1. Who we are
UCP Travel is operated by Zologic in the Netherlands. Zologic acts as the data controller for personal data processed through the platform.
2. What data we collect
Operator account data: company name, contact name, email address, and billing information.
Traveller profile data: name, date of birth, email, phone number, passport details, seat and meal preferences, and loyalty account numbers.
Booking data: search queries, offer selections, booking confirmations, PNRs, payment transaction references, and audit entries linked to mandates.
Technical data: OAuth tokens, session identifiers, MCP tool call logs, IP addresses, and user agent strings used for security and platform operations.
3. Why we process this data
| Purpose | Legal basis |
|---|---|
| Providing the platform and completing bookings | Contract performance |
| Enforcing traveller mandates and booking constraints | Contract performance / legitimate interest |
| Fraud prevention and security | Legitimate interest |
| Audit trail and non-repudiation | Legal obligation / legitimate interest |
| Booking confirmations and operational communications | Contract performance |
| Improving the platform | Legitimate interest |
| Travel-industry and regulatory compliance | Legal obligation |
4. Who we share data with
Traveller data required to complete a booking may be transmitted to travel inventory, payment, and fulfilment providers, as well as to the relevant airline or hotel supplier.
Zologic does not sell personal data to third parties for advertising or marketing purposes.
5. International transfers
Some travel infrastructure providers operate internationally. Where personal data is transferred outside the EEA, appropriate safeguards are applied in accordance with GDPR.
6. Data retention
| Data type | Retention period |
|---|---|
| Traveller profiles | Duration of operator account plus 2 years |
| Booking records and audit logs | 7 years |
| OAuth tokens | Revoked on logout or expiry |
| MCP session logs | 90 days |
7. Your rights
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion, subject to legal retention obligations
- Object to processing based on legitimate interests
- Request data portability
- Withdraw consent where processing depends on consent
To exercise any of these rights, contact contact@zologic.nl.
8. Cookies
The platform uses essential session cookies only. No advertising or tracking cookies are used.
9. Security
Personal data is protected using industry-standard encryption in transit and at rest. Payment data is handled through third-party compliant infrastructure. Access is restricted to authorised personnel.
10. Changes to this policy
This policy may be updated to reflect changes in the platform or applicable law. Material changes may be communicated to registered operators by email.
11. Contact and complaints
Contact Zologic at contact@zologic.nl. If you have concerns about how your data is handled, you may lodge a complaint with the Dutch Data Protection Authority.