Privacy Policy
Last updated: October 2026
1. Who we are
Rezerva is a tourism marketplace for Timor-Leste operated by REZERVA OTA, LDA., registered with SERVE, I.P. under enterprise number (NIF) 1459199, Timor Plaza Central, Loja 150, Díli, Timor-Leste, the data controller for this website. Our website is rezerva.tl. For questions about this policy, contact us at [email protected].
2. What we collect
When you use Rezerva, we may collect:
- Contact information: name, email address, phone number (when you submit an enquiry, booking, or travel-alert request)
- Booking details: preferred dates, number of guests, tour preferences
- Account data: email and password, or your Google, Apple or Facebook sign-in, if you create an account
- Usage data: pages visited, search queries, browser type (via Google Analytics)
- Device data: IP address, browser, operating system
- Payment card details: collected over an encrypted connection when you book with a card, and used solely to process your booking payment
- Car and motorbike hire details: when you book a vehicle, your date of birth, driving licence number, issuing country and expiry date, passport number, nationality and expiry date (typed in, or read from a photo of your passport inside your browser; the photo is never uploaded), whether you hold an International Driving Permit, any additional driver's name, where to deliver the vehicle if you ask for delivery, and your flight number if you ask for an airport pickup
3. How we use your data
- To process and forward your enquiries and bookings to operators
- To send booking confirmations, requested travel alerts, and status updates via email or WhatsApp
- To improve the website and understand how visitors use it
- To respond to your questions or support requests
We do not sell your personal data to third parties.
4. Who we share data with
- Tour operators: we share your enquiry/booking details with the operator you selected so they can confirm and arrange your experience
- Messaging providers: we use Resend for transactional email and Meta WhatsApp Cloud for requested WhatsApp updates
- Analytics: we use Google Analytics to understand site traffic (anonymised)
- Hosting: our servers are hosted by Hetzner (Germany) and Firebase (Google Cloud)
- Payments: card payments are processed by Rezerva in Dili only after availability is confirmed and Rezerva is ready to complete your booking; your card details are never shared with operators and are removed once payment is completed or the booking is cancelled
- Network and security: our website is delivered through Cloudflare, which carries your connection to rezerva.tl
- AI services: our trip planner, message translation and the tools our team uses to keep track of and answer messages run on Anthropic's Claude models. What you type into the planner, and the messages you send us, may be sent to Anthropic to produce the result
5. Data retention
We retain enquiry and booking data for as long as needed to provide our services and comply with legal obligations. You can request deletion of your data at any time by emailing [email protected].
6. Cookies
We use cookies for: language preference (stored locally), Google Analytics (traffic analysis), and authentication (if you create an account). No advertising cookies are used.
7. Your rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Withdraw consent for marketing communications
Contact [email protected] to exercise any of these rights.
8. Changes to this policy
We may update this policy from time to time. Changes will be posted on this page with an updated date.