Privacy Policy

Last updated: 6 August 2026

1. Who we are

One Way Group LLC ("One Way Tour", "we", "us") is a tour operator registered in the Republic of Armenia, with its registered office at Parpetsi 16, Yerevan, Republic of Armenia. We operate the website onewaytour.com and provide inbound travel services in Armenia and the region.

For any question about this policy or about your personal data, contact us at info@onewaytour.com.

2. Scope

This policy explains what personal data we collect, why we collect it, how we use and store it, and what rights you have. It covers:

• our website onewaytour.com;
• our customer support desk at chat.onewaytour.com;
• conversations you start with us on Facebook Messenger, Instagram Direct and WhatsApp.

3. Data we collect

Data you give us directly. Name, email address, phone number, nationality and travel dates when you book a tour or send us an enquiry; payment confirmation details; any information you choose to include in your messages.

Data we receive when you message us on Meta platforms. When you send a message to our Facebook Page or our Instagram Business account, we receive through the Meta Platform:

• your public profile information — name, username and profile picture;
• your platform-scoped user ID;
• the content of the messages you send us, including attachments;
• message metadata such as delivery and read status and timestamps.

We receive this data only after you initiate a conversation with us. We do not obtain your Facebook or Instagram credentials, your friend list, your posts, or any data unrelated to the conversation you started.

Data collected automatically on our website. IP address, browser type, pages visited and referring URL, collected through standard web server logs and analytics.

4. Why we use it

We use personal data to:

• answer your enquiries and provide customer support;
• prepare, confirm and deliver the travel services you book;
• keep a record of our correspondence with you, so that any agent on our team can continue a conversation you already started;
• comply with accounting and tax obligations under Armenian law.

We do not sell personal data. We do not use data received through the Meta Platform for advertising targeting, profiling, or any purpose other than communicating with you and fulfilling your request.

5. Legal basis

Where the GDPR applies, we process personal data on the basis of: performance of a contract (arranging your tour), our legitimate interest in responding to enquiries addressed to us, and compliance with legal obligations. Where we rely on consent, you may withdraw it at any time.

6. Where the data is stored

Conversations from Facebook Messenger, Instagram Direct and WhatsApp are received and stored in our self-hosted customer support system (Chatwoot) running at chat.onewaytour.com on servers we control. The system is accessible only to authorised employees of One Way Group LLC over an encrypted connection.

Booking and payment records are stored in our internal CRM system, likewise self-hosted.

7. Who we share it with

We share personal data only with:

• service providers strictly necessary to deliver your tour — hotels, transport providers, guides — and only the data they need;
• our hosting and infrastructure providers, acting on our instructions;
• public authorities, where required by law.

We do not transfer your data to any third party for their own marketing purposes.

8. How long we keep it

Message history is retained for up to 24 months from the last message in the conversation. Booking and financial records are retained for the period required by Armenian accounting legislation. After those periods the data is deleted or anonymised.

9. Your rights

You may at any time request:

• access to the personal data we hold about you;
• correction of inaccurate data;
• deletion of your data;
• restriction of processing or objection to it;
• a copy of your data in a portable format.

To exercise any of these rights, write to info@onewaytour.com. We respond within 30 days. For deletion specifically, see our Data Deletion Instructions.

10. Data received through Meta platforms — deletion

If you have contacted us through Facebook Messenger, Instagram Direct or WhatsApp and you want the resulting conversation history deleted from our systems, follow the procedure described on our Data Deletion Instructions page. Deleting the conversation on your side of the Meta platform does not automatically delete our copy — you need to ask us.

11. Children

Our services are not directed at children under 16. We do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Security

We protect personal data with encryption in transit (TLS), access control limited to authorised staff, and regular backups. No system is completely secure, but we take reasonable technical and organisational measures appropriate to the risk.

13. Changes

We may update this policy. The current version is always published at onewaytour.com/privacy-policy with its "Last updated" date. Material changes will be announced on this page.