Privacy Policy
How MAKSSA collects, uses, stores and protects the information you entrust to us — across our website, mobile applications, and day-to-day travel services.
Last updated: 18 May 2026
1. About This Policy
This Privacy Policy describes the practices of MAKSSA ("MAKSSA", "we", "us", or "our"), a Pakistan-based IATA-accredited travel and aviation services provider with offices at House No. 313, Multan, 60000, Pakistan. It applies to information we collect when you visit our website, contact us by phone or messaging, use any MAKSSA mobile application made available through the Google Play Store or other distribution channels, or engage our travel services.
By using our website, mobile applications, or services, you agree to the practices described below. If you do not agree, please do not use our services.
2. Information We Collect
We collect only the information needed to operate, secure and improve our travel services. The categories of personal information we may collect include:
- Identity & contact information — your full name, date of birth, gender, nationality, passport / CNIC number, photograph, phone number, email address and home or business address.
- Travel details — destinations, travel dates, traveller preferences (seat, meal, accessibility), companion details, frequent flyer numbers and visa history.
- Payment information — limited billing details required to process bookings. Full card numbers are processed by our payment partners and are not stored on MAKSSA systems.
- Communications — the content of your messages, calls and WhatsApp exchanges with our travel desks.
- Device & usage data — for our website and mobile applications: device model, operating system, app version, language, IP address, crash logs, and anonymised usage analytics.
- Location data — only when you explicitly grant permission within our mobile application (for example, to find the nearest MAKSSA office or to suggest relevant flights). You can revoke this permission at any time in your device settings.
3. How We Use Your Information
We use your personal information only for the following purposes:
- To process flight, hotel, visa and travel bookings on your behalf and to communicate with airlines, embassies and service providers required to fulfil them.
- To provide customer support, respond to enquiries, and handle disruptions, cancellations and refunds.
- To operate, maintain, secure and improve our website and mobile applications, including diagnosing crashes and preventing fraud.
- To comply with legal, tax, anti-money-laundering, and aviation regulatory obligations applicable to travel agents in Pakistan and the destinations involved.
- To send service-related notifications about your itineraries (we do not send marketing messages without your prior consent).
4. Legal Bases for Processing
We process personal information on the basis of (a) the contract we enter into when you ask us to arrange travel, (b) your explicit consent for sensitive data such as passport information or location, (c) our legitimate interests in operating and improving our services, and (d) compliance with legal obligations.
5. Sharing Your Information
MAKSSA does not sell your personal information. We share it only when necessary to deliver the service you have requested, and only with:
- Airlines, hotels, ground operators, and tour partners needed to confirm your booking.
- Embassies, consulates and visa application centres when we are assisting with a visa file.
- Global Distribution Systems (GDS) such as Sabre, Amadeus or Galileo used to issue tickets.
- Payment processors who handle card and bank transactions securely on our behalf.
- Trusted technology providers who host our website, support our applications, or provide analytics and crash reporting — all under contractual confidentiality obligations.
- Regulators, courts or law-enforcement authorities where we are legally required to disclose information.
6. International Data Transfers
Because travel is inherently international, your information may be transferred to countries outside Pakistan, including jurisdictions whose data protection laws differ from those of Pakistan. Where we transfer personal information internationally, we take reasonable steps to ensure it remains protected to the standard described in this Policy.
7. Mobile Application Permissions (Google Play Disclosure)
If you install a MAKSSA mobile application from the Google Play Store, the app may request the following permissions, each used only for the stated purpose:
- Internet & network state — to load itineraries, fares and visa updates.
- Notifications — to send flight reminders, gate changes and visa-status updates. You may disable notifications at any time.
- Camera & photo library (optional) — only when you choose to upload a passport scan or visa photograph for a booking.
- Approximate or precise location (optional) — only when you tap a feature that needs it, such as "find nearest MAKSSA office". Location is not collected in the background.
- Storage — to save your boarding cards, visa receipts and itineraries to your device.
We do not access contacts, SMS, call logs, microphone, accessibility services, or sensitive device data. The MAKSSA application does not collect data for advertising purposes and does not contain third-party advertising SDKs that track you across apps.
8. Data Security
We use technical and organisational measures appropriate to a travel services provider — encrypted transport (HTTPS/TLS), restricted internal access, secure document storage and routine staff training — to protect your information against unauthorised access, alteration, disclosure or destruction. No system, however, is completely secure, and we encourage you to use strong, unique passwords and to inform us immediately of any suspected breach.
9. Data Retention
We retain personal information only for as long as needed to deliver your services, comply with our legal obligations (including aviation, tax and anti-money-laundering record-keeping), and resolve disputes. Visa-related documents are typically retained for the period required by the relevant embassy, and ticketing records are retained in line with IATA Billing & Settlement Plan requirements.
10. Your Rights
Subject to applicable law, you have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of your information, subject to our retention obligations.
- Withdraw consent at any time where processing is based on consent.
- Object to or restrict certain processing.
- Request a copy of your data in a portable format.
- Lodge a complaint with the relevant data protection authority.
To exercise any of these rights, please contact us using the details in Section 13. We will respond within a reasonable timeframe and may need to verify your identity before acting on a request.
11. Children's Privacy
Our services are intended for adults arranging travel, including travel for minors in their care. Our website and mobile applications are not directed to children under 13, and we do not knowingly collect personal information from a child under 13 except as provided to us by a parent or legal guardian making a booking. If you believe a child has provided us with personal information without parental consent, please contact us and we will promptly delete it.
12. Account Deletion (Mobile App)
You may request deletion of your MAKSSA mobile application account and associated personal information at any time. To do so:
- Use the in-app "Delete my account" option if available, or
- Email us at the address in Section 13 with the subject line "Account Deletion Request".
We will confirm receipt within 7 working days and complete deletion within 30 days, except where we are required by law (for example, aviation regulators or tax authorities) to retain certain booking records. Anonymised analytics and statutorily-required transaction logs may be retained.
13. Contact Us
Questions, complaints, or rights requests under this Privacy Policy may be directed to:
MAKSSA — Privacy Desk
House No. 313
Multan, 60000
Pakistan
Phone & WhatsApp: +92 321 684 5729
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or Google Play Store policies. When we do, we will revise the "Last updated" date at the top of this page and, where the changes are material, take additional steps to notify you (such as an in-app notice). Your continued use of our services after an update means you accept the revised Policy.
← Back to MAKSSA