Security & Data Protection
Last update: September 2026
Security & Data Protection
Our approach combines organizational, technical and operational measures intended to protect information, control access and support the reliable operation of the platform.
Data Protection by Design
TDP is designed to support professional travel businesses handling customer, traveler, supplier and booking information.
Access to information is controlled according to user permissions and operational requirements.
Client data is logically separated to help prevent unauthorized access between organizations.
Access Control
Access to TDP and internal systems is restricted to authorized users.
Permissions are assigned according to responsibilities and should provide access only to information required for the user's role.Where applicable, additional authentication measures such as multi-factor authentication are used to strengthen account security.
Data Encryption
Information transmitted between users and TDP is protected using modern encrypted connections such as SSL/TLS.
The current published policy also states that stored information is protected using encryption provided through TDP's cloud infrastructure.
Infrastructure Security
TDP uses cloud-based infrastructure with technical and physical security controls.
Access to sensitive systems and databases is restricted and protected through security policies, network controls and monitoring.
Activity and System Monitoring
TDP maintains backups to support recovery in the event of technical incidents or data loss.
Backup and recovery procedures are reviewed as part of the platform's operational processes.
Backups and Business Continuity
TravelDesignPlus BV aims to provide reliable and continuous access to TDP.
However, uninterrupted or error-free availability cannot be guaranteed.
Scheduled maintenance, platform updates or unforeseen technical issues may occasionally affect availability. Where reasonably possible, Clients will be informed in advance of planned disruptions.
Secure Development
TDP may connect with or rely on third-party services, infrastructure or integrations.
TravelDesignPlus BV is not responsible for interruptions, changes or failures caused solely by independent third-party providers outside its reasonable control.
Third-Party Providers
TDP may use selected technology and infrastructure providers to operate the platform.
Third-party access should be limited to what is required to provide the relevant service and handled according to appropriate security and data-protection requirements.
Payment Information
TDP does not directly store customer credit-card information.
Where payment functionality is provided through third-party payment services, payment information is handled by the relevant provider.
Data Retention
Personal information is retained only for as long as necessary to provide the Services, meet contractual obligations or comply with applicable legal requirements.
Following termination, data is deleted according to TDP's applicable retention procedures.
Security Incidents
Security events are assessed and handled according to internal incident-management procedures.
Where required by applicable law, affected parties and competent authorities will be informed.
Your Responsibilities
Security is shared between TDP and its users.
Clients should protect login credentials, maintain appropriate user access, remove accounts that are no longer required and report suspected security issues promptly.
Questions or Security Concerns
For security-related questions or to report a concern:
TravelDesignPlus BV
Amsterdam, The Netherlands
KVK: 69887020