Official Legal Documentation

Privacy Policy

Effective Date: July 28, 2026
•
Operator: ABD GLOBAL, LLC
•
Brand: Tealigo

At Tealigo, we take your privacy and data protection seriously. This Privacy Policy outlines what personal data we collect, why we collect it, how it is safeguarded, and your rights under applicable global privacy regulations (including GDPR and US State Privacy Laws).

Encrypted Payments

Payments are securely processed via PCI-DSS compliant Stripe.

No Unauthorized Sale

We do not sell your personal identifying data to third-party data brokers.

Global Standards

Strict adherence to Delaware, US, and GDPR data protection frameworks.

1.Controller and Scope

ABD GLOBAL, LLC, trading as Tealigo, controls personal data collected directly through the platform. Hotels, RateHawk/ETG, Stripe and other providers may act as independent controllers for their own processing. For questions regarding your personal data, contact us at privacy@tealigo.com.

2.Categories of Data Processed

Identity, contact, account credentials, traveller details, booking specifications, payment status, device identifiers, cookie signals, location data, customer support communications, rewards transactions, marketing preferences, and fraud or sanctions compliance information may be processed.

3.Purposes and Legal Bases

Data is used to provide and secure accounts and bookings, process payments, communicate essential travel information, manage refunds and TealPoints rewards, prevent fraud, comply with applicable laws, defend legal claims, improve platform performance, and market where permitted. Under GDPR, legal bases include contract performance, legal obligations, legitimate business interests, and consent.

4.Information Sharing and Disclosure

Data may be shared with booked hotels, RateHawk/ETG, Duffel (for flights), Stripe, banks, cloud infrastructure providers, security vendors, customer support tools, professional legal/financial advisers, and regulatory authorities to the extent reasonably necessary to fulfil your travel services.

5.International Data Transfers

Data may be transferred to and processed in the United States and other countries where our suppliers operate. Where GDPR or equivalent data-protection frameworks apply, Tealigo utilizes lawful transfer mechanisms, such as Standard Contractual Clauses (SCCs) and adequacy frameworks.

6.Data Retention

Records are retained only as long as necessary for service delivery, accounting, tax compliance, fraud prevention, chargeback reconciliation, complaint resolution, legal defense, and regulatory obligations.

7.Your Rights and Choices

Depending on your jurisdiction, you may have rights to access, rectify, erase, restrict, or port your personal data, object to specific processing, withdraw consent, and lodge a complaint with your local supervisory authority. Identity verification may be required to protect your account.

8.US State Privacy Disclosures

Residents of California, Virginia, Colorado, and other applicable US states possess statutory rights to know, access, correct, or delete personal information, and to opt out of certain automated profiling or targeted marketing. Tealigo does not discriminate against users who exercise their privacy rights.

9.Security and Safeguards

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against accidental loss, unauthorized access, or disclosure. In the event of a qualifying data security incident, notifications will be provided in accordance with applicable law.

10.Children's Information

The Tealigo platform is intended strictly for adults aged 18 and older. An adult booking on behalf of minors may provide necessary travel details solely for reservation and flight passenger manifests.

11.Automated Fraud Prevention

Automated fraud, risk, and security signals may review transaction patterns to prevent unauthorized card usage. Human review is available where legally required.

12.Sensitive Data Caution

Users must not transmit full credit card numbers, passwords, unnecessary passport scans, national insurance/SSN numbers, or health details through regular unencrypted email. Always use secure checkout fields.