05-03 Space 21
Singapore 388466

For enquiries relating to this Privacy Policy or our data protection practices, please contact:
Data Protection Officer (DPO)
Stella Edward
Email: dataprivacy@globaltravel.com.sg
Contact: 6226 2345

 

  1. Our Commitment to Data Protection

Scenic Travel is committed to protecting personal data throughout its lifecycle and maintaining high standards of privacy and information security.

We have implemented policies, procedures and safeguards designed to ensure that personal data is:

  • Collected lawfully and fairly;
  • Used only for legitimate business purposes
  • Kept accurate and up to date where reasonably practicable;
  • Protected against unauthorized access, disclosure, alteration, misuse or loss;
  • Retained only for as long as necessary; and
  • Processed in accordance with applicable legal and regulatory requirements.

 

  1. Personal Data We Collect

Depending on the nature of our relationship with you and the services we provide, we may collect and process the following categories of personal data:

Identity Information

  • Full name
  • Title and position
  • Nationality
  • Date of birth
  • Passport information and other travel document details where required

Contact Information

  • Email address
  • Telephone number
  • Business address
  • Company information

Travel Information

  • Travel itineraries
  • Flight, hotel and transportation bookings
  • Frequent traveller programme information
  • Visa and immigration-related information
  • Travel preferences and service requirements

Business and Financial Information

  • Corporate account information
  • Billing and invoicing information
  • Transaction and payment-related information

Website and Technical Information

  • IP address
  • Browser and device information
  • Website usage information
  • Cookie and analytics data

Information You Voluntarily Provide

  • Enquiries and correspondence
  • Feedback and survey responses
  • Information submitted through our website or other communication channels

 

  1. How We Collect Personal Data

We may collect personal data through a variety of channels, including:

  • Directly from you;
  • Through your employer or organization where travel services are arranged on your behalf;
  • Through our website and online platforms;
  • Through travel suppliers and service providers;
  • Through business partners and authorized representatives;
  • Through communications with our customer service, operations and account management teams.

 

  1. Purposes for Processing Personal Data

We collect, use and process personal data for purposes including:

Travel Management Services

  • Arranging and managing travel bookings and reservations;
  • Coordinating transportation, accommodation and related travel services;
  • Managing traveller profiles and preferences;
  • Providing travel support and assistance before, during and after travel;
  • Facilitating visa, immigration and travel documentation requirements.

Customer Service and Relationship Management

  • Responding to enquiries and requests;
  • Providing customer support;
  • Managing client relationships;
  • Delivering contracted services.

Business Operations

  • Internal administration and record management;
  • Billing, payment processing and financial administration;
  • Service quality monitoring and improvement;
  • Business continuity and operational management.

Compliance and Risk Management

  • Compliance with legal and regulatory obligations;
  • Fraud prevention and detection;
  • Information security monitoring;
  • Responding to lawful requests from regulatory authorities, courts and government agencies.

Marketing and Communications
Subject to applicable laws and consent requirements, we may provide information relating to:

  • Travel services;
  • Industry updates and insights;
  • Events, promotions and special offers;
  • Products and services that may be relevant to your business needs.

You may opt out of marketing communications at any time.

 

  1. Legal Basis for Processing Personal Data

Where required by applicable law, Scenic Travel processes personal data based on one or more of the following grounds:

  • Your consent;
  • The performance of a contract or provision of requested services;
  • Compliance with legal and regulatory obligations;
  • Legitimate business interests, provided such interests do not override your rights and freedoms.

Where consent is relied upon, you may withdraw your consent at any time by contacting us using the details provided in this Privacy Policy.

 

  1. Marketing Communications

Where required by law, we will obtain your consent before sending marketing communications.
You may withdraw your consent or unsubscribe from marketing communications at any time by:

  • Following the unsubscribe instructions included in our communications; or

The withdrawal of consent shall not affect the lawfulness of processing conducted prior to such withdrawal.

 

  1. Disclosure of Personal Data

To provide our services and support our business operations, we may disclose personal data to:

  • Airlines, hotels, transportation providers and other travel suppliers;
  • Global distribution systems (GDS) and reservation platforms;
  • Travel technology providers and service partners;
  • Payment processing providers;
  • Professional advisers, auditors and insurers;
  • Government authorities, immigration authorities and regulators where required;
  • Service providers supporting our business operations.

All disclosures are made on a need-to-know basis and subject to appropriate confidentiality, contractual and security requirements.

 

  1. International Transfers of Personal Data

As an international travel management company, Scenic Travel may transfer personal data across jurisdictions where necessary to facilitate travel arrangements, reservations and related services.

Where personal data is transferred outside Singapore, we take reasonable steps to ensure that such information is protected by safeguards that provide a standard of protection comparable to that required under applicable data protection laws.

