This Privacy Policy explains how Lorvean handles personal information when you browse our website, use your account, book a hotel or tour, make a payment, contact support or subscribe to our newsletter. Lorvean is operated by Zhandarazm LLC, a limited liability company registered in the Republic of Tajikistan. Taxpayer Identification Number (TIN): 530008217.
Lorvean is responsible for the personal information it collects and the processing it determines. Travel providers, booking partners and payment services may also process information for their own purposes under their own privacy notices. For questions about your data or to make a privacy request, contact support@lorvean.com.
Last updated: 21 October 2026. We may update this notice as our services or data practices change. Material changes will be explained before any new use that requires your consent. This notice provides information about processing; reading it or simply browsing the website does not, by itself, give consent to optional tracking or marketing.
Information you provide may include your full name, email address, telephone number, country, date of birth and address. Account information can include your personal details, saved traveller details, bookings, favourites, notification preferences, security settings and support messages. The information collected depends on the features you use and the details you choose to provide.
Booking information includes the selected hotel or tour, dates, guest names and contact information, guest allocation, child ages where relevant, special requests, booking references and the status of changes, cancellations or refunds. When you provide another traveller's information, you must be authorised to do so and make this notice available to them. Passport or identity-document information is requested only where a particular service or applicable law requires it, with the purpose explained when requested.
Payment-related information may include the amount, currency, payment status, transaction reference and refund information. Cryptocurrency payments and refunds may also involve wallet addresses, the network used and transaction identifiers; public blockchain transactions may remain visible independently of Lorvean. Payment processing provider: "". Details of how card information is transmitted and which information is retained for saved payment methods: "".
We receive technical and usage information such as your IP address, browser and device information, browser language, pages visited, visit times, referral codes and browser or cookie identifiers. We use IP-based country information and browser language to adapt language, currency and regional settings. IP-location service: "". IP-based location is approximate and does not necessarily identify where you live.
Google analytics tools, session-recording tools and advertising trackers are used on the website, subject to applicable consent requirements. These tools may process page visits, navigation, clicks, scrolling, interaction events and device or cookie identifiers. Session-recording provider: "". Recording scope and exclusions for private forms and account, booking and payment pages: "". Advertising partners: "". A support conversation through tawk.to includes the content you send and associated contact or technical information. DeepL processes text submitted to its translation service; any use involving personal information must be explained and have an appropriate basis.
We use information to create and administer accounts, arrange and manage reservations, pass necessary details to booking partners and travel providers, handle payments and refunds, send booking confirmations and service notices, answer support requests and provide the account features you choose. Information needed to carry out a booking may be required to provide that service; we identify required fields when asking for it.
We also use relevant technical information to operate and protect the website, investigate errors or misuse, remember preferences and understand how visitors use the service. Analytics, session recording and advertising have separate purposes and consent choices where required. Referral information is used to attribute eligible bookings and measure referral activity. Each use must have a basis permitted by the law that applies, including valid consent where required; we do not treat acceptance of this policy as blanket consent.
Newsletters, travel inspiration and promotional offers are sent only when you subscribe or otherwise give the required consent. Newsletter and email delivery provider: "". You may withdraw marketing consent at any time using the unsubscribe option in a promotional email or by contacting support. Booking confirmations, payment or refund updates and essential service communications are separate from promotional subscriptions.
Where your reservation is arranged through Booking.com, the booking information needed to create and manage the reservation is sent to Booking.com and may be passed to the accommodation or other relevant travel supplier. This can include booker and guest names, email addresses, telephone number, address, country, selected travel details and payment information required by the selected payment flow. Information provided to a tour operator depends on the tour you choose. We explain additional requirements when requesting the information.
Payment services process the information needed to authorise transactions and handle refunds. Hosting and email services support the operation of the website and communications. tawk.to provides our support chat, and DeepL provides translation. Analytics, session-recording and advertising services receive the information associated with their functions and your applicable choices. Hosting provider: "". Payment provider: "". Email provider: "". You can read the tawk.to privacy notice, DeepL privacy notice and Booking.com privacy notice for information about those services.
Recipients may act on our instructions or have independent responsibilities for the information they receive. An independent provider's retention period is not automatically shortened when Lorvean deletes its own copy. We may disclose relevant information where a lawful request or legal obligation requires it, or where permitted to protect rights and address misuse. Advertising-related disclosures remain subject to the rights and consent requirements that apply to you.
Personal information may be processed in a country different from your own. Main database location: "". Other processing locations: "". Applicable international-transfer arrangements and safeguards: "". Overseas processing must meet the applicable requirements, including any requirements concerning local storage, authorisation or separate consent; this notice does not itself authorise a transfer.
Protecting personal information and limiting access to the purposes described in this notice are responsibilities of the operator. Implemented access controls, security measures and backup arrangements: "". Privacy requests may require proportionate identity verification so that personal information is not disclosed to someone who is not entitled to it.
Cookies and similar browser storage support features such as account sessions, security, language and currency preferences, favourites and booking progress. Separate technologies may be used for analytics, session recording, advertising and referral attribution. Lorvean's own tools and cookies depend on its integrations; they are not automatically the same as those used by a booking partner.
Where consent is required, optional analytics, session recording, advertising and referral tracking must wait for your choice. You may decline or withdraw optional consent without subscribing to marketing or agreeing to unrelated tracking as a condition of booking. Cookie preference mechanism: "". You can also manage stored cookies through your browser, although blocking technologies needed for a feature may affect how that feature works.
The referral cookie described for Lorvean links the first eligible referral for up to 30 days, subject to the applicable consent rules. Other cookies may be limited to a browser session or remain for a stated period. Current cookie names, providers, purposes and expiry periods: "". Browser cookie expiry, server-side data retention and third-party retention are separate and must be reflected in the settings for each service.
Data retention: we use a 30-day deletion target for ordinary booking and support history after the trip or request is completed and related matters are resolved, or delete sooner when applicable law requires it. Necessary account information is kept while the account is in use and has the same deletion target after closure, subject to any earlier legal deadline. Newsletter information is removed after withdrawal, apart from limited records needed to respect the withdrawal or meet legal requirements. Technical visit history and session recordings under our control have a maximum 30-day retention target from collection, or less where they are no longer needed. A 30-day target does not authorise keeping information after its lawful purpose or permitted retention period ends.
Only necessary records may be kept longer where applicable law or the establishment, exercise or defence of a legal claim requires it, with use and access limited to that purpose. Once the applicable period ends, the information is deleted or irreversibly anonymised. Backup deletion schedule: "". Deleting data from Lorvean does not erase a provider's independent records or public blockchain transactions. A deletion request may affect access to the related account, history or services.
Depending on the law that applies, you may request information about processing, access to your data, correction, deletion, restriction, portability or objection to certain uses. You may withdraw consent where processing relies on it, without changing the lawfulness of earlier processing. Contact support@lorvean.com with your request. We handle requests within the deadlines and limits of applicable law; you may also complain to the competent data protection authority.
Payments and purchases of travel services must be completed by an adult who can enter into the applicable contract. Minors may browse the website and be included as travellers. A parent, guardian or authorised adult must provide any child information needed for a reservation and give any required consent. If you believe child information has been collected without the necessary authority or consent, contact support so the matter can be reviewed.
