Privacy Policy

Information We Collect

• Account details: name, email, phone number, and password (stored hashed).
• Booking details: traveler names, dates of birth, nationality, passport number and expiry, and travel dates.
• Payment-related information: booking amount, currency, and transaction reference. We do not collect or store your card, bank account, or BML Connect login details — these are entered directly on Bank of Maldives' own secure payment page.
• Technical data: IP address, browser type, and pages visited, used for security and analytics.

How We Use Your Information

• To create and manage your account and bookings.
• To process payments — when you choose to pay with BML Connect, we share only the information necessary to complete the transaction (your name, the booking reference, and the amount) with Bank of Maldives. BML Connect's own privacy and security practices govern how they handle your card and banking details.
• To communicate booking confirmations, payment status, and customer support.
• To comply with legal and regulatory obligations in the Maldives.

Payment Processing via BML Connect

When you pay via BML Connect, you are redirected to a payment page hosted by Bank of Maldives. We never see or store your card number, expiry date, CVV, or online banking credentials. BML notifies us only of the outcome of your payment (successful, cancelled, or failed) and a transaction reference, which we record against your booking to confirm payment.

Security of Payment Card Data

We do not collect, transmit, or store your card number, expiry date, CVV, or online banking credentials on our servers at any point — this keeps our platform outside the scope of card data handling. When you choose to pay online, your browser is redirected to a payment page hosted and secured by Bank of Maldives (BML Connect), where your card details are entered directly and transmitted to BML over an encrypted (TLS) connection. BML Connect is a PCI DSS–compliant payment service, and BML — not Eridal Travel — is responsible for the security of your card data during and after entry on their page.

The only payment-related data we receive back is the transaction outcome (successful, cancelled, or failed) and a transaction reference number, which we store to reconcile your booking. Access to this data within our systems is restricted to authorised staff who need it to support your booking.

Data Sharing

We do not sell your personal information. We share it only with the properties, tour, and activity operators necessary to fulfil your booking, and with Bank of Maldives solely to process payments you initiate.

Data Retention & Security

We retain booking and account data for as long as needed to provide our services and meet legal record-keeping requirements, and we apply reasonable technical and organisational measures to protect it against unauthorised access.

Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us using the details below.

Contact Us

Eridal Travel, Majeedhee Magu, Malé, Maldives
Phone: +960 300 1234
Email: hello@eridaltravel.com