 

  1. Data Retention

Scenic Travel retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

  • Providing travel management services;
  • Meeting contractual obligations;
  • Complying with legal, regulatory, accounting and reporting requirements;
  • Managing audits, claims and disputes;
  • Protecting our legitimate business interests.

When personal data is no longer required, it will be securely deleted, anonymized or otherwise disposed of in accordance with our records retention and disposal procedures.

 

  1. Your Rights

Subject to applicable laws, individuals may have the right to:

  • Request access to personal data held by us;
  • Request correction of inaccurate or incomplete personal data;
  • Withdraw consent to processing where consent is the legal basis;
  • Request deletion of personal data where legally permissible;
  • Object to certain processing activities;
  • Request information regarding how personal data has been used or disclosed.

Requests may be submitted to:
dataprivacy@globaltravel.com.sg

We may require reasonable verification of identity before responding to a request.

We will respond as soon as reasonably practicable and in accordance with applicable legal requirements.

 

  1. Data Security

Protecting personal data is fundamental to our business.

Scenic Travel maintains administrative, physical and technical safeguards designed to protect personal data against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use.

These measures include:

  • Role-based access controls;
  • Strong authentication and password management;
  • Encryption of data in transit and, where appropriate, at rest;
  • Firewalls and endpoint security solutions;
  • Security monitoring and vulnerability management;
  • Employee confidentiality obligations and training;
  • Secure storage and disposal procedures.

Our security framework is regularly reviewed and enhanced to address evolving regulatory requirements, industry best practices and cybersecurity threats.

 

  1. PCI DSS Compliance

Scenic Travel recognizes the importance of protecting payment card information.

Where payment card data is processed, transmitted or stored as part of our travel management services, we maintain security controls, processes and procedures aligned with the requirements of the Payment Card Industry Data Security Standard (PCI DSS).

 

  1. GDPR Compliance

Where the GDPR applies, Scenic Travel processes personal data in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality.

Individuals located within the European Economic Area may be entitled to additional rights under applicable GDPR provisions.

 

  1. Data Breach Management

Scenic Travel has implemented a comprehensive incident management framework to support the timely detection, assessment, escalation, containment and remediation of information security and personal data incidents.

Our incident response procedures are designed to ensure that potential breaches are investigated promptly by appropriately authorized personnel and, where necessary, with the assistance of external cybersecurity, legal or regulatory specialists.

In the event of a confirmed or suspected personal data breach, Scenic Travel will:

  • Assess the scope, nature and potential impact of the incident;
  • Take immediate steps to contain and remediate the breach;
  • Conduct an investigation to determine the root cause and affected data;
  • Evaluate legal, regulatory and contractual notification obligations;
  • Notify regulators, clients, affected individuals and relevant stakeholders where required;
  • Document response actions and lessons learned; and
  • Implement measures to reduce the risk of similar incidents occurring in the future.

Where a personal data breach is assessed to be notifiable under applicable data protection laws, Scenic Travel will notify the relevant regulatory authorities and affected individuals in accordance with applicable legal requirements and prescribed timelines.

Scenic Travel periodically reviews its security controls, incident response plans and breach notification procedures to ensure alignment with applicable legal requirements, industry best practices and evolving cybersecurity risks. We are committed to maintaining the confidentiality, integrity and availability of the personal data entrusted to us by our clients, travellers, business partners and employees.

 

  1. Cookies and Website Analytics

Our website uses cookies and similar technologies to improve functionality, enhance user experience and analyze website performance. Cookies help us understand how visitors interact with our website and enable us to improve our services and website functionality.

We may use analytics tools, including Google Analytics, to collect aggregated information regarding website traffic and visitor behaviour. The information collected is used solely for website administration, performance analysis and service improvement and does not generally identify individual visitors.

Users may control cookie preferences through their browser settings. Disabling cookies may affect certain website functionality and user experience.

 

  1. Third-Party Websites

Our website may contain links to third-party websites for your convenience and information.

Scenic Travel does not control and is not responsible for the privacy practices, content or security of external websites. Users are encouraged to review the privacy policies of any third-party websites they visit.

 

  1. Complaints and Concerns

Scenic Travel takes privacy concerns seriously and is committed to addressing complaints fairly, transparently and promptly.

If you have any questions, concerns or complaints regarding our handling of personal data, please contact our Data Protection Officer at:
dataprivacy@globaltravel.com.sg

We will investigate and respond to privacy-related enquiries as soon as reasonably practicable.

 

  1. Changes to This Privacy Policy

Scenic Travel may update this Privacy Policy from time to time to reflect changes in applicable laws, regulations, business operations, technology or industry practices.
Any updates will be published on this page and will take effect from the date of publication.

Effective Date: 1 May 2018
Last Updated: 27 July 2026