Who we are

MagiTrip Pte. Ltd. ("MagiTrip", "we") is a Singapore company that designs educational travel programmes for travellers of all ages and their families. This policy covers the website at magitrip.ai, including the booking pages and the customer account. Questions about it go to info@magitrip.ai.

What we collect, and why

  • Enquiries. The contact form asks for a parent's name, an email address, a WhatsApp number or a WeChat id (any one of the three), country or region, the child's age, the programme you are interested in and your message. The email box on the home, Stories and About pages asks for an email address only, for programme news. We keep enquiries so that we can reply and, if you go on to book, so that we know the history. The form also offers a separate, optional tick box for programme updates; leaving it unticked has no effect on your enquiry.
  • Notify-me, waitlist and applications. When you ask to be told when a programme opens, join a waitlist or apply for a place, we keep your email, the travellers you named and the programme or departure, so that we can write to you about that one thing.
  • Your account. The customer account uses your email address and a six-digit code sent to it; there is no password. We keep the email, your name if you give it, your language for emails, and a record of each sign-in. Codes expire after ten minutes and are deleted a day after they expire.
  • Bookings and travellers. To book, you give the legal name and date of birth of each traveller and your relationship to each child, and you confirm you hold legal authority for every child you book. Before departure, and only for a confirmed booking, you add emergency contacts in your account; they are destroyed 90 days after the trip. We do not ask for passport details or health records. Allergies and dietary needs you tell your advisor are used to arrange the trip with the accommodation and caterers. Booking also asks for a WhatsApp number or a WeChat id, because that is how an advisor reaches a family about a trip; what we send there never names a child, their age, or anything to do with their health.
  • Payments. You pay by bank transfer or PayNow into MagiTrip's own account, or online on the website. An online payment is handled by our payment provider on its own pages, and MagiTrip never sees or stores your card number. We keep the transaction reference, the amount, the date and the receipt, and we keep booking and payment records for seven years because accounting and tax law require it.
  • What you accepted. When you pay, we record which version of the booking terms, cancellation policy and insurance notice you accepted, and when, so that the same text can be shown to you later in your account.
  • Referrals and travel-together groups. If you open an invitation link, a cookie remembers the code for 30 days so that the discount can be applied to a first booking. We record which family invited which, and the credit that follows, so that both sides can see it in their accounts.
  • Wish cards. A wish card on the Wish Wall shows the destination and the words you wrote. An email or phone number you add is not shown on the wall and is used only to tell you if that destination is scouted.
  • Newsletter. The subscription box keeps your email so that we can send programme updates when there is something to say. You can unsubscribe at any time by writing to info@magitrip.ai; account holders also have a switch in their settings, and it is never a condition of booking.
  • WhatsApp, email and WeChat. Messages you send us through these channels are handled by those providers under their own privacy terms, and kept by us for as long as needed to answer you and, if you travel, to run the trip.

Children

Children's information — a legal name, a date of birth, and any allergies or dietary needs you tell your advisor — is given to us by a parent or legal guardian, never collected from a child directly. Photographs in which a child can be recognised are published only with the parent's separate consent, which is never a condition of booking.

Cookies and what your browser keeps

  • A session cookie keeps you signed in to your account. It cannot be read by scripts, and it is deleted when you sign out.
  • A companion token protects the forms in your account against forged requests.
  • A marker cookie holds only the fact that you are signed in, so the pages can show "My account" instead of "Sign in". It carries nothing about you, lasts as long as the session, and is deleted when you sign out.
  • A device cookie remembers that this browser has signed in before, for 180 days. Scripts cannot read it, and it is used only to spare a browser we already know some of the checks that protect sign-in from abuse.
  • The referral cookie described above lasts 30 days.
  • Your choice of English or Chinese is saved in your browser's local storage so the site remembers it. It is not sent to us.
  • We do not use advertising trackers or analytics cookies, and no analytics service is connected to this website at present. If that changes, this policy will say what is measured and how.
  • Our hosting provider (Cloudflare) records standard technical data such as IP address, browser type and the pages requested, for security and to keep the site running.

Who sees your information

MagiTrip staff who answer enquiries and run bookings; our payment provider, for an online payment itself; our email provider, to deliver codes, receipts and notifications; our hosting provider; and, for a confirmed booking, the hotels, transport and activity providers who need the traveller list to run the trip. Every action a staff member takes on your record is logged. We do not sell or rent personal information.

How long we keep it

Enquiries are deleted after 24 months without contact. Booking, payment and receipt records are kept for seven years. Emergency contacts are destroyed 90 days after the trip. Health information or passport details we received before we stopped collecting them are destroyed on the same schedule. Notifications are kept for 12 months. An account is anonymised on request, and the booking records that must be kept are detached from your name.

Your rights

Under Singapore's Personal Data Protection Act you may ask us what personal data we hold about you or your child, ask us to correct it, withdraw consent to marketing, or ask for your account to be deleted. Email info@magitrip.ai and we will respond within 30 days. Records that the law requires us to keep, such as receipts, are kept but no longer linked to you.

Changes

If this policy changes we will update this page and the date above. When a change affects a booking you already hold, we will tell you by email.