Privacy & Cookie Policy

How we collect, use, and protect your personal information

Last Updated: January 27, 2026

UnlockYourTravel.com ("we," "our," or "us") is committed to protecting your privacy. This Privacy & Cookie Policy explains how BillStreet LLC collects, uses, discloses, and safeguards your personal information when you use our website, mobile applications, and related services (collectively, the "Platform") to book travel experiences.

By accessing or using our Platform, you agree to the terms of this Policy. If you do not agree with our policies and practices, please do not use our services.

Important: In the event of any discrepancy between translated versions and the English version of this policy, the English version shall prevail.

1 Who We Are

BillStreet LLC, a company registered in Mongolia, is the data controller responsible for your personal data under this policy.

Our Contact Information:

BillStreet LLC

Ulaanbaatar, Mongolia

Email for Privacy Inquiries: privacy@unlockyourtravel.com

2 Information We Collect

We collect information that identifies, relates to, or could reasonably be linked with you. The categories are:

A. Information You Provide to Us

Account & Profile Information

Name, email address, password, phone number, date of birth, nationality, and travel preferences when you create an account or use social login (e.g., Google, Facebook).

Booking Details

Information required to complete a booking, including full name, age, passport/national ID number (if required for travel), stay dates, number of guests/rooms, flight details, and special requests (e.g., dietary, accessibility needs).

Payment Information

Payment method type, billing address, and transaction history. For your security, all sensitive payment card details are processed directly by our PCI-DSS compliant third-party payment processors; we do not store your full credit card information on our servers.

Communications

Records of your correspondence with us, including customer support messages, call recordings for quality assurance, and user-generated content like reviews, ratings, and photos.

B. Information Collected Automatically

Device & Technical Information

IP address, browser type and version, time zone setting, browser plug-in types, operating system, platform, and device identifiers.

Usage Data

Information about your interaction with our Platform, including the full URL clickstream to, through, and from our site (including date and time), products you viewed or searched for, page response times, download errors, and page interaction information (such as scrolling, clicks, and mouse-overs).

Location Data

We derive your approximate geographic location (country and city) from your IP address to provide you with relevant search results and currency options.

C. Information From Third Parties

Travel Service Providers

We receive updated information about your booking (e.g., changes in itinerary, confirmation details) from our partners (hotels, airlines, tour operators).

Business Partners

Affiliate networks or business partners who refer you to our Platform.

Social Media Platforms

If you interact with our social media accounts or link your social media profile to your UnlockYourTravel account, we may receive certain information as governed by the platform's privacy policy.

3 How We Use Your Information

We use your personal information for the following business and commercial purposes:

Purpose of ProcessingCategories of Information Used
To Fulfill Your Booking & Contract: To process and manage your bookings, send confirmations, modifications, and vouchers, and facilitate your travel experience.Account, Booking, Payment, Communications
To Process Payments: To complete financial transactions and prevent fraudulent activity.Booking, Payment, Device & Technical
To Provide Customer Support: To respond to your inquiries, complaints, and requests.All categories as necessary
To Personalize Your Experience: To tailor content, offers, and recommendations based on your searches, preferences, and past bookings.Account, Booking, Usage, Location
For Marketing & Advertising: To send you promotional messages, newsletters, and offers (with your consent where required by law). To manage our advertising on other websites and platforms.Account, Usage, Location
To Improve Our Platform: To analyze trends, administer the site, troubleshoot, and conduct data analytics to improve our services and user experience.Usage, Device & Technical
For Security & Fraud Prevention: To protect our Platform, users, and business from security threats, fraud, and other malicious activity.All categories as necessary
To Comply with Legal Obligations: To meet tax, accounting, and other regulatory requirements under Mongolian law.Booking, Payment, Account

4 Legal Basis for Processing

We process your personal data under one of the following legal bases:

Performance of a Contract

To fulfill our obligations to you when you make a booking.

Legitimate Interests

For our operational purposes, marketing, and security, where our interests are not overridden by your rights.

Consent

For sending direct marketing communications and using non-essential cookies. You may withdraw consent at any time.

Legal Obligation

To comply with applicable laws and regulations.

5 How We Share Your Information

We may share your information with the following categories of third parties:

Travel Service Providers

Essential to fulfill your booking (hotels, hostels, tour guides, activity providers, transport service providers, resorts).

Payment Processors

Trusted entities like Stripe and PayPal to securely handle payments.

IT & Service Providers

Cloud storage (AWS), analytics providers (e.g., Google Analytics), customer support platforms, and marketing agencies. These "processors" act on our instructions.

