Effective 3 August 2026
This policy explains what personal information GConnect collects when you search for and book travel with us, why we need it, who we pass it to, how long we keep it, and how you can get it deleted.
GConnect is a travel booking service operated from Karachi, Pakistan. We sell flights and hotel stays through our website at gconnect.ae and through the GConnect mobile app for Android and iOS. This policy covers both, and applies to everyone who uses them — travellers booking for themselves, and travel agents booking on behalf of clients.
If you book through us, we act as the seller of travel and as a booking agent for the airline or hotel that ultimately provides your travel. Those providers handle your information under their own privacy policies once your booking reaches them.
Account information. When you create an account we collect your name, email address and a password. Passwords are stored only as a cryptographic hash — we cannot read them or recover them for you.
Traveller and booking information. To issue an airline ticket or hotel reservation, airlines and hotels require us to collect, for each traveller: title, first and last name, date of birth, gender, nationality, and — for international travel — passport or national ID number, issuing country and expiry date. We also collect a contact email address and phone number for the booking, and any special requirements you tell us about, such as a wheelchair request or a special meal.
Passport and identity document numbers are sensitive information. We collect them only because the airline or destination authority requires them to issue and honour your ticket, and we do not use them for any other purpose.
Payment information. Card payments are processed on the payment gateway’s own hosted page. Your full card number, expiry date and CVV are entered on the gateway and are never sent to, or stored on, our servers. We retain only the amount, currency, payment method, a transaction reference and the payment status, so that we can reconcile your booking, issue refunds and handle disputes.
Travel agent accounts. If you hold an agent account, we additionally hold your credit limit, credit used and pricing margin, so that we can operate your account.
Technical information. Our servers record standard request logs. Your browser or app stores a session token so that you stay signed in, along with a short list of your recent searches so that we can pre-fill the search form. This information stays on your own device and you can clear it by signing out or clearing app data.
What we do not collect. We do not use advertising SDKs, advertising identifiers, or third-party analytics or tracking services in our mobile app. We do not collect your location, contacts, photos, or the contents of your device.
We use the information described above to:
We do not sell your personal information, and we do not use it for advertising or behavioural profiling.
We keep your account information for as long as your account is open. We keep booking and ticket records, including traveller names and travel document details, for as long as we need them as the record of a ticket that was issued — to handle refunds, schedule changes, chargebacks and disputes, and to meet tax and regulatory record-keeping requirements.
Deleting your account does not delete your past booking records; see the next section for exactly what is removed and what is kept, and why.
You can, at any time:
You can delete your GConnect account in either of these ways:
What is deleted. Your name, email address, password and profile image are permanently erased, and all of your active sign-in sessions are destroyed. Once this is done your account cannot be signed into or recovered, and the email address becomes free to register again. The contact email address and phone number stored against your past bookings are also erased.
What is kept, and why. The booking and ticket records themselves are retained, including traveller names and travel document details. These are the record of a ticket that an airline issued: we need them to handle refunds and chargebacks, and we are required to keep them for tax and regulatory purposes. They are no longer linked to a usable account, and they no longer carry your account identity.
Deleting your account does not cancel your trips. Any upcoming booking stays live and you must cancel it separately with us, or through the airline or hotel, if you do not intend to travel. The app shows you a list of your upcoming trips before you confirm deletion.
All traffic between our website, our mobile app and our servers is encrypted in transit using HTTPS; the Android app refuses unencrypted connections outright. Passwords are stored only as hashes. Access to booking data in our back office is restricted by role, and card details are handled entirely by our payment gateway rather than by us.
No service can promise perfect security. If a breach affects your personal information, we will notify you and the relevant authorities as required by law.
GConnect is not directed at children, and we do not knowingly allow anyone under 18 to create an account. Adults do of course book travel for children and infants, and in that case we collect the child’s name, date of birth and travel document details from the adult making the booking, because the airline requires them to issue the ticket.
We may update this policy as our service changes. When we do, we will revise the effective date at the top of this page, and for significant changes we will tell you in the app or by email. Continuing to use GConnect after a change means you accept the updated policy.
If you have a question about this policy, want a copy of your data, or want to make a complaint about how we have handled your information, contact us: