Privacy

When you send an enquiry, booking request or RFQ. Your name, email address, and phone or WhatsApp number if you give one — plus whatever the form asks for the trip itself: dates, number of travellers, the hotel, experience or package you chose, your budget range, and any notes you write. The language you were browsing in is stored with it so we reply in the same one.

When you talk to the concierge. What you type and what it answers are both kept, along with the page language. Each browser tab is given a random token so a conversation holds together as one thread — it identifies the tab, not you, and it is discarded when you close the tab. If you ask to speak to a person, the transcript is attached to that request so our team can read the context instead of asking you to repeat yourself.

Automatically. Your IP address is used, briefly and in memory, to rate-limit requests so the site cannot be flooded. We do not store it against your enquiry or your chat. Our host keeps ordinary server logs.

No advertising or analytics cookies — there are no third-party trackers on this site. What is stored is functional and stays on your device:

• Your trip cart — the items you have added, so they survive a page reload.
• The chat session token — a random string, cleared when the tab closes.
• Whether you dismissed the cookie note — so it stays dismissed.
• An admin sign-in cookie — only if you are staff signing in to the dashboard.

Clearing your browser storage removes all of these. Nothing here is used to follow you to other sites.

For enquiries and bookings, because you asked us to arrange something and we need the details to do it — and afterwards to keep an accurate record of the arrangement.

For chat transcripts and rate limiting, because we have a legitimate interest in running a service that works, answering follow-up questions accurately, and preventing abuse. If you would rather your conversation were not kept, tell us and we will delete it.

We use a small number of service providers. They process data on our instructions and are not permitted to use it for their own purposes.

To arrange a trip we also pass the details you would expect to the hotel, lodge or guide you are booking — a name, dates and party size. We tell you who before we do it.

The concierge is an AI.Your chat messages are sent to Google to generate a reply, and to Cloudflare's safety filter first. Please do not type passwords, passport or card numbers, or health details into the chat. If you need to send something sensitive, ask to speak to a person.

Our database is in Ireland and our server is in the United Kingdom. Cloudflare and Google are US companies operating globally, so some processing happens outside Ethiopia and outside the EU. We use them under the standard data-protection terms they publish for international transfers.

Enquiries and bookings are kept while we are arranging your trip, and afterwards as a business record — so we can answer questions about a trip you actually took. Chat transcripts are kept so our team can see the context behind a request.

Encrypted backups are kept for 14 days and then overwritten, so a deletion can take up to two weeks to disappear from every copy.

If you want your enquiry or your chat history deleted sooner, email [email protected] and we will do it.

• Sell, rent or trade your details.
• Run advertising trackers, pixels or third-party analytics.
• Build a marketing profile of you, or make automated decisions about you.
• Email you marketing you did not ask for.

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to us holding it at all. Email [email protected] and we will answer within 30 days. You do not need an account, and there is no charge.

If you are in the EU or UK and think we have handled your data badly, you may also complain to your national data-protection authority.

The site is served over HTTPS. The database is managed and encrypted at rest by our provider. Access to the operations dashboard requires a sign-in, and every change made there — including anything done by a connected AI assistant — is recorded in an audit log with who did it and what it looked like beforehand.

No system is perfect. If you believe you have found a security problem, please write to [email protected] rather than posting it publicly, and we will respond.

This site is meant for adults planning travel. We do not knowingly collect data from children. If a child has sent us something, write to us and we will remove it.

If we change how we handle your data, we will update this page and the date at the top. Material changes will be flagged on the site rather than made quietly.

MivonTravel — Addis Ababa, Ethiopia.
[email protected]

Contact · Photo credits