Legal & Authorities

To comply with legal obligations, protect our rights, or respond to lawful requests from public authorities.

Business Transfers

In connection with a merger, acquisition, or sale of all or a portion of our assets.

✓ We do not sell your personal information to third parties for their own marketing purposes.

6 International Data Transfers

Your information may be transferred to and processed in countries outside of Mongolia, including the United States and other countries where our service providers operate. These countries may have different data protection laws.

When we transfer your data, we implement safeguards to ensure its protection, including contractual clauses with our service providers to provide a comparable level of data protection.

By using our services, you understand and consent to these transfers.

7 Your Rights & Choices

You have control over your personal data. Depending on your location, you may have the right to:

Access and receive a copy of your data
Rectify (correct) inaccurate data
Request Erasure (deletion) of your data
Restrict or Object to processing
Data Portability for your data
Withdraw Consent at any time
Opt-out of Marketing: Click the "unsubscribe" link in any email

To exercise any of these rights, please contact us at support@unlockyourtravel.com. We will respond to all legitimate requests within 7 business days.

8 Cookies & Tracking Technologies

Our Platform uses cookies and similar technologies to distinguish you from other users, provide essential functionality, analyze trends, and deliver personalized advertising.

What Are Cookies?

Cookies are small text files that are stored on your computer, smartphone, or other device when you visit a website. They allow websites to function properly, remember your preferences, collect usage data, and improve your browsing experience.

Types of Cookies We Use

Required

A. Essential Cookies

  • • Required for the basic operation of the website (e.g., login, payment processing).
  • • These cannot be disabled as they are necessary for core functionality.
Optional

B. Functional Cookies

  • • Remember your preferences such as language, currency, or login details.
  • • Can be disabled through your browser settings or our cookie banner.
Analytics

C. Analytical & Performance Cookies

  • • Help us understand how visitors use our site and improve performance.
  • • For example: using Google Analytics to measure traffic and page popularity.
  • • Data collected is aggregated and anonymized.
Marketing

D. Advertising & Targeting Cookies

  • • Used by us and third-party partners to deliver ads and offers tailored to your interests.
  • • Show you content based on your previous searches, bookings, or interactions on our Platform.

Third-Party Cookies

Our website may use cookies from trusted partners such as Google, Facebook, and other analytics or advertising providers. These cookies help us understand user behavior and deliver relevant marketing.

How You Can Manage Cookies

You have control over your cookie preferences:

  • Manage your choices via our cookie banner or Cookie Settings tool.
  • Adjust your browser settings to allow, block, or delete cookies.
  • Opt-out of targeted advertising cookies through our banner or partner opt-out tools.

Note: Disabling essential cookies may impact your ability to use certain features of our website.

Retention Periods

Session cookies:Stored temporarily and deleted once you close your browser.
Persistent cookies:Remain on your device for a defined period or until you delete them.

Retention periods vary depending on the type and purpose of the cookie (details available in our Cookie Settings tool).

9 Data Security & Retention

We implement industry-standard technical and organizational measures (including encryption, access controls, and secure servers) to protect your data from unauthorized access, loss, or alteration.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, including to meet legal, tax, accounting, or reporting requirements. Our retention periods are:

Active Accounts:For the duration your account is active.
Booking Records:5-7 years from the date of transaction to comply with Mongolian financial and tax regulations.
Marketing Data:Until you withdraw your consent or unsubscribe.
Cookies:As indicated in our Cookie Settings tool.

10 International Users

Our Platform is operated from Mongolia and is intended for users outside of the European Economic Area (EEA) and the United Kingdom (UK). If you are accessing our Platform from within the EEA or UK, please be aware that:

  • We do not actively target or market our services to you.
  • Your data will be processed in Mongolia and other jurisdictions outside the EEA/UK.
  • As we do not envisage offering goods or services to data subjects in the EEA or UK, we have not appointed an EU or UK representative under Article 27 of the GDPR.

11 Other Important Information

Children's Privacy

Our services are not intended for anyone under 18. We do not knowingly collect data from children.

Data Breach Notification

We have procedures in place to deal with data breaches and will notify you and any applicable regulator where we are legally required to do so.

Changes to This Policy

We may update this policy periodically. The "Last Updated" date at the top will indicate changes. We will notify you of material changes via email or a notice on our Platform.

12 Contact Us

For questions, concerns, or to exercise your rights regarding this Privacy Policy, please contact our Data Protection Officer at:

Post:BillStreet LLC, Attn: Data Protection Officer, Ulaanbaatar, Mongolia