Privacy Policy

stubform.com (PE, EDRPOU 18033998), located at 12 Velyka Vasylkivska St, Business Center Horizon, Office 507, Kyiv, 03150, Ukraine, is the controller of personal data processed via this website. This policy is issued under Law of Ukraine 'On Protection of Personal Data' No. 2297-VI (Articles 8, 12, 14).

1. Data We Collect

• Names and contact details of travellers (e-mail, phone, address).
• Passport and travel document data required for bookings.
• Booking details: destinations, dates, preferences.
• Technical data: cookies and analytics identifiers (see Section 6).

2. Purposes and Legal Grounds

We process personal data to conclude and perform travel service agreements, fulfil legal obligations, handle complaints, and — only with your consent — for marketing communications. Purposes are defined in our Public Offer Agreement (publichna oferta) accepted at checkout.

3. Cross-Border Transfers

Booking data (including passport details) is transferred to foreign suppliers such as hotels and operators in the Maldives and the UAE strictly to the extent needed to provide the ordered services. This disclosure is made in accordance with Article 14 of Law No. 2297-VI.

4. Retention

Booking and travel document data are retained for the period required by Ukrainian law and for the limitation period of related claims, then securely deleted.

5. Data Subject Rights

Under Articles 8 and 12 of Law No. 2297-VI you have the right to: know about the processing of your data; access and rectify it; demand its deletion or destruction; object to processing; withdraw consent to marketing at any time; and complain to the Ukrainian Parliament Commissioner for Human Rights (Ombudsman).

To exercise your rights, contact us at contact@stubform.com or +380 635 111 8779.

6. Cookies

We use essential cookies for site operation and, subject to your consent and disclosure, analytics cookies that process online identifiers. You may opt out via your browser settings or by contacting us. This notice is provided under Article 12 of Law No. 2297-VI.

7. Security

We apply organisational and technical measures to protect personal data against unauthorised access, loss, or disclosure.

8. Changes

Updates to this policy will be published on this page with a revised effective date.