SECURITY AND DATA
Find the right evidence for your setup.
Start with the policy or product you need to review. These links bring together Travelgenix’s published information, with practical questions for your buying and implementation teams.
Reviewed 20 October 2026. Choose the source that matches your product or question.
WEBSITE AND PERSONAL INFORMATION
Privacy policy
Read the published policy’s collection, use, sharing, retention and rights sections. Check its stated scope and update date when preparing your questions.
DATA-PROTECTION ENQUIRIES
GDPR information
Find Travelgenix’s published GDPR information and the route for related questions. Confirm the relevant written terms for the service you are buying.
HOSTING SERVICES
Website hosting
Review the hosting page’s description of infrastructure, certificates, backups and support. Ask which commitments apply to your website and agreement.
AI ANSWERS AND CONTENT REVIEW
Luna Chat trust and safety
Explore the published approach to approved knowledge, source checks and uncertain answers. This describes Luna Chat’s answer process.
CONTRACTING ACCOUNT ACCESS
Luna Contracting security
Read the product’s account separation, sign-in, audit and API-key information. Keep its scope specific to Luna Contracting.
DEVELOPER IMPLEMENTATION
Contracting API authentication
Use the written reference for scoped keys, server-to-server calls, test access and booking operations. Check the live reference when implementing.
Check the scope of the answer
Security and data questions need a product and a purpose. A policy about this website, a hosting description and an API authentication guide answer different questions. Use the linked pages for their stated scope, then ask the team to confirm how they apply to the services in your proposal.
The resource cards link directly to the published sources. Their review date records when we checked the links and descriptions. It does not replace a policy’s own effective date or certify an implementation.
Prepare your data-handling brief
Describe the records your business expects to use, the people who need access and the systems between which information will move. Include booking records, documents and messages where relevant. A concrete workflow makes the discussion more useful than a general request to confirm that everything is secure.
Ask which party is responsible for each activity and which written terms apply. Request the relevant information on data location, service providers, retention, deletion, export and incident contacts. These are recommended procurement questions; this page does not claim that a particular answer applies to every Travelgenix product.
Check access and the integration boundary
For an API project, ask how keys are issued, stored and revoked, which product they can access and where booking state is checked. The Contracting API authentication reference requires server-to-server calls and says keys must not be embedded in a browser or mobile app. Apply the relevant documentation to the API you are actually integrating.
For a team using a portal, agree who can view, change and approve the records involved. Demonstrate the roles needed for your workflow before launch. A description of a control is a starting point for that check, not a substitute for seeing the agreed setup.
Confirm the operational handover
Record how your team reports an incident, how a booking discrepancy is investigated and which contact owns the next step. Ask what continuity and recovery arrangements are included in your agreement and what your team must prepare. Keep the agreed answers with the implementation brief so they remain available after launch.
Take the next step
Use the booking API guide for a custom front end, the Contracting API guide for directly contracted product or Guides for operational checklists. Contact Travelgenix with the products and workflow you want to review.
Sources reviewed 20 October 2026: the six resource cards above link to the official policies and product documentation. Questions and checklists on this page are Travelgenix’s editorial recommendations.
For background on data-processing agreements, see the ICO’s guidance on contracts between controllers and processors and ask how the applicable terms address your workflow. This is a source for the procurement questions, not a certification of Travelgenix.