This Privacy Policy explains how ToursXplorer collects, uses, stores, shares and protects personal information when you visit toursxplorer.com, create an account, make a booking, interact with our services, or otherwise use the ToursXplorer platform.
ToursXplorer.com is a trademark of KMG, S.A., with registered office at Largo Rafael Bordalo Pinheiro, 16, 1200-369 Lisbon, Portugal, NIF 508441544, RNAVT 6820.
We are committed to protecting personal data and processing it in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR) and applicable Portuguese law.
ToursXplorer is an online travel marketplace and aggregator that enables customers to discover and book tours, activities, experiences and other travel-related services provided by independent suppliers.
For the purposes of this Privacy Policy, references to "ToursXplorer", "we", "us" or "our" refer to KMG, S.A., where KMG, S.A. determines the purposes and means of processing personal data.
The personal data we collect depends on how you interact with ToursXplorer and which services you use.
Information may include:
Some travel activities may require additional participant information for operational, eligibility or safety reasons. Where such information is required, the relevant requirements may be determined by the supplier providing the activity.
Payments may be processed by third-party payment service providers.
ToursXplorer does not retain confidential payment card information such as complete credit card details when those details are collected and processed directly by the relevant payment provider.
Payment providers may independently process personal data necessary to authorize transactions, prevent fraud, process refunds and comply with their legal obligations. Their processing is governed by their own privacy policies and applicable law.
We may process personal data for purposes including:
Where the GDPR applies, ToursXplorer processes personal data only when there is an appropriate legal basis.
Depending on the circumstances, processing may be based on:
Tours, activities and experiences available through ToursXplorer are provided by independent suppliers.
When you make a booking, we may provide the relevant supplier with the personal information reasonably necessary to administer and fulfil that booking.
A supplier may need additional information because of the nature of a particular activity. Suppliers may process personal data under their own legal responsibilities and privacy policies.
Suppliers receiving customer information through ToursXplorer are required to use that information appropriately and in accordance with applicable data protection requirements.
We may use trusted third-party service providers to operate and support ToursXplorer. Depending on the services being used, these may include providers of:
We only share personal data where reasonably necessary for the relevant purpose and subject to applicable legal requirements.
We may also disclose information when required by law, regulation, legal process or a competent public authority, or where necessary to protect our rights, users, suppliers or the security of our services.
ToursXplorer uses certain Google services for website functionality, analytics, advertising and internal business operations.
These services may include Google Analytics, Google Maps, Google Ads and Google APIs. The information processed through a particular Google service depends on the functionality being used.
Where ToursXplorer accesses Google services through OAuth or Google APIs, access is limited to the permissions required for the relevant functionality and is used for legitimate ToursXplorer business purposes.
Google Ads API data accessed by ToursXplorer may be used internally to retrieve and analyse advertising account, campaign and performance information and to support advertising management and business decision-making.
Access credentials, authentication tokens and other security credentials used for API integrations are treated as confidential security information and are subject to access controls designed to prevent unauthorized disclosure or use.
Information received from Google APIs will be handled in accordance with applicable Google API terms and policies, as well as applicable data protection law.
ToursXplorer may use cookies and similar technologies to operate the website, remember preferences, understand website usage, measure performance and support advertising and marketing activities.
Some cookies are necessary for the website to function. Other cookies or technologies may require consent depending on their purpose and applicable law.
Users may also be able to manage cookies through their browser settings. Disabling certain cookies may affect some website functionality or the browsing experience.
ToursXplorer may use analytics services, including Google Analytics, to understand how visitors interact with the website and to produce reports about website usage and performance.
Analytics technologies may process information such as device and browser information, approximate location derived from technical information, pages viewed and interactions with the website, subject to applicable consent and privacy requirements.
ToursXplorer may send promotional or informational communications where permitted by applicable law.
Where marketing communications are sent by email, recipients may unsubscribe using the unsubscribe mechanism provided in those communications.
Unsubscribing from marketing communications does not prevent ToursXplorer from sending transactional or administrative communications necessary in connection with bookings, accounts, security or other services requested by the user.
ToursXplorer operates in an international travel and technology environment. Some suppliers or technology service providers may be located outside the European Economic Area.
Where personal data is transferred internationally, we take appropriate measures as required by applicable data protection law. Depending on the circumstances, these measures may include adequacy decisions, appropriate contractual safeguards or another legally recognized transfer mechanism.
ToursXplorer retains personal data only for as long as reasonably necessary for the purposes for which it was collected and for any additional period required or permitted by law.
Retention periods may vary depending on the type of information, the nature of the relationship, booking and transaction requirements, legal and accounting obligations, fraud prevention, dispute resolution and the establishment or defence of legal claims.
Deleting an account does not necessarily require the immediate deletion of all information. Certain records may need to be retained where there is a legal obligation or another lawful basis for retention.
ToursXplorer uses technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.
The ToursXplorer website uses HTTPS to protect information transmitted between users and the website.
No Internet-based system can guarantee absolute security. We therefore continuously seek to maintain security measures appropriate to the nature of the information and the risks associated with its processing.
Subject to applicable law, you may have rights concerning your personal data, including the right to:
These rights may be subject to limitations or exceptions established by applicable law. We may need to verify your identity before responding to a request.
Individuals may have the right to lodge a complaint with the Portuguese data protection supervisory authority, Comissão Nacional de Proteção de Dados (CNPD), or with another competent supervisory authority where applicable.
ToursXplorer provides a marketplace for travel experiences and is not designed as an online service specifically directed at children.
Where information relating to a minor is required in connection with a booking or activity, it should be provided by or under the responsibility of the relevant parent, guardian or responsible adult, as appropriate.
ToursXplorer may contain links to websites or services operated by third parties. ToursXplorer does not control the privacy practices of independent third-party websites.
Users should review the privacy policies of third-party services before providing personal information directly to them.
We may update this Privacy Policy when necessary to reflect changes to our services, technologies, legal requirements or data processing practices.
The latest version will be published on this page. Where appropriate or required by law, we may provide additional notice of material changes.
If you have questions about this Privacy Policy, the processing of your personal data, or wish to exercise a data protection right, you may contact:
KMG, S.A.
ToursXplorer.com
Largo Rafael Bordalo Pinheiro, 16
1200-369 Lisbon
Portugal
NIF: 508441544
RNAVT: 6820
Email: [email protected]
Last Updated: 4 September 2